Bank Cards at Risk?

Black Swan

Just got a debit bank card that gives access to my checking and savings accounts through ATMs, but with a new feature they call "Just Tap and Go!" They list several fast food and retail establishments where you do not have to slide your card through the reader (to read the magnetic strip), but rather you can just tap or otherwise come in close proximity with a special reader and the item you are buying will be immediately deducted from your checking account. This sounds like RFID technology? If so, could a hacker/cracker also have a reader that activates your card when you pass by him and captures your name, account number, expiration date, etc.?

Does this mean, in addition to my tinfoil hat, I now need to cover my new "Just Tap and Go!" bank debit card with tinfoil too?:rolleyes:

GerardKeating

Blue_Lagoon wrote: »

Just got a debit bank card that gives access to my checking and savings accounts through ATMs, but with a new feature they call "Just Tap and Go!" They list several fast food and retail establishments where you do not have to slide your card through the reader (to read the magnetic strip), but rather you can just tap or otherwise come in close proximity with a special reader and the item you are buying will be immediately deducted from your checking account. This sounds like RFID technology? If so, could a hacker/cracker also have a reader that activates your card when you pass by him and captures your name, account number, expiration date, etc.?

Does this mean, in addition to my tinfoil hat, I now need to cover my new "Just Tap and Go!" bank debit card with tinfoil too?:rolleyes:

It is not soo easy to capture data, the will be a challange to the Chip on your card, and the Chip will need to be "convinced" to talk.

Also this is only good for low value purchases (under £10 in the UK, not sure of the EUR limit) anything over the limit is requires youir pin as before.

One "advantage" of contactless cards, is it never leaves your posession, so no sneeky person can skim the mag stripe.

Might i ask, is this an Irish bank, I know Barclay in the UK have a trial, but i was not aware of an Irish trial. (am not actauly asknig which bank).

Martyr

Until we know what bank it is, or atleast what technology is being used, we can only speculate.

GerardKeating

Average Joe wrote: »

Until we know what bank it is, or atleast what technology is being used, we can only speculate.

The Tech is know, it is a form of near field communication, rather than RFID.

Martyr

OK, if you know what it is, who makes it?
what encryption is used?

GerardKeating

Average Joe wrote: »

OK, if you know what it is, who makes it?
what encryption is used?

Both Visa and Mastercard are trialing "Contactless" credit cards, Barclay in the UK are donig the visa trial, in conjunction with the Oystercard, range is only a few inches...

Black Swan

GerardKeating wrote: »

Both Visa and Mastercard are trialing "Contactless" credit cards, Barclay in the UK are donig the visa trial, in conjunction with the Oystercard, range is only a few inches...

Temporarily overseas attending university. It's no "trial," as Mastercard, in conjunction with my bank, are issuing this debit/credit card to all customers (without asking customers if they want the new feature). Card expiration dates are about 3 years away.

GerardKeating

Blue_Lagoon wrote: »

Temporarily overseas attending university. It's no "trial," as Mastercard, in conjunction with my bank, are issuing this debit/credit card to all customers (without asking customers if they want the new feature). Card expiration dates are about 3 years away.

Still a trial in the UK, i assume you were this side of the big pond.

cheers

gerard

_CreeD_

They're advertising this here in the states and it looks like one huge security mistake. Whatever about the amount of time it will take for someone to break the system now all they have to do to gather the base data is walk past you with a concealed reader. Marketing +1, Security -10.

GerardKeating

_CreeD_ wrote: »

They're advertising this here in the states and it looks like one huge security mistake. Whatever about the amount of time it will take for someone to break the system now all they have to do to gather the base data is walk past you with a concealed reader. Marketing +1, Security -10.

A reader wont actually do anything for you, if you do not supply the correct credentials to the chip, it wont talk back.

Also, there is a very low (£10 in UK) limit on contactless transactions.

Capt'n Midnight

you can increase range with antennas / more power

Lets say the limit is £10 per transaction
Is the best way to get on a crowded DART and rip off 50 people
or rip off one person 50 times in quick succession ?