Reading credit card through your clothing and billfold.
-
If criminals truly could do that then they would be better of starting a company to sell these super readers.
China has been doing it for ages for card swiping devices. In India, ATMs have been discovered to have an extra card reader attached to them by criminals (usually, IT folks who think they are smarter than the rest of the world). These are so thin and are attached to the slot where you put in your ATM card so users don't notice something is amiss. These devices can be had for a few tens of dollars from China. As to the need to input PIN codes, the thieves usually attach a tiny camera so that the users' PIN codes can be captured too!
-
There is a story going around that there is a device that can read your credit card information through your billfold, pocket book, and clothing. The information on the cards are on a magnetic strip and/or a chip. I've had to swipe my card more than once to get a reader at a store to read it. The more I think about it reading the strip or chip through all the above and not even rubbing up against the person carrying the card would be unlikely at best. An episode of NCIS had a girl doing just that. Okay you knowers of all things tech, is this possible?
My first such card, many years ago, was from AMEX. It came with a chip. In order to improve security I undertook a simple procedure:
Carefully placed a screwdriver over the center of the chip, taking care that it didn't overlap into the card, itself
Even more carefully, but extremely firmly, appling a hammer to the other end of the screw driver
This significantly enhanced the security with respect to remote scanning.
"The difference between genius and stupidity is that genius has its limits." - Albert Einstein
"As far as we know, our computer has never had an undetected error." - Weisert
"If you are searching for perfection in others, then you seek disappointment. If you are seek perfection in yourself, then you will find failure." - Balboos HaGadol Mar 2010
-
They can do it, it you have Contactless payment[^] cards - as all new ones in the UK seem to be. The contactless payment bank cards just need to be offered to the shop reader for sums up to about £30, and RFID reads the card details and executes the transaction with no further input (such as PIN id). If you have the RFID reader then close proximity to the card in your wallet is sufficient. Crowded spaces (tube trains and so forth) ad good hunting grounds apparently.
Bad command or file name. Bad, bad command! Sit! Stay! Staaaay...
So the next level of card skimming should be called trawling. :laugh:
-
Doesn't work that way. Each device on the network is registered with the server, so when a request is made for a payment it's not automagically paid down the wire, but it goes to the registered owners account. If a device is not on the network it can read the cards but, crucially, not send in payment requests. Now with the contactless, the details only work for a contactless device making a payment request. It's not like I can read your card # from a contactless reader and then use it yo shop on Amazon, the details are different.
veni bibi saltavi
Um... Virtual pickpockets steal money from contactless bank cards by bumping into victims claims Londoner[^] Contactless payment card theft: How is the data stolen – and what can I do to protect myself? | Home News | News | The Independent[^] Contactless card theft: Users warned to watch out for 'digital pickpockets' | News | Lifestyle | The Independent[^] Contactless payments mean card fraud now happens after cancellation | Money | The Guardian[^] OK, that's all written by media people who have difficult understanding what a PIN code is, let alone how it works in practice - but you know and I know that the banks always claim their technology is a lot more secure than it actually is! :laugh: I can think of quite a few ways to make contactless theft work for a pretty small outlay - and I'm sure you could think of a dozen more.
Bad command or file name. Bad, bad command! Sit! Stay! Staaaay...
-
Um... Virtual pickpockets steal money from contactless bank cards by bumping into victims claims Londoner[^] Contactless payment card theft: How is the data stolen – and what can I do to protect myself? | Home News | News | The Independent[^] Contactless card theft: Users warned to watch out for 'digital pickpockets' | News | Lifestyle | The Independent[^] Contactless payments mean card fraud now happens after cancellation | Money | The Guardian[^] OK, that's all written by media people who have difficult understanding what a PIN code is, let alone how it works in practice - but you know and I know that the banks always claim their technology is a lot more secure than it actually is! :laugh: I can think of quite a few ways to make contactless theft work for a pretty small outlay - and I'm sure you could think of a dozen more.
Bad command or file name. Bad, bad command! Sit! Stay! Staaaay...
The Graniad and Indi articles are both hogwash. One is about stolen cards and how they're not checked and POS; not the card holder's liability but the providers. The second about using card details taken using contactless readers to skim cards is using a viral story, original picture from Russia, forgets the detail about what the cards give out using RFID. The one referencing Which? research is interesting. I will read up on that and post a considered opinion later. However, if your card is defrauded in any way then unless you're Wuckfit McWuckfitface and gave away details you will be reimbursed; banks cannot afford not to. In theory.
veni bibi saltavi
-
They can do it, it you have Contactless payment[^] cards - as all new ones in the UK seem to be. The contactless payment bank cards just need to be offered to the shop reader for sums up to about £30, and RFID reads the card details and executes the transaction with no further input (such as PIN id). If you have the RFID reader then close proximity to the card in your wallet is sufficient. Crowded spaces (tube trains and so forth) ad good hunting grounds apparently.
Bad command or file name. Bad, bad command! Sit! Stay! Staaaay...
That explains it, walked into a brothel last night and came out broke. Going again tonight. :)
New version: WinHeist Version 2.2.2 Beta
I told my psychiatrist that I was hearing voices in my head. He said you don't have a psychiatrist! -
They can do it, it you have Contactless payment[^] cards - as all new ones in the UK seem to be. The contactless payment bank cards just need to be offered to the shop reader for sums up to about £30, and RFID reads the card details and executes the transaction with no further input (such as PIN id). If you have the RFID reader then close proximity to the card in your wallet is sufficient. Crowded spaces (tube trains and so forth) ad good hunting grounds apparently.
Bad command or file name. Bad, bad command! Sit! Stay! Staaaay...
-
There is a story going around that there is a device that can read your credit card information through your billfold, pocket book, and clothing. The information on the cards are on a magnetic strip and/or a chip. I've had to swipe my card more than once to get a reader at a store to read it. The more I think about it reading the strip or chip through all the above and not even rubbing up against the person carrying the card would be unlikely at best. An episode of NCIS had a girl doing just that. Okay you knowers of all things tech, is this possible?
If you're talking about the mag stripe, then no. But the chip on the card (for those advanced nations that actually use chips in their credit cards. ahem)? Absolutely.
cheers Chris Maunder
-
There is a story going around that there is a device that can read your credit card information through your billfold, pocket book, and clothing. The information on the cards are on a magnetic strip and/or a chip. I've had to swipe my card more than once to get a reader at a store to read it. The more I think about it reading the strip or chip through all the above and not even rubbing up against the person carrying the card would be unlikely at best. An episode of NCIS had a girl doing just that. Okay you knowers of all things tech, is this possible?
If you're concerned, RFID can easily be shielded by a layer of aluminum foil. I'm sure there are still readers that can read through that, but most can't, and all you need, is to be harder to access than the guy next to you. You can either wrap your card in some aluminum foil, or make your own duct tape wallet and put a layer of it between the layers of duct tape. If you go the wallet route, just be sure to leave an unshielded pocket on the outside someplace for your RFID key card for work, as it's really inconvenient to have to take the card out of your wallet every time you want to get in the door :)
We can program with only 1's, but if all you've got are zeros, you've got nothing.
-
There is a story going around that there is a device that can read your credit card information through your billfold, pocket book, and clothing. The information on the cards are on a magnetic strip and/or a chip. I've had to swipe my card more than once to get a reader at a store to read it. The more I think about it reading the strip or chip through all the above and not even rubbing up against the person carrying the card would be unlikely at best. An episode of NCIS had a girl doing just that. Okay you knowers of all things tech, is this possible?
Aw, cr@p! Your credit limit isn't anywhere near enough to buy that yacht I've been looking at. Could you ask your richer friends to stand within thirty feet or your PC?
I wanna be a eunuchs developer! Pass me a bread knife!
-
There is a story going around that there is a device that can read your credit card information through your billfold, pocket book, and clothing. The information on the cards are on a magnetic strip and/or a chip. I've had to swipe my card more than once to get a reader at a store to read it. The more I think about it reading the strip or chip through all the above and not even rubbing up against the person carrying the card would be unlikely at best. An episode of NCIS had a girl doing just that. Okay you knowers of all things tech, is this possible?
I've got an old Vintage pair of X-Ray Specs, if you've got the cash. And do you need any bridges?
I wanna be a eunuchs developer! Pass me a bread knife!
-
They can do it, it you have Contactless payment[^] cards - as all new ones in the UK seem to be. The contactless payment bank cards just need to be offered to the shop reader for sums up to about £30, and RFID reads the card details and executes the transaction with no further input (such as PIN id). If you have the RFID reader then close proximity to the card in your wallet is sufficient. Crowded spaces (tube trains and so forth) ad good hunting grounds apparently.
Bad command or file name. Bad, bad command! Sit! Stay! Staaaay...
US Passports have RFID as well. Although the information is encrypted (ish), my understanding is that they can tell what country you are from. As in (If you get a response, and they look American, they probably are!) We use RFID Passport cases to block this. Avoiding being scanned. Anyone can build a domed signal amplifier and increase the range (in fact, the "repeater" version of this is being used to unlock high end cars by pinging against the keys in the house, boosting the signal and tricking the car to unlock the door here in the states). So, my keys go inside a metal cup when in the house. I use these for my credit cards: Amazon RFID Pouches[^] (12 for about 10USD) What I did was to CUT one long edge open, and a small flap on the corner. This lets me slip the card in and out naturally. But it appears to work quite well. I put 2 cards in one pouch. The two I use all the time. HTH
