ITPRO

Printed from www.itpro.co.uk

Register to receive our regular email newsletter at http://www.itpro.co.uk/reg/register.

The newsletter contains links to our latest IT news, product reviews, features and how-to guides, plus special offers and competitions.

Skip to navigation

    Security expert reveals RFID credit card hack

Expert takes to the stage at conference to demonstrate security flaws in RFID credit card technology.

By Benny Har-Even, 22 Feb 2008 at 14:19

At this week's Black Hat DC security conference, security expert Adam Laurie used a Python-based script to reveal significant security failings in the RFID technology used in some credit cards.

Using the Python tool and some hardware available from his website, Laurie was able to bring up the name and account number from an American Express card belonging to an audience volunteer on the large viewing screen for everyone to see. This was done without touching the man, or even removing the card from his wallet.

RFID tags are found in many places these days, such as credit cards, the Oyster travel cards used in London by public transport customers, inside clothes and other retail products and in most modern passports. This test reveals the worrying possibility that thieves could surreptitiously obtain sensitive information at a distance using little more than a handheld scanner device.

The number displayed on the presentation screen was not the number on the front of the card, but according to Laurie, could still be used for online transactions. Laurie stated that he had spoken directly to American Express about this issue and its response was: "We are comfortable with the security of our product".

Today the EU revealed draft guidelines stating that RFID tags on retail items will have to be deactivated to ensure purchaser privacy.

Email to a friend

Print this page

< Previous   Security : News Next >

Be the first to comment on this article

You need to Login or Register to comment.

 Sponsored Links

advertisement
advertisement

    Register for IT PRO

You'll get exclusive member benefits including free whitepapers, downloads, Webinars and weekly newsletters full of the latest IT PRO news, reviews, insight and expertise.

Sponsored Links
Advertisement