[LINK] refusing contactless cards

Scott Howard scott at doc.net.au
Thu Aug 1 13:34:41 AEST 2013


On Wed, Jul 31, 2013 at 10:45 PM, Craig Sanders <cas at taz.net.au> wrote:

> because i don't want to carry something in my wallet that can be scanned
> remotely to give an attacker my name, credit card number, CCV code (and
> possibly other details including my address - i'm not sure about the
> address but the other three pieces of data are certain) without any
> action on my part and without even my knowledge that it has happened.
>

FUD is fun, isn't it.

Modern contactless cards do not contain the card number on the chip.
They also doesn't contain the CVV1 or CVV2 numbers (I'm presuming that's
what you mean when you refer to the CCV code?!)
They doesn't contain your address.
And they likely doesn't contain your name (although they optionally can).

I hope that in addition to destroying the contactless chip/antenna you're
also sanding off the physical numbers and painting over them.  After all, a
high-resolution camera is still cheaper than an RFID reader, and very
simple to aim at the credit card reader in your local supermarket,
capturing all of the same information as above.

  Scott



More information about the Link mailing list