[LINK] refusing contactless cards

[Craig Sanders]

On Wed, Jul 31, 2013 at 12:20:16PM +1000, Brendan wrote:
> On 07/31/2013 11:40 AM, Craig Sanders wrote:
> > The current card for this account - used to pay bills - expires next
> > month ("08/14"), so I need to get this sorted and a new non-RFID
> > card issued ASAP.

typo, i meant 08/13

I just called Bendigo Bank and they said "No problem, we just need to
change your account to a cashcard account".  This seemed great and I was
about to go ahead with that when I asked "so what's the difference?". The
difference is that it's no longer a debit card so i can't use it to pay
bills or purchase stuff online, it can ONLY be used in an ATM or EFTPOS
machine.

so now, someone is going to call me back.


> Good luck!
>
> They're trying to move everyone to contactless.  Indeed, they are also
> trying to do away with signatures as well.
>
> If you succeed now, you'll probably only have an additional 3 years.

great. just what i always wanted, a way for people/companies to take
money from my account without requiring ANY action on my part.

what kind or moron would actually think that's a feature?

> Tin foil card wallet?

doesn't help. 

at some point, you've got to remove the card from the wallet to make
a purchase, and even the stupidest RFID skimmer criminals will figure
out that lurking near supermarket checkout lanes is a good way to get
hundreds of cards.

ditto for lurking at the bus stop outside a popular shop, or at a cafe 20
metres away, and hundreds of other locations.


> Craft knife on the rfid chip?

i've seen a few youtube videos on how to disable it (usually involving a
hammer and screwdriver or similar...find the chip, punch it out) - but
i'm not sure if the same technique works in australia without disabling
the smartcard chip too.

i still want the old insert-card-and-enter-pin method to work...and
mag-stripe swiping as a last resort.


BTW yes, i am aware that the "old" style non-RFID smart cards have
several security flaws too - but to steal my cards' numbers someone
would have to physically steal them from me, which is a whole lot harder
than just being with 50m or so with a high gain antenna.

craig

-- 
craig sanders <cas at taz.net.au>