[access-uk] Re: Contactless payment cards (was Accessible bank card)

  • From: "Barry Hill" <barry.hill3@xxxxxxx>
  • To: <access-uk@xxxxxxxxxxxxx>
  • Date: Thu, 9 Apr 2015 14:40:19 +0100

I've lined my wallet with tin foil and tried holding my wallet with the card
inside on a payment machine and it didn't work at all. So, I doubt very
much that anyone can get the info off my card unless it's out of my wallet,
which is only when I'm deliberately using it. It's a silly precaution, but
it works.

Cheers

Barry


-----Original Message-----
From: access-uk@xxxxxxxxxxxxx [mailto:access-uk@xxxxxxxxxxxxx] On Behalf Of
dudleym@xxxxxxxxxxxx
Sent: Wednesday, April 08, 2015 7:55 PM
To: access-uk@xxxxxxxxxxxxx
Subject: [access-uk] Re: Contactless payment cards (was Accessible bank
card)

Hi, if the only info you can't get is the name on the card and the
cvv cryptogram then I wouldn't be at all comfortable. If they can
get the card number, expiry date
info and somehow find out your name then they could quite easily
purchase from amazon, no 3 digit security is required. I just created
a new account with them,put in the account number and expiry date and
hey presto my purchase went through.
Not a chance that I'd have one of these cards.

Martin

lsmithso@xxxxxxxxxxxxxxxx recently said:-


Hi: A while ago there was a conversation on here about the
accessability and security of contactless payment cards. I received
mine a few weeks ago, and finally got around to testing if I could
read it with a smart phone.

The answer is yes. I can read the card number, the expiry date, card
type, the card issuer and the number of PIN attempts left, and that
was that. The card holders name and the cvv cryptogram are not
readable.

The card has to be held within 1cm of the back of the phone for about
0.5 seconds for it to be read. It could be reliably read when inside
my wallet, in my trouser pocket. Wrapping the card in a single
thickness of cooking foil completely prevented the card from being
read.

Given that less information is exposed by NFC than is available from a
casual glance of the card, and that any eavesdropper would have to get
pretty touchy feely to be able to scan my card without my knowledge,
then I'm pretty relaxed about having this card in my wallet. I feel
no more vulnerable than if I used a non-contactless card.

App details:
Banking card reader NFC (EMV)
https://play.google.com/store/apps/details?id=com.github.devnied.emvnfccard
&hl=en

Android Nexus 5.

--
Les Smithson
** To leave the list, click on the immediately-following link:-
** [mailto:access-uk-request@xxxxxxxxxxxxx?subject=unsubscribe]
** If this link doesn't work then send a message to:
** access-uk-request@xxxxxxxxxxxxx
** and in the Subject line type
** unsubscribe
** For other list commands such as vacation mode, click on the
** immediately-following link:-
** [mailto:access-uk-request@xxxxxxxxxxxxx?subject=faq]
** or send a message, to
** access-uk-request@xxxxxxxxxxxxx with the Subject:- faq

** To leave the list, click on the immediately-following link:-
** [mailto:access-uk-request@xxxxxxxxxxxxx?subject=unsubscribe]
** If this link doesn't work then send a message to:
** access-uk-request@xxxxxxxxxxxxx
** and in the Subject line type
** unsubscribe
** For other list commands such as vacation mode, click on the
** immediately-following link:-
** [mailto:access-uk-request@xxxxxxxxxxxxx?subject=faq]
** or send a message, to
** access-uk-request@xxxxxxxxxxxxx with the Subject:- faq


---
This email has been checked for viruses by Avast antivirus software.
http://www.avast.com

** To leave the list, click on the immediately-following link:-
** [mailto:access-uk-request@xxxxxxxxxxxxx?subject=unsubscribe]
** If this link doesn't work then send a message to:
** access-uk-request@xxxxxxxxxxxxx
** and in the Subject line type
** unsubscribe
** For other list commands such as vacation mode, click on the
** immediately-following link:-
** [mailto:access-uk-request@xxxxxxxxxxxxx?subject=faq]
** or send a message, to
** access-uk-request@xxxxxxxxxxxxx with the Subject:- faq

Other related posts: