LA LA LA LA LA LA I CAN'T HEAR YOU

[unixronin]

That apparently is the credit card companies' approach to securing RFID-enabled credit cards:  Gag anyone who talks about the security vulnerabilities.  Because what the customer doesn't know won't hurt the stockholders or the senior management, right?

Until, that is, there's a major hack and a whole bunch of customers lose a whole lot of money, and it comes out that the companies knew, but tried to sweep the problem under the rug and pretend it didn't exist instead of doing anything about it...

Comments

[ilcylic.livejournal.com]

Lame. But unsurprising.

[ithildae.livejournal.com]

One of our EE labs dealt with RFID reading. It did not cost $12, it was closer to $35, and about four hours of programming. The antenna and circuit with battery all fit in the palm of your hand. (Being a ham, I attached a bigger antenna.) RFID was never designed to be secure. It was designed to help with shipping and inventory.

OTOH, pay the pump gas machines transmit credit card data over WiFi channels unencrypted. There are bigger security challenges than RFID credit cards.

[sierra-nevada.livejournal.com]

Hmmmm, can you say, "class action"?