 |  |  |  |  |  |  |  |
Black Hat reveals credit data via RFID insecurity
The Black Hat security conferences are always good for a crowd pleasing demonstration or two, and security researcher Adam Laurie was happy to oblige at the latest DC based event. In a 'look no hands' fashion, he was able to pull up account data including name, account number and expiration date from an AMEX credit card and display it on the big screen to the attending masses, without actually removing the card from the wallet of the man who owned it.
Yet this was no trick, but rather a demonstration to get a debate started on the potential security weakness of the RFID smart-chip-enabled technology implemented on some credit cards these days. Laurie combined some simple hardware with a Python-based script to performing his magic. The impact was lessened a little by the fact that the account number shown on-screen was not the one embossed on the card itself and cannot actually be used to make an online transaction. Indeed, American Express has confirmed that this 'alias' number alone would not be accepted as transactionally valid and numerous other security mechanisms would need to kick in to authenticate the payment authorisation. As such, all that was demonstrated here was the potential ease with which data can be read from smart-cards using RFID scanning techniques, without any actual physical contact.
With close on 50 countries around the world using RFID enabled passports, many places also opting for RFID enabled public transit cards and so on, the security implications are still worrying. In Spain, there are apparently even some operations where users can get a RFID tag implanted under the skin. One such application being a beach resort which allows bars and shops to scan your wrist for payment, yet you can enjoy the beach and sea without requiring a wallet.
As always though, convenience needs to be balanced with confidentiality and as the Black Hat demo proves perhaps this particular angle of the RFID transaction is not being given as much serious thought as it should.
Yet this was no trick, but rather a demonstration to get a debate started on the potential security weakness of the RFID smart-chip-enabled technology implemented on some credit cards these days. Laurie combined some simple hardware with a Python-based script to performing his magic. The impact was lessened a little by the fact that the account number shown on-screen was not the one embossed on the card itself and cannot actually be used to make an online transaction. Indeed, American Express has confirmed that this 'alias' number alone would not be accepted as transactionally valid and numerous other security mechanisms would need to kick in to authenticate the payment authorisation. As such, all that was demonstrated here was the potential ease with which data can be read from smart-cards using RFID scanning techniques, without any actual physical contact.
With close on 50 countries around the world using RFID enabled passports, many places also opting for RFID enabled public transit cards and so on, the security implications are still worrying. In Spain, there are apparently even some operations where users can get a RFID tag implanted under the skin. One such application being a beach resort which allows bars and shops to scan your wrist for payment, yet you can enjoy the beach and sea without requiring a wallet.
As always though, convenience needs to be balanced with confidentiality and as the Black Hat demo proves perhaps this particular angle of the RFID transaction is not being given as much serious thought as it should.
0
•
•
•
•
I can do this on my Chase blink card too. On the Chase card it is the same number as on the front of the card.
This can be blocked by keeping the card in one of the Identity Stronghold sleeves that he shows on his website rfidiot.org
Why don't the credit card companies just send out the sleeve with their cards?
You can buy them at www.idstronghold.com or in the UK www.smartcardfocus.com/skimstopper
This can be blocked by keeping the card in one of the Identity Stronghold sleeves that he shows on his website rfidiot.org
Why don't the credit card companies just send out the sleeve with their cards?
You can buy them at www.idstronghold.com or in the UK www.smartcardfocus.com/skimstopper
0
•
•
•
•
I HACK AND SELL CVV'S ONLY...
HAVE GOT DIFFERENT COUNTRIES LIKE:
Afghanistan
Albania
Algeria
American Samoa
Andorra
Angola
Antigua and Barbuda
Argentina
Australia
Aruba
Bahamas
Banaba Island
Belgium
Benin
Bosnia and Herzegovina
Brazil
British Virgin Islands
Brunei
Bulgaria
Cameroon
Canada
Chad
Chile
China
Colombia
Costa Rica
Cote d'Ivoire
Croatia
Cuba
Denmark
Ecuador
Egypt
Ethiopia
France
Greece
Mali
Malta
Zambia
and many more........
Fullz info:
Address 1:
Address 2:
City:
State:
Zip:
Country:
Home Phone:
Date Of Birth:
Social Security Number:
Mothers Maiden Name:
Drivers License Number:
Drivers License State:
Secret Question 1:
Secret Question Answer 1:
Secret Question 2:
Secret Question Answer2:
Name On Card:
Credit Card Number:
Credit Card Brand:
Credit Card Type:
Start Date:
EXP Date:
issue Number:
Credit Card PIN Number:
Card ID Number:
Card Bank Name:
Card 1800 Number:
VerifiedByVisa Pass:
email:
email pass:
ip:
bank name:
Bank Account Number :
Bank Routing
NORMAIL CVV
Address 1:
Address 2:
City:
State:
Zip:
Country:
Home Phone:
Name On Card:
Credit Card Number:
Credit Card Type:
EXP Date:
cvv2 number :
email:
NOTE:
NO FREE STUFF AVAILABLE FOR BEGGERS AND TALKERS,IF YOU REALLY WANNA DEAL? BUY AND TEST FOR DEMO,THEN YOU CAN TALK ABOUT ME.
ALSO GOT FRESH LEEDS,DUMPS,FUD STEALER AND MANY MORE.......
INTERESTED BUYERS SHOULD CONTACT ME ..
www.hacktoolsonline.ucoz.com
EMAIL ME AT:fraquaxy@yahoo.com
fraquaxy@gmail.com
fraquaxy@icqmail.com
PM ME AT..........
yahoo im:fraquaxy
google im: fraquaxy
ICQ number is 599119334
PAYMENT MODE: LIBERTY RESERVE (WWW.LIBERTYRESERVE.COM)
HAVE GOT DIFFERENT COUNTRIES LIKE:
Afghanistan
Albania
Algeria
American Samoa
Andorra
Angola
Antigua and Barbuda
Argentina
Australia
Aruba
Bahamas
Banaba Island
Belgium
Benin
Bosnia and Herzegovina
Brazil
British Virgin Islands
Brunei
Bulgaria
Cameroon
Canada
Chad
Chile
China
Colombia
Costa Rica
Cote d'Ivoire
Croatia
Cuba
Denmark
Ecuador
Egypt
Ethiopia
France
Greece
Mali
Malta
Zambia
and many more........
Fullz info:
Address 1:
Address 2:
City:
State:
Zip:
Country:
Home Phone:
Date Of Birth:
Social Security Number:
Mothers Maiden Name:
Drivers License Number:
Drivers License State:
Secret Question 1:
Secret Question Answer 1:
Secret Question 2:
Secret Question Answer2:
Name On Card:
Credit Card Number:
Credit Card Brand:
Credit Card Type:
Start Date:
EXP Date:
issue Number:
Credit Card PIN Number:
Card ID Number:
Card Bank Name:
Card 1800 Number:
VerifiedByVisa Pass:
email:
email pass:
ip:
bank name:
Bank Account Number :
Bank Routing
NORMAIL CVV
Address 1:
Address 2:
City:
State:
Zip:
Country:
Home Phone:
Name On Card:
Credit Card Number:
Credit Card Type:
EXP Date:
cvv2 number :
email:
NOTE:
NO FREE STUFF AVAILABLE FOR BEGGERS AND TALKERS,IF YOU REALLY WANNA DEAL? BUY AND TEST FOR DEMO,THEN YOU CAN TALK ABOUT ME.
ALSO GOT FRESH LEEDS,DUMPS,FUD STEALER AND MANY MORE.......
INTERESTED BUYERS SHOULD CONTACT ME ..
www.hacktoolsonline.ucoz.com
EMAIL ME AT:fraquaxy@yahoo.com
fraquaxy@gmail.com
fraquaxy@icqmail.com
PM ME AT..........
yahoo im:fraquaxy
google im: fraquaxy
ICQ number is 599119334
PAYMENT MODE: LIBERTY RESERVE (WWW.LIBERTYRESERVE.COM)
0
•
•
•
•
cvvsellerforbe@yahoo.fr I sell fresh login bank, I make the bank transfers and paypal. I sell cc, cvv, dumps, tracks sock VIP, I make the plane reservations and hotel. my only paiement accept is wu
. Please no test Contact me
YH: cvvsellerforbe
email: cvvsellerforbe@yahoo.fr
i sell fresh
Ccv US is $ 1.5 per ccv (Visa)
Ccv US is $ 2 per ccv (master)
Ccv US is $ 3 per ccv (Amex + Discover)
Ccv UK is $ 5 per ccv (Visa + Master)
Ccv UK is $ 6 per ccv (Amex + swith)
Ccv Ca is $ 6 per ccv (Visa+ Master)
Ccv Ca is $ 9 per ccv (Visa Business + Visa Gold)
Ccv EU is $ 6 per ccv (Visa + Master)
Ccv EU is $ 7 per ccv (Amex + Discover)
Ccv Au is $ 6 per ccv
Ccv Italy is 15 $ per cc
seden 12$
spain 10$
france 12$
Ccv Germany is 14$ Per Ccv
Ccv DOB with US is 13 $ per ccv
Ccv DOB with UK is 14 $ per ccv
Ccv DOB + BIN with UK 20$ per ccv
Ccv US full info is 20 $ per ccv
Ccv UK full info is 30 $ per ccv
1 Uk check bins= 12.5$/1cvv
1 Sock live = 1$/1sock live > 5day
cvvsellerforbe@yahoo.fr
YH: cvvsellerforbe
- Balance In Chase:....................70K To 155K ========300$
- Balance In Wachovia:.............24K To 80K==========180$
- Balance In Boa......................75K To 450K==========400$
- Balance In Credit Union:.........Any Amount:=========420$
- Balance In Hallifax..............ANY AMOUNT=========420$
- Balance In Compass.............ANY AMOUNT=========400$
- Balance In Wellsfargo..........ANY AMOUNT=========400$
- Balance In Barclays..................80K To 100K=========550$
- Balance In Abbey:..............................82K ===========650$
- Balance in Hsbc:.......................50K========650$ and more
1 Paypal with pass email = 50$/paypal
1 Paypal don't have pass email = 20$/Paypal
1 Banklogin us or uk (personel) = 350$
cvvsellerforbe@yahoo.fr
YH: cvvsellerforbe
Track 1/2 Visa Classic, MasterCard Standart
* US - 13$
* UK - 17$
* EU - 24$
* AU - 26$
Track 1/2 Visa Gold | Platinum | Business | Signature, MasterCard Gold | Platinum
* US - 17$
* UK - 20$
* EU - 28$
* AU - 30$
cvvsellerforbe@yahoo.fr
YH: cvvsellerforbe
Bank transfer
Balance 71.000$
CITIBANK SOUTH DAKOTA, N.A. Balance 65.000$
Wachovia: 76.000$
Abbey: 65.000£
Hsbc : 87.000$
Hallifax : 97.000£
Barclays: 110.000£
please no test
contact me;
YH: cvvsellerforbe
cvvsellerforbe@yahoo.fr
Prices For Bin and Its List:
4547,5506,5569,5404,5031,4921, 5505,5506,4921,4550 ,4552,4988,5186,4462,4543,4567 ,4539,5301,4929,5521 , 4291,5051,4975,5413 5255 4563,4547 4505,4563 5413 5255,5521,5506,4921,4929,54609 7,5609,54609,4543, 4975,5432,5187 ,4973,4627,4049,4779,426565,55 05, 5549, 5404, 5434, 5419, 4670,456730,541361, 451105,4670,5505, 5549, 5404, 5434, 5419, 4670,374288,545140,454634,3791 with d.o.b,4049,4462,4921.4929.4627
UK Nomall NO BINS(Serial) with DOB is :10$
UK with BINS(Serial) with DOB is :15$
UK Nomall no BINS(Serial) no DOB is: 6$
UK with BINS(Serial) is :12$
. Please no test Contact me
YH: cvvsellerforbe
email: cvvsellerforbe@yahoo.fr
i sell fresh
Ccv US is $ 1.5 per ccv (Visa)
Ccv US is $ 2 per ccv (master)
Ccv US is $ 3 per ccv (Amex + Discover)
Ccv UK is $ 5 per ccv (Visa + Master)
Ccv UK is $ 6 per ccv (Amex + swith)
Ccv Ca is $ 6 per ccv (Visa+ Master)
Ccv Ca is $ 9 per ccv (Visa Business + Visa Gold)
Ccv EU is $ 6 per ccv (Visa + Master)
Ccv EU is $ 7 per ccv (Amex + Discover)
Ccv Au is $ 6 per ccv
Ccv Italy is 15 $ per cc
seden 12$
spain 10$
france 12$
Ccv Germany is 14$ Per Ccv
Ccv DOB with US is 13 $ per ccv
Ccv DOB with UK is 14 $ per ccv
Ccv DOB + BIN with UK 20$ per ccv
Ccv US full info is 20 $ per ccv
Ccv UK full info is 30 $ per ccv
1 Uk check bins= 12.5$/1cvv
1 Sock live = 1$/1sock live > 5day
cvvsellerforbe@yahoo.fr
YH: cvvsellerforbe
- Balance In Chase:....................70K To 155K ========300$
- Balance In Wachovia:.............24K To 80K==========180$
- Balance In Boa......................75K To 450K==========400$
- Balance In Credit Union:.........Any Amount:=========420$
- Balance In Hallifax..............ANY AMOUNT=========420$
- Balance In Compass.............ANY AMOUNT=========400$
- Balance In Wellsfargo..........ANY AMOUNT=========400$
- Balance In Barclays..................80K To 100K=========550$
- Balance In Abbey:..............................82K ===========650$
- Balance in Hsbc:.......................50K========650$ and more
1 Paypal with pass email = 50$/paypal
1 Paypal don't have pass email = 20$/Paypal
1 Banklogin us or uk (personel) = 350$
cvvsellerforbe@yahoo.fr
YH: cvvsellerforbe
Track 1/2 Visa Classic, MasterCard Standart
* US - 13$
* UK - 17$
* EU - 24$
* AU - 26$
Track 1/2 Visa Gold | Platinum | Business | Signature, MasterCard Gold | Platinum
* US - 17$
* UK - 20$
* EU - 28$
* AU - 30$
cvvsellerforbe@yahoo.fr
YH: cvvsellerforbe
Bank transfer
Balance 71.000$
CITIBANK SOUTH DAKOTA, N.A. Balance 65.000$
Wachovia: 76.000$
Abbey: 65.000£
Hsbc : 87.000$
Hallifax : 97.000£
Barclays: 110.000£
please no test
contact me;
YH: cvvsellerforbe
cvvsellerforbe@yahoo.fr
Prices For Bin and Its List:
4547,5506,5569,5404,5031,4921, 5505,5506,4921,4550 ,4552,4988,5186,4462,4543,4567 ,4539,5301,4929,5521 , 4291,5051,4975,5413 5255 4563,4547 4505,4563 5413 5255,5521,5506,4921,4929,54609 7,5609,54609,4543, 4975,5432,5187 ,4973,4627,4049,4779,426565,55 05, 5549, 5404, 5434, 5419, 4670,456730,541361, 451105,4670,5505, 5549, 5404, 5434, 5419, 4670,374288,545140,454634,3791 with d.o.b,4049,4462,4921.4929.4627
UK Nomall NO BINS(Serial) with DOB is :10$
UK with BINS(Serial) with DOB is :15$
UK Nomall no BINS(Serial) no DOB is: 6$
UK with BINS(Serial) is :12$
Similar Threads
- Black Hat SEO??? (Search Engine Optimization)
- Black Hat SEO ? (Search Engine Optimization)
- Where should I save credit card data? (PHP)
- News Story: Department for Homeland Insecurity (Network Security)
| Thread Tools | Search this Thread |
You need to join our community in order to build your list of favorite forums. You can visit the forum index for a listing of all forums.
Related Forum Features
Latest PCI and Add-In Cards Posts
- Today's Posts
- Unanswered Threads
advertising age amd android apple avatar bluegene botnet broadband browser business cellphone censorship china chips copyright crime data database development dos downloads economy email energy enterprise europe facebook firefox games gaming google government hacker hacking hardware ibm ibm.news intelibm internet iphone ipod itunes law legal linux mac malware marketing medicine memory microsoft mobile mozilla music news openoffice opensource os pc phishing piracy porn privacy ps3 recession redhat report research russia satnav search security sex socialnetworking software sony spam sun supercomputer supercomputing survey technology trends trojan twitter ubuntu uk video virus vista web windows windows7 working worm x86 xbox yahoo youtube
