Collaborate Disseminate
We use EMV card readers to automate the payments at the entry and exit to our services. These card readers and the unattended payment terminals are fully PTS complaint and use P2PE encryption. Also, implemented by PCI-DSS com… Continue reading PCI-DSS scope: Using P2PE Compliant devices
Fraud investigators say they’ve uncovered a sophisticated new breed of credit card skimmers being installed at gas pumps that is capable of relaying stolen card data via mobile text message, thereby enabling fraudsters to collect it from anywhere in the world. One interesting component of this criminal innovation is a small cellphone and Bluetooth-enabled device hidden inside the contactless payment terminal of the pump, which appears to act as a Bluetooth hub that wirelessly gathers card data from multiple compromised pumps at a given filling station. Continue reading New Breed of Fuel Pump Skimmer Uses SMS and Bluetooth
I’ve been trying to experiment with cloning NFC cards as part of an experiment. I’ve successfully got to the point where I’ve got a dump of both cards (done with Mifare Classic Tool).
After the ‘write’ to the clone card, the… Continue reading Cloning NFC card failed – dump looks identical
Near-field communication (NFC) is a set of protocols that enables two electronic devices to establish communication by bringing them very close together. Usually the devices must be within less than 4cm. Contactless payment systems use NFC devices, inc… Continue reading NFCdrip: Data Exfiltration Research in Near Field Communication
What are the best ways for NFC encryption with high level of security? Basically, I am interested to have a NFC which can only be read/authenticated with a mobile app/reader. In other words, the NFC must be encrypted in a way… Continue reading What is the most secure NFC Encryption system?
You are standing in front of a building with 3 rooms and have a NXP Mifare Classic 1k card.
In the first room is a device (device1) that can do the following things:
Shows how much money is on the card.
Increase the value… Continue reading Security of RFID/NFC card Payment [on hold]
Back in the early days of Arduino proliferation (and before you ask, yes we realize there was a time before that too), wireless was a strange and foreign beast. IR communication was definitely a thing. And if you had the funds there was this cool technology called ZigBee that was available, often in funny blue house-shaped XBee boards. With even more funds and a stomach for AT commands you could even bolt on a 2G cell radio for unlimited range. WiFi existed too, but connecting it to a hobbyist ecosystem of boards was a little hairier (though maybe not for …read more
Air-gapping means physically isolating a secure computer from unsecured networks, such as the public Internet or an unsecured local area network. The concept of air-gapping represents just about the maximum protection one network can have from another,… Continue reading Meet NFCdrip – a New Security Concern for Air-Gapped Systems
Vending machines used to be a pretty simple affair: you put some coins in, and food or drink that in all likelihood isn’t fit for human consumption comes out. But like everything else today, they are becoming increasingly complex Internet connected devices. Forget fishing around for pocket change; the Coke machine at the mall more often than not has a credit card terminal and a 30 inch touch screen display to better facilitate dispensing cans of chilled sugar water. Of course, increased complexity almost always goes hand in hand with increased vulnerability.
So when [Matteo Pisani] recently came across a …read more
At our university we are using mifare desfire ev1 cards for payment purposes. On the card we have multiple wallets/applications. One of them is for paying food and stuff.
Unfortunately the budget of this application cannot b… Continue reading Reading encrypted value from desfire application of closed dallmayr system