How To Hack A RFID Credit Card For $8

Today’s episode of BoingBoingTV demonstrates how an $8 credit card reader bought off eBay can be used to read your credit card numbers while they’re still inside your wallet.

Nice.

Also demonstrated: A stainless steel wallet that blocks the reader. We know someone who keeps his credit cards in an Altoids tin. He now seems like a genius.

Comments

  1. rlee says:

    @graffiksguru: Thanks for the link. They appear to be a UK company, though. The US source for these items appears to be: [www.idstronghold.com]

    And this RFID-blocking card case appears to be available from many vendors: [bags-totes.daytimer.com]

  2. TXchainsaw says:

    those 2 should toooooooodally hook up OKAYYYY!!????

  3. flatlinebb says:

    This video just popped my BoingBoingTV cherry and I have to say that Xeni is hot. I’d get close to her ass anytime – even without an RFID reader.

  4. christoj879 says:

    I’m not seeing this for $8 on eBay, the only place that has these PayPass adapters looks to be a scummy place advertising their merchant account.

  5. jamar0303 says:

    @bearymore: Japan’s had RFID cellphones just fine. The key is security. I have one- it’ll prompt me when something tries to read from it and I have to physically confirm. In fact, it prompts me for my cellphone lock code to allow anything to read from it.

  6. bluewyvern says:

    All I’m thinking is I want that jacket. [/shiny]

  7. malgwyn says:

    Wasn’t this explained years ago by 2600 (The Hacker Quarterly)? “Mythbusters” obviously stole it from 2600, they are a bunch of engineering yobs, not particularly focused on exploits. Xeni Eraserhead and Boing Boing (started as a badly produced ‘zine) were always poseurs on that scene .

  8. deadspork says:

    The credit card company I work for (which shall remain unnamed :) allows you to opt out of the RFID feature, just call and ask for a non-RFID card. I’m sure most will be able to oblige.

  9. redkamel says:

    I cant wait 30 years until Wired has to have an article about how to disable the chips installed in your head at birth.

  10. ROCKYLIFE says:

    Pointless story.

    Uh, they invented the little 3 digit security code (CCV2) on the BACK of your card YEARS ago. Amazing what a good idea that was, and how good it works. The generation process has never been cracked, and it’s illegal for merchants to store it.

    It doesn’t get transferred over RFID, and isn’t included in the mag stripe information.

    There are very few websites, and certainly no major ones, that don’t REQUIRE the security code, so the other information is useless. So online purchases are out.

    Now try going up to a merchant in person and buying something, without your credit card, AND without the CCV2 code. That’s not going to happen either.

    The ONLY stolen credit card scams that are working at all are those that trick users into entering ALL of that information into a FAKE merchant website, which then has ALL of the pertinent details. Or those thieves that swipe multiple transactions when the HAVE your credit card in hand. Everything else is scaremongering.

    Next story please.