Mythbusters Gagged: Credit Card Companies Kill Episode Exposing RFID Security Flaws
UPDATE: Mythbusters Host Retracts RFID Censorship Comments
Credit card companies successfully nixed a Mythbusters segment exposing RFID's security flaws, according to Arbiter of Truth and Mythbusters co-host, Adam Savage.
Despite increasingly widespread use in passports and credit cards, radio-frequency identification is notoriously insecure. Hackers have successfully hijacked RFID-enabled credit cards from almost 70-feet away. Mythbusters had arranged a conference call with Texas Instruments to explore a similarly depressing demonstration.
Texas Instruments comes on along with chief legal counsel for American Express, Visa, Discover, and everybody else... They were way, way outgunned and they absolutely made it really clear to Discovery that they were not going to air this episode talking about how hackable this stuff was, and Discovery backed way down being a large corporation that depends upon the revenue of the advertisers. Now it's on Discovery's radar and they won't let us go near it.
In related news, here's a post showing how to steal RFID credit card information with $8 worth of equipment from eBay.
Arphid Watch: Mythbusters and RFID [Wired via BoingBoing and Caveat Emptor]
(Photo: Getty)
Post a comment
Comments:
Woah.... Adam is the freakin man.... cool press conference, i deff gained even more respect for him than I previously had...... All was good, till the stupid chick had to ramble on about her STUPID myth busters idea..... why dont you submit that one to food network.... the go back to your home on whore island
Discovery - what a bunch of idiots. Those other companies advertise on TV for the eyes they get so they may threaten, but in the end they're not going to cut their ads for long because it costs them a lot more than it'd ever cost Discovery. If it didn't they wouldn't be spending money on the ads to begin with - and there's always others willing to step up and buy ads - so it's not an all or nothing game. Step up to the plate Discovery before it's too late and your reputation is damaged.
I remember a few years back I read some stuff for school about RFID and how it's progressing to come into every day items. How they want to implement it into everything in place of bar codes b/c it would make it so much easier to ship/receive things with out having to manually check how many items you got from the vender. How they were working on making registers where you would just push your cart threw and it would be able to pick up all the RFID's off the items and you'd never have to empty the cart. And how a lot of credit cards started implementing RFID technology. In all honesty it scared me to think how easy it would be to steal someone credit card info all you need is a RFID reader and your set. All you gotta do is go somewhere with a lot of people like a mall or down a busy city street with your reader for like 15-30 minutes and you could cause some serious trouble. To my knowledge none of my current credit cards have RFID I did have 2 before I researched this and I canceled both of them. I guess its another reason to use cash lol.
@flipx:
But if you lose the wallet, anyone can spend the cash with no recourse on your behalf.
Unfortunately, there is no perfect method.
Exactly. Remember how they outlawed DeCSS and then no one ever cracked the copy protection on DVDs ever again?
Yet once again, stupid company man fails to understand that in today's information age, you cannot suppress information. You must deal with it!
That means fixing the problems, not hiding them.
They should start teaching this in the second grade... A, B, C, 1, 2, 3, "people will always find out stuff now"...
@chrisexv6: No. In the video, he said the RFID episode never got past the planning stage. The viral video episode is still on for next week. The first two episodes (Moon Landing and Viral Videos) were postponed until after the Olympics, so they would actually get decent ratings.
@sgagnon3: And they mention Smash Lab. BOOOOOOOO. That show blows in such a hard way. You can see they are trying to save it by bringing in Gadget from Monster Garage and Big!. Then they team Gadget up with the hot "scientist".
@Git Em SteveDave displays attention-grabbing vanity: Agreed. One of my friends and I watched Smash Lab exactly once. It was like watching MythBusters through a very thick stupidity prism.
Having had a merchant account since 1996 it's been my experience that the credit card companies absolutely do not care about security except where it is congruent with PR, advertising, and revenue enhancement. A few times in my naive days I've come across stolen cards and tried to get the banks (and Visa) to do something about it, only to get the brushoff treatment. The failure here is systemic and the companies are not doing anything because no one wants to pay to rebuild a truly secure credit card system. Citibank's introduction of disposable credit card numbers is a step in the right direction, though.
I have always thought...since the beginning that it was a dumb idea to put RFID chips in credit cards. The last thing I wanted was some device capable of picking up my info if it was waved close enough to my ass. In the old days you at least got a little bit of enjoyment out of getting your credit cards stolen. ;-)
I've had unauthorized charges on my card before. When I called MasterCard about it, I had a new card with a new number and an affidavit to sign in the mail, and refunds for all those charges within 5 minutes of speaking to someone.
It's obviously easier and faster for them to refund my money and give me a new card than it is to build a more secure system.
Remember those AT&T "You Will" TV adverts in the early 90's where Tom Selleck narrated about what future technology holds?
"checking out of a supermarket, without talking to a cashier? You will!" (kid looks through the RFID checkout scanner)
We need a revision.
"Get techno-jacked because nobody actually cares about your security? You will!"
A colorful presentation of Rubin et.al's original work against Texas Instruments 'DST': [www.math.vu.nl] (3.9MiB)
Original paper: [www.usenix.org]
This is probably the sort of thing TI and the rest of the industry they represent don't want the masses to know about.
Excellent job, Mythbusters!!! Adam- you've got balls to tell the truth on this.
You have completely busted the myth that corporate media operates in the public interest. Here's a proposal for a relatively mild investigation into RFID and the whole thing gets shut down immediately by a gaggle of immoral lawyers working for their paymasters.
If RFID gets so heavily censored like this, it's pretty obvious how standard it was to cover up the Republican election stealing in Florida and Ohio, as well as squash investigations into dangerous drugs and national healthcare initiatives - on and on.
Molly Ivans said, "you gotta dance with the ones that brung ya'" and this is a great illustration of that. No wonder there's "nothing on TV" - most anything valuable has been censored.
@dweebster: The Republicans really stole the 2006 elections, didn't they? Enough with the political posts.
I'm embarassed to ask this, but how do I know if my card has RFID in it? I know it's a violation of my rights to privacy, but it sounds like a violation of my privacy that could save me time. I see the new scanners around, and I am interested to try it, but I don't want to piss off the clerk by waving around my possibly regular card next to the scanner.
I have a Wachovia Debit card, if it matters. I prefer to use it as a credit card for the float it gives me. I don't ride with a low balance, but I try to slow my transactions down just in case I screw up or something goes wrong.
@guroth: Agreed. She needs a copy of Cook's Illustrated. It's an interesting question, but only to people trying to make good pizza at home. Mythbusters is a show for everyone.
My guess: She was starstruck by an extended cable personality, and wanted to propose a cool myth but had no ideas.
@barco: Look over the Pacific to see how they do it. RFID-enabled cellphones in Japan have remote locks as well as PIN locks for the RFID function. It's secure enough that JAL has been able to deploy a system called QuiC whereby you just wave your frequent flyer card at the reader at security instead of all this current fuss. It makes getting on the plane almost as easy as getting on the bus.
I got a special wallet with an interior lining made out of stainless steel that won't allow RFID signals to penetrate. It's made by a design house called Steward Stand. The only annoyance is that when I travel to Asia where they use RFID for metro passes and such, I have to switch to a different wallet.
@nightshade74: My first thought was,
"Paging Barbra Streisand, Barbra Streisand to the white courtesy phone."
@TACP: Cat was out of the bag at that point. If there was a conspiracy with Diebold to rig the election for Republicans, no way they could do it in the face of all the news about hacking their voting machines, as well as criticism of the Republican administration. Not saying there was one, but Walden O'Dell's comments REALLY didn't help.
But that's another episode.
I agree that this behaviour is obviously unethical, but many posters here have missed the point. The credit card companies are well aware that information on how to hack rfid's is readily available on the internet - they know there is unlikely to be a increase in rfid crime because of a mythbusters episode. Their main concern is the damage it would do to consumer trust, and they can ill afford this with the current economic climate.
@TechnoDestructo: I was thinking the exact same thing.
Similarly, I've refused to accept any credit card with RFID. So far every bank I've received a credit card from hasn't had a problem with providing non-RFID cards.















Im glad rather than fix the flaws the suppress the info.
Good jorb.