Tuesday, February 22, 2011
Don't use debit cards online at sites without https; beware of RFID-enabled cards
It took the victim about ten days to get the money restored to her account.
No link or video is available yet.
But here’s a youtube video from “Boing Boing TV” in San Diego that shows that RFID-enabled cards (radio frequency enabled) actually decrease security, as someone shows how these cards can be read just by proximity, even when the victim is not processing a transaction. The only protection is a steel wallet. The video maintains that banks need to take more responsibility for centralized decryption of these devices. This would be particularly dangerous with debit cards.
But the main advice is still: don’t do business at sites without https.