[Clips] Contactless payments and the security challenges

[Anne & Lynn Wheeler]

Alexander Klimov wrote:
> Since the phone has an LCD and a keyboard it is possible to display
> ``Do you want to pay $2 to ABC, Inc. ?'' and authorize the transaction
> only if the user presses OK (larger transactions may require the PIN).
> An additional benefit is that it is your own card accepting device and
> thus the risk that the PIN is keyloggered is lower (of course, this is
> only as far as mobiles are more secure than usual windows pc).

couple articles to put switch on RFID/contactless payment cards
that has to be depressed for the card to be active (somewhat cutting
down on some of the covert skimming attacks)

Switching Off Credit Card Fraud
http://www.rfidjournal.com/article/articleview/1843/1/128/

Switching Off May Reduce Contactless Card Fraud
http://www.epaynews.com/index.cgi?survey=&ref=browse&f=view&id=1126873239622215212&block=

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com