Hacking Through the Air | Contactless Payments and NFC

So, there’s a high probability that you’ve used a contactless payment method today, whether that’s for your morning ‘decaf soy latte with an extra shot’ or for the underground fare, it all depends on your daily routine and lifestyle.
With solutions such as Apple Pay, our phones are basically becoming our wallets too. However, that’s literally an ‘all eggs in one basket’ situation.
To stay safe in the digital jungle, it’s important to keep up to date with the latest technologies, their vulnerabilities and techniques for their mitigation.

In today's video, we’re going to squeeze out the juice of Near-Field Communication’s pros and cons.

Chapters:
00:00 - Intro
06:15 - Hard
09:25 - Magnetic Stripes
11:18 - PIN code
17:12 - EMV
18:41 - Near-Field Communications
20:33 - DIY POS terminal
23:00 - Conclusion

Useful videos:
Watch This Before You Buy Bitcoin

How To Disappear Completely and Never Be Found

How To Remove Your Personal Data From The Internet | Tutorial
#digitalSecurity #Sumsub #Personaldata

Sumsub — empowering compliance and anti-fraud teams to fight money laundering, terrorist financing, and online fraud.

More about us:

[kindlehaha]

I don’t get how this channel doesn’t have millions of subscribers. The videos are so informative and well-produced. Definitely underrated!

[AwokenEntertainment]

layers and layers of valuable information here 💡

[EfficientRVer]

Another great video.

Maybe because I rarely do small transactions (no coffee shot habit here, thanks) I've actually never done a phone pay or NFC card transaction. Some of the grocery stores here in fairly average suburban and small city USA, don't even reliably read the chip on credit cards, and often then do work upon swiping the magnetic stripe! Likewise at gas (petrol) stations.

Holding 4 different credit cards in front of a Chrismas laser array shows that 1 is totally opaque, 1 is almost opaque but allows some light (both green and red) through the borderlines of the CPU chip, 1 lets a bit of red show through the card, and one has its empty innards well lit up by the red array. But no NFC coil in any of them.


I've never asked for an NFC version of my cards, but I've also not ever refused any offer where they push out new types of cards.

[Lolerburger]

Love these filler ridden videos that stretch very little content sooo thin for that sweet sweet ad revenue. "In order to understand the simple concept of NFC theft, we need to go over the entire history of credit cards". No, we really don't. Get to the point dude.

[augustinasdoesarchitecture]

Are we just going to ignore the ever changing high quality spaces you film in?!

[coolnormalandwelladjusted]

It’s called contactless but 99% of people rub their card or phone all over the the thing anyway

[Gavenr]

I'm amazed at averything, and specially, at how high quality this channel's content is!
Keep it up!

[sprinkles]

Fun fact: The foil between the card and reader doesn't necessarily need to "block" the signal, it just needs to soak up enough of the energy that's coming off of the reader to make the card unusable. This is fairly easy to do because of how little energy readers use.

[caladestine]

Your Russian pronunciation of the Kavrakov's full name was extremely good, was pleasantly surprised. Great breakdown, great vid. Keep it up

[VondaInWonderland]

I like banknotes and coins, they are filled with history and mistakes that can sell for more. Just think, you may soon have some with King Charles, making the one's you have now, with "The never to be equaled Queen Elizabeth" left to grab up in a frenzy ♥

[fromagperspective]

I never leave without my wallet Ive literally been detained and taken to a station for not having my ID on me but then Im Black. I was released 10 min after getting to the station but not driven back to where they stopped me just told I could leave.

[jetseverschuren]

I disagree with a couple of key points. The main protocol of the bank cards, emv, is fully open. It's actually pretty easy to implement, I've done it for both contact (stick the card into a reader) and contactless (nfc). Furthermore, multiple stacked cards are definitely readable. The underlying standard (iso14443) has a built in mechanism to allow reading multiple cards "at the same time" (not exactly, it quickly switches between them), but since most people don't need it, it's often not implemented.

[notnth]

16:35 this instant transition to a perfect russian accent really caught me off guard lol

[purnasaimadala]

I always use 2 cards, one with no nfc that I use for larger transactions, and one with nfc from a different account that has very less balance

[cinemaipswich]

If the to go digital contactless via the use of a mobile/cell 'phone, then they must give me one for free. If I am forced to have I.D. then they have to give me that for free. If I must use digital to buy or sell anything, then they must give it to me for free. I will never use "contactless" readers. I live in Australia, and I will not let a cab driver force me to "Wave My Money Away". I never use the magnetic strip. I only use a system that requires me to enter my PIN code.

[triularity]

Even if, in principle, they are secure, implementers are too often lazy, which can introduce implementation flaws or even design vulnerabilities (which take a long time to remove ue to compatibility). The fact that _any_ private data is being passed unencrypted (and subject to eavesdropping) is a red flag, when there is little reason establishing a secure link couldn't be a first mandatory step.

[WoetotheVanquished]

man, I could've told you that scanning an NFC credit card shows everything except the CVC (or pin, obviously). this isn't new.

[MissFoxification]

There's ways to extend the range on the card readers using certain antennas, people put them in backpacks and capture cards in small space like elevators. This method is useful for capturing cards to enter buildings, garages and the like. It won't be able to capture a smart bank card due to the configuration. It can however damage them, I do that to old cards I don't use anymore.
Alas, as you noticed you can't capture more than one at a time, putting an old card behind the new one blocks both.
Skimmers that go on the line between the bank and the terminal are still an issue.

[tedclubberlane]

Usually your content is very up to date and informative on cutting edge tech. I had a nfc app on my Samsung galaxy s7 able to read through wallets in 2016…

[ebermtheburn]

Thanks. I noticed a video trying to sell expensive "radio theft proof" wallets and came searching for an explanation. Luckily I found it here and realized that the people trying to sell you fancy wallets are the real scammers. There is no threat of someone stealing your credit card information by walking by you with a scanner.