I always see wallet and backpack commercials saying that they block RFID, but honestly how realistic are RFID "attacks" even?
I mean, it's not like there is some criminal with a card terminal quietly sneaking up on people and charging them with RFID, is there?
@anarchiv Hmm... Probably... But you need to get really close, the card needs to be 1 or 2 centimeters close for it to even detect the card.
Eh, this whole RFID thing looks more like marketing buzzword to get people excited than actual safety.
@anarchiv @oklomsy
My hypothesis is that either my information was coming up on their screen when they were talking to the car in front of me, or, based on y'all saying RFID requires very close contact, not putting my ID in the sleeve ever (at the time I just kept my ID naked in my wallet) damaged the RFID components and they had to manually enter my info
@oklomsy @anarchiv
I _think_ you can get better range with a better antenna. But AFAIK the attacks are basically non-existent because:
- Most people have a sensible upper limit on payments before a pin has to be entered.
- The payment console has to be linked to a business account, finding mules for normal bank accounts isn't simple but for business accounts it's a lot harder still.
@kingannoy @anarchiv From my experience, the pin limit tends to be around 200dkk or 30 USD, anything higher than that we need to ask the customer to add a pin.
@oklomsy @kingannoy
my bank has 600 NOK as a default
@oklomsy The wallets don't even block RFID scans. They're always shitty and ineffective Faraday cages. https://www.blackhillsinfosec.com/rfid-proximity-cloning-attacks/ seems like a pretty good article on it. One of the RFID readers has a range of up to 25 feet.
also https://www.reddit.com/r/privacy/comments/2en4js/rfid_shielding_wallets_dont_shield_rfid_requires/
@oklomsy I've been wondering about this
Perhaps you could install an RFID terminal the same way as one of those metal detector gates at the airport - people would walk through a door and get charged without noticing?
Highly unlikely though. I don't believe that kind of attack is a considerable threat