rf-enabled credit cards are secure
I am sure Mr. Laurie is a knowledgable RFID expert, but he is not a credit card expert or a passport expert, so he should be cautious in jumping to conclusions about what a thief can do with the data skimmed from an RFID chip in those two examples, as there are other security controls beyond the RFID chip that prevent bad things from happening in this type of attack. The AMEX credit card data can only be used to commit online fraud if the merchant account does not to ask for the 3 or 4 digit security code which is not stored inside the chip, only on the card itself. If that unlikely event happens, the customer is not liable, the merchant is. Second thing, regarding passports, these are protected with an additional feature called basic access control, so no personal data stored inside a passport can be skimmed in the manner demonstrated.
In reply to: "The hands-free way to steal a credit card"
February 21, 2008