<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Cassie Wallender &#187; security</title>
	<atom:link href="http://firewallender.com/tags/security/feed/" rel="self" type="application/rss+xml" />
	<link>http://firewallender.com</link>
	<description>aka @firewallender</description>
	<lastBuildDate>Fri, 04 May 2012 17:54:55 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.2</generator>
		<item>
		<title>The Dangers of RFID: What&#8217;s in your Wallet?</title>
		<link>http://firewallender.com/the-dangers-of-rfid/</link>
		<comments>http://firewallender.com/the-dangers-of-rfid/#comments</comments>
		<pubDate>Wed, 03 Sep 2008 07:02:58 +0000</pubDate>
		<dc:creator>cassie</dc:creator>
				<category><![CDATA[technology]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://firewallender.com/?p=27</guid>
		<description><![CDATA[My Washington Mutual debit/credit card just expired at the end of August, so today I found myself using a different bank&#8217;s card. Why didn&#8217;t I just activate the new one they sent me? Without asking me, they had sent me one with RFID, which allows you to pay without even touching the sensor. Maybe it&#8217;s [...]]]></description>
			<content:encoded><![CDATA[<p>My Washington Mutual debit/credit card just expired at the end of August, so today I found myself using a different bank&#8217;s card.  Why didn&#8217;t I just activate the new one they sent me?  Without asking me, they had sent me one with <a href="http://en.wikipedia.org/wiki/RFID">RFID</a>, which allows you to pay without even touching the sensor.  Maybe it&#8217;s secure, but why risk it?  There&#8217;s enough out there to lead me to believe it <em>isn&#8217;t</em> secure, and why should I believe the credit card companies? Of course they&#8217;d love to make our spending easier, with RFID we won&#8217;t even have to look at the total, and American debt can continue to increase at an even more ridiculous and undisciplined rate.</p>
<p>But spending concerns aside, there&#8217;s still security. Apparently, it must be pretty darn hackable, because Adam Savage of Mythbusters wanted to test it and the Discovery Channel quickly got bullied by a bunch of credit card company lawyers to basically stay the heck away from the topic completely &#8220;or else&#8221;.</p>
<p><object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" width="425" height="344" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,40,0"><param name="allowFullScreen" value="true" /><param name="src" value="http://www.youtube.com/v/-St_ltH90Oc&amp;hl=en&amp;fs=1" /><embed type="application/x-shockwave-flash" width="425" height="344" src="http://www.youtube.com/v/-St_ltH90Oc&amp;hl=en&amp;fs=1" allowfullscreen="true"></embed></object></p>
<p>Now, this irritates me even more.  <em>Security by obscurity is not a valid method in the information age.</em> Notice that everyone and their mother has heard of <a href="http://www.google.com/search?q=lock+bumping">lock bumping</a> now? The best way to fix a security hole isn&#8217;t to hide it. BoingBoing already has showed you can make a RFID reader (and cheaply).</p>
<p><object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" width="425" height="344" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,40,0"><param name="allowFullScreen" value="true" /><param name="src" value="http://www.youtube.com/v/vmajlKJlT3U&amp;hl=en&amp;fs=1" /><embed type="application/x-shockwave-flash" width="425" height="344" src="http://www.youtube.com/v/vmajlKJlT3U&amp;hl=en&amp;fs=1" allowfullscreen="true"></embed></object></p>
<p>Tomorrow I&#8217;m going to my bank and telling them where they can put their RFID tags, and it isn&#8217;t on my credit cards.  Someday, I might just have to be the nutcase with tin foil around their wallet and passport, but as long as it&#8217;s an option I&#8217;ll take the ten extra seconds it takes to sign my receipts in exchange for knowing my data stays in my pocket with my cards.</p>
<p>Maybe I sound paranoid, but this is coming from someone who&#8217;s been a victim of identity theft <em>twice</em>.  I was beginning to feel like Sandra Bullock in <a href="http://www.imdb.com/title/tt0113957/"><em>The Net</em></a>.  There&#8217;s no way I&#8217;m going to make things any easier on these guys.</p>
<p>UPDATE (9/3/08): <a href="http://news.cnet.com/8301-13772_3-10031601-52.html">Adam has retracted his statements&#8230;</a> sort of. </p>
<blockquote><p>&#8220;There&#8217;s been a lot of talk about this RFID thing, and I have to admit that I got some of my facts wrong, as I wasn&#8217;t on that story, and as I said on the video, I wasn&#8217;t actually in on the call,&#8221; Savage said in the statement. &#8220;Texas Instruments&#8217; account of their call with Grant and our producer is factually correct. <em>If I went into the detail of exactly why this story didn&#8217;t get filmed, it&#8217;s so bizarre and convoluted that no one would believe me,</em> but suffice to say&#8230;the decision not to continue on with the RFID story was made by our production company, Beyond Productions, and had nothing to do with Discovery, or their ad sales department.&#8221; </p></blockquote>
<p>Sounds like someone gets to keep his title as &#8220;dude with the best job in the world&#8221;. </p>
]]></content:encoded>
			<wfw:commentRss>http://firewallender.com/the-dangers-of-rfid/feed/</wfw:commentRss>
		<slash:comments>6</slash:comments>
		</item>
	</channel>
</rss>

