#Cheap EFTPOS machine Australia

[posocer]

Something Awesome

So this week was mainly thinking of ways to make RFID reads more secure (or just see in what ways do successful reads happen). I was curious as to why the RFID shield that I bought had worked so well even though it didn't use the basic theory that was implemented in the other shields that i tried out. Turns out, not a lot of companies disclose what their material is made of. They just say that it works 100% of the time. WOW. And that there was nothing to worry about if you were using their patented product. I assume its just a fancy faraday cage but I guess we will never find out. I did cut it up and tried to see what was inside but to no avail. It still worked even when cut up. I tried to use the NFC reader on my phone to interfere with signal reads from the NFC reader that I had made but it didn't change anything. I guess it's because the card itself can output signal in any direction. An idea that I had which did have some effect was stacking two cards on top of each other and holding it up to the reader. This had varied results. It would sometimes read the card in front and then sometimes read the card on the back. I can't be certain that it was due to the card stacking, not the best equipment (not the best reader because it's cheap and the cards seem to be of low quality too), but it has been the only non shield method which had any effect. So I guess keeping multiple cards together in your wallet or card holder reduces the chances of someone swiping your data because of signal interference... Maybe. But I would still say getting your hands on a RFID shield would be more effective. So this week I also did research on real life applications and security measures in place with technology using NFC in general. So as you can see in the graph. There's a lot of different types of NFC and uses. Some common uses would be say those really hard to remove stickers on more expensive products in stores. Those are actually NFC tags, it kinda makes sense once you have a look at it and think about it. These prevent thievery as well as authenticity as the store would be able to verify whether the product belonged to them or not. The cards i usee fall under the MiFARE Std 1K type of product. It uses the MiFARE protocol to read and write. The RFID reader that I have can only read certain types of tags due to the different protocols they are built on. Maybe you can see some keywords which have appeared in our security lectures. Initialization vectors. Anti collision. As they also contain an identification key, companies need to make sure that, their unique identifiers stay unique.

Another common usage of NFC is in payment. Credit cards usually have a NFC tag embedded in them such as pay & go. But if it was simply just tag and go then people could easily steal your bank details and read your card, use your card to buy anything they wanted. This was one of the reasons why tap and go has a limit of $100 before requiring a pin. However, it's not so easy to just read a card and you have all the information. In credit cards and debit cards, there is a security chip embedded into the card as well. What happens when you tap your card is, the tag is sent from your card, encrypted by the security chip into the EFTPOS machine. This is then only decrypted at the banks end where the actual payment and deduction takes place. This ensures that even if someone tapped your card. All they would get would be an encrypted tag which would not work for any transaction other than the original one. Similarly, using services like Samsung Pay or Android Pay, instead of having a security chip which encrypts your payment details, tokenisation is used instead. Although it is inherently more insecure as you must first give your payment details to the company whose service you are using. The principle however remains the same as credit card payments.

https://en.wikipedia.org/wiki/Near-field_communication#Standards 

https://security.stackexchange.com/questions/131638/how-can-rfid-nfc-tags-not-be-cloned-when-they-are-passive-technology 

https://www.southernphone.com.au/Blog/2018/Oct/safe-secure-mobile-wallets-australia https://www.tigermobiles.com/blog/nfc-payment-safe/

[bluemoon21-blog]

Using ‘tap and go’ will protect against fraud through ‘ghost’ EFTPOS terminals, police say

With card cloning on the rise in Australia, police are urging people to use the ‘tap and go’ chip on their bank cards to protect against ghost terminals.

Police are urging people to use the ‘tap and go’ chip on their bank cards in order to protect themselves from fraud through “ghost” terminals.

Detectives from the NSW fraud squad are investigating a series of fraudulent ATM withdrawals across Sydney’s south-west using “cloned” credit and debit cards.

Cloned cards are made by swiping the magnetic strip data and PIN from legitimate cards and then transferring the information to a plastic card with a magnetic strip, often a cheap store loyalty card.

Top tips for protecting your card:

Always use ‘tap and go’ — the chip is much more secure than your card’s magnetic strip

Keep your credit and debit cards secure at all times

Do not share your PIN with anyone

Always cover your PIN with your hand

Do not use suspicious ATMs or EFTPOS machines

Check your bank statements often and immediately report any irregularities to your bank

Always keep your card in sight, ask that transactions are completed in front of you

Keep your receipts and check them against your statements

Only allow your card to be swiped once during a transaction

“For a cloned card to be used in an ATM they need to have two pieces of information,” Acting Superintendent Matt Craft said.

“They need to have the information on the magnetic strip and your PIN — if they don’t have your PIN they can’t make the transaction.

Source: Using ‘tap and go’ will protect against fraud through ‘ghost’ EFTPOS terminals, police say – ABC News (Australian Broadcasting Corporation)

from Using ‘tap and go’ will protect against fraud through ‘ghost’ EFTPOS terminals, police say