510 reputation
413
bio website
location United Kingdom
age
visits member for 1 year, 11 months
seen yesterday

A computer science student with an interest in Android, NFC, payment cards and security.


Jan
28
comment Bank cards - chips vs mag stripe security
Why do you say digital signatures are out of the question? I'm pretty sure they're still present in both Visa and MasterCard contactless transactions (PayPass/PayWave), although there are less of them than in a chip transaction.
Oct
15
answered Is it possible for a NFC-enabled device to emulate a Visa card with PayWave?
Oct
14
awarded  Notable Question
Sep
10
comment Is there any point in using 'strong' passwords?
@ruakh True! I misspoke. I've seen similar articles on Ars however talking about how Hashcat can concatenate dictionary words to try and crack passwords.
Sep
10
comment Is there any point in using 'strong' passwords?
The point of the Arstechnica article is that now passphrases (like in XKCD #936) are now (more easily) crackable using the tool, not that (pseudo) random passwords of the same length are as easy to crack.
Aug
16
comment Atm/Debit card Security
Note this is only a danger for places that use and accept mag stripe transactions, EMV (Chip and PIN) based cards using DDA/CDA aren't cloneable. Unfortunately most countries that use EMV have kept mag stripe around for legacy reasons, although the plan is to phase them out, and it's possible to get an EMV ATM to use the mag stripe if you break the EMV chip.
Aug
15
comment Atm/Debit card Security
What password..? PIN number? Online password?
Aug
12
awarded  Popular Question
Aug
7
revised What's the use of adding a challenge to a one time password algorithm?
added links
Aug
5
comment What prevents people getting charged over NFC in crowded places?
This seems to be incorrect in that the card doesn't authenticate the reader at all. The reader does authenticate the card however. You can read the details off a card and get get a transaction approved by a card just using a PC or a phone, the card doesn't care where the commands are coming from.
Aug
5
comment What prevents people getting charged over NFC in crowded places?
@SomethingSmithe When Barclays ask you to type in your PIN if you try to NFC it's to do a Chip & PIN transaction because you've already done a bunch of NFC transactions. An NFC transaction won't use a PIN. i.e. curiousguy is right.
Aug
1
accepted Advantages of using a Digital Signature Scheme (DSS) with Appendix instead of DSS giving Message Recovery
Jul
4
accepted Why was ECMVQ dropped from NSA Suite B?
Jul
3
comment Why was ECMVQ dropped from NSA Suite B?
Thanks, some interesting stuff in there. If no one else gets back in a few days I'll accept this.
Jul
3
asked Why was ECMVQ dropped from NSA Suite B?
Jun
27
comment How to set up a smart card for web login?
I've never used a card for this so can't provide a full answer but: 1) Maybe a Java Card? Pretty cheap and relatively easy to get up and running quickly. 2) Google ACS card reader, they're a good brand. 3) Smart card authentication could work where the server provides a card with a random nonce that it signs using a secret key that the card and server both know, send the signed nonce back and have the server check it. P.S. These are for a DYI solution but as with most security things it's better to use a tried and tested system rather than implementing your own.
Jun
26
revised Advantages of using a Digital Signature Scheme (DSS) with Appendix instead of DSS giving Message Recovery
removed extra info
Jun
26
revised Advantages of using a Digital Signature Scheme (DSS) with Appendix instead of DSS giving Message Recovery
added 172 characters in body
Jun
26
asked Advantages of using a Digital Signature Scheme (DSS) with Appendix instead of DSS giving Message Recovery
Jun
21
comment Why are signatures considered a valid authentication method?
Ah, I've never heard that. FYI I've just tested my new Barclay's card and I can only actually do 2 NFC transactions before I have to use Chip & PIN, but my old one had 5 as the limit.