How safe is contactless payment? || How does RFID & NFC work? || EB#40

$2 for 10PCBs (24 Hour Fast Build): jlcpcb.com
Previous video: • Make your own Modern L...
How Does Wireless Charging Work? video: • How Does Wireless Char...
DIY Wireless Energy Transfer System video: • DIY Wireless Energy Tr...
Facebook: / greatscottlab
Twitter: / greatscottlab
Support me for more videos: www.patreon.com/GreatScott?ty=h
You can get the components shown in the video here: (affiliate links)
Aliexpress:
RC522: s.click.aliexpress.com/e/_d6F...
PN532: s.click.aliexpress.com/e/_dYl...
RDM6300: s.click.aliexpress.com/e/_dZ0...
RFID Blocking Card Holder: s.click.aliexpress.com/e/_d6M...
Ebay:
RC522: rover.ebay.com/rover/1/711-532...
PN532: rover.ebay.com/rover/1/711-532...
RDM6300: rover.ebay.com/rover/1/711-532...
RFID Blocking Card Holder: rover.ebay.com/rover/1/711-532...
In this video I will be showing you how RFID and NFC works. Along the way we will have a look at a few RFID readers, how to use them for Arduino projects and in the end determine whether contactless payment is truly safe. Let's get started!
Websites which were shown/used during the video:
github.com/elechouse/PN532
www.boecker-systemelektronik....
www.nxp.com/docs/en/data-shee...
ww1.microchip.com/downloads/en...
www.nxp.com/docs/en/nxp/data-...
www.nxp.com/docs/en/data-shee...
www.mouser.com/catalog/specshe...
Thanks to JLCPCB for sponsoring this video
Visit jlcpcb.com to get professional PCBs for low prices
Music:
2011 Lookalike by Bartlebeats
Killing Time, Kevin MacLeod
(incompetech.com)

[@mountainpass4255]

As it's know in the security industry, the S in RFID is for Safety.

[@rich1051414]

There is no S in... Oh...

[@user-yw8sr3uj1w]

@@rich1051414 👏dont worry i was about to post that

[@Loznero]

Thers no S in RFID... are yu stupid or someting?????

[@mountainpass4255]

@@Loznero No

[@blendernoob8993]

@@Loznero I hope you're joking

[@stevediraddo2918]

I frequently pick up peoples discarded public transit passes, or wristbands from concerts, they contain mifare ultralight tags which can be reprogrammed to perform various tasks on NFC-enabled phones. For example I taped one to my night stand and programmed my phone to enable Do Not Disturb when its detected. Super handy and people just leave them everywhere.

[@liveleaky7571]

That's pretty cool

[@TheRainHarvester]

Great idea! Can old credit cards be reprogrammed? Or does the security prevent that?

[@stevediraddo2918]

@@TheRainHarvester cards that have security cant be reprogrammed but apps like Tasker and Trigger can still use them

[@cs5098]

I wish mifare desfire mk2s weren't protected so much

[@GalaxyCatz]

Shadan Rikan yeah but free is free

[@moritzlaszlo3115]

I follow this Chanel for round 3 years now and the quality of the videos is always incredible high! Thank you for all the time, money and passion you put in our free education ❤️

[@Noksus]

Your channel has grown alot since I started watching a few years ago. Great work, as always! Your videos are always well made and detailed.

[@MrZenzio]

I remember a few years back at work, having to implement the MIFARE DESFire NFC card's instruction set. Was quite interesting to see how advanced they can technically be.

[@martinrocket1436]

Lasse Hovlandsdal, may I ask what you implemented?

[@MrZenzio]

​@@martinrocket1436 Certainly. We were implementing what is colloquially called (at least here) "bus cards"; the NFC-based cards you in many cases can use on public transport. (Specifically, it was an implementation of a subset of the ENV 1545-2 standard.)

[@domints]

@@MrZenzio It might be weird, but I'm wondering, why would you implement like cards instruction set, where there are complete chips that provide complete solution including encryption implementation, CRC validation etc.? For example PN532 mentioned by Scott. It's just like "I want to talk to that card, that's the password, gimme data from that sector" etc.

[@MrZenzio]

@@domints Quite simply, availability. At the time, there was no suitable drop-in component that would work within our specificatio (the hardware it was required to interact with, and some requirements imposed on us by a third party). You are certainly right that it sound like a strange thing to do :)

[@mupschiplayz1802]

Greetings to Germany from Germany

[@ostelaymetaule]

The only country where your credit Card is Secure (because you just cant use it to buy a cup of coffee) :D

[@IcicleFurry]

Same :D

[@amgnico]

@@ostelaymetaule haha xD

[@Cookie__XD]

@@ostelaymetaule sooo true 🤣

[@enderdavid_hdde348]

Danke😉🤣

[@legend2755]

I'VE BEEN WAITING SOOOO LONG FOR A VIDEO LIKE THIS!!!! THANKS!!!

[@brannonmcevers1854]

Great video my friend... Nice format!! It allows people that aren't too technical to somewhat understand the tech they use everyday, and the people that are tech savvy can look up the IEEE standards to acquire more information... I had a professor in college that taught this way.. He called it "The Big Picture".. It allowed us to start thinking about the subject before we fully understood the science behind it.. That way, we weren't 'blindly' learning and it sparked our interest.

[@SlyerFox666]

Worked in industry with this technology the big thing I took away from it was that cards don't have a rolling transaction number, your phone does thus each transaction on your phone can only be used once per transaction and not duplicated.

[@alsayedjalal]

Had the idea to make my phone work as a key to my rfid sensor and came to this conclusion as well. It scanned a different number everytime. So that didn't work..

[@kaseyboles30]

Only problem is that the phone can be hacked. Often over blue tooth . Then your payment processing app will provide codes to the hacker remotely until it's caught. Currently phone payment systems are less secure than chip and pin. Every one of them has been shown vulnerable.

[@resneptacle]

@@kaseyboles30 That's not true

[@kaseyboles30]

@@resneptacle several of these hacks were demoed at the black hat conference in 11/17 and more have been found since, like the Samsung one with it's predictable token generator(to small a token space, and the way it handles multiple cards on one account makes it worse in that case). Dig into what the security researchers actual say. Right now chip&pin is much more secure (assuming properly implanted, quite a few are incomplete atm).

[@resneptacle]

@@kaseyboles30 Have a link to what they say?

[@UselessDuckCompany]

Didn't mythbusters get in trouble for trying to cover this topic?

[@derbisenda1330]

Useless Duck Company Yes you’re right

[@Nicksperiments]

derbi senda why would they get in trouble?

[@derbisenda1330]

Nicksperiments Wellll, they found out how crappy the system was.

[@sligovolts]

@@Nicksperiments they got in trouble because the credit cards companies threatened to cut ad money for their TV channel

[@martinrocket1436]

sligovolts, really? But if this was true, then media system that relies on commercial sponsors but yet claims to be independent would be inherently broken!? unbelievable.

[@Muuip]

I use these cards every day, now I finally know how they work! I downloaded the App and read all my cards, very cool technology 😊👍 Many thanks for the upload!

[@joeballer4036]

VERY useful video. I've used RC522 in personal projects before, nice to see a video this detailed!

[@DoctorX17]

I always love watching you draw and write on paper in your videos. It's a cool aesthetic you don't see often anymore.

[@AlbiinoBlacksheep]

This is amazing timing. I discovered NFC tools TODAY and I ordered RFID reader yesterday for a project me and a couple of friends are commiting to. I am a little bit dissapointed you didn't cover the difference between the different RFID readers. Please cover this in another video!

[@Javi360flip]

Amazing video!!! It helped me refresh some concepts that I learnt in university, in a very practical way! Greetings from Spain!

[@DirtyJay5]

I certainly enjoy and appreciate all of your videos. Keep up the great work!

[@MrGillb]

NFC relay attacks are still a thing which can be done against many card variants. You can buy these garage door readers which allow for long distance (like a few feet) reading; I am not sure how to hack one of these things such that a proxmark can use the antenna instead, but it should be possible.

[@jago3798]

The short range is not because of the "high frequency", it's because that chips use capacitive coupling. At work I had to do with UHF tags at 868 MHz which have a much higher range because they are using inductive coupling. But please don't ask me for details, I just had to control the reader :)

[@UKsystems]

Both can have really long ranges with very specialised equipment, so it is possible to make it go far

[@chriskennedy8525]

Cool. Keep up the great work on your informative videos. You always have great projects to demonstrate your information. Thanks

[@vitruzicka7542]

I've been waiting for this video. Nice summary.

[@surfacta]

Could you make a video about DIY or BUY BMS with balance charging? As always, great video m8!

[@mbjengels]

Gruezi Search for collin hickey or adam welsh diy bms Part list around 30 dollar

[@ericoudammerveld424]

Great Video, Scott. Should you want to go into more "in depth" of both NFC and the security around it, I can connect you to people that are on the edge of this technology. I recently got a demo about the NTAG 424 DNA (Followup of the NTAG 413 DNA) which is a great and affordable chip type from NXP and has a very, very high level of security.

[@FBHDTech]

This was really an informative video. Keep up the good work!

[@JerryLee..]

Another *amazing* video. Wish I knew more about this stuff! Thanks @GreatScott .

[@BartoszBanachewicz]

Woah, I would have never thought to "loop" a probe like that.

[@herczegzsolt3373]

Come on Scott, this is oversimplified. You usually create content with precise info and much more details. Keep up the standard :-)

[@Greendayhlias]

I was disappointed too

[@federicohansen4561]

Yes, its lacking something else

[@Cookie__XD]

Maybe it's in order to prevent abuse of critical security problems in a criminal way...

[@grossefonc]

Yes that's was a bit short video, usually much more info, but anyway thx Scott

[@michaelws6247]

Cookie__XD this was my thought

[@hoxorious]

I learned a lot about RF. Thank you so much! ❤️

[@jenssejerchristiansen]

The quality of your videos have really raised in the last year or so. WOW...

[@ThePovilaxxx]

well, you've talked about passive RFID, but i think it would make a great video if you'd talk about Active RFID, and maybe made like a security system with it or how safe it is in cars.

[@hugowoesthuis]

I would love to see a collab with LiveOverflow again about this

[@bundikasuli]

Super Video👍 Du machst Etechnik wirklich interessant und veranschaulichst alltägliche Praxisnähe👏

[@twotone3070]

Excellent video as usual.

[@ederedr5100]

Please make a Video with muscle sensors!

[@greatscottlab]

I can put it on my to do list

[@DiBundschuh]

And maybe also the alcohol sensor from Arduino

[@WizardNumberNext]

both bank (ATM) cards and SIM cards are using same standard and actually are (at very least) similar inside, if not identical those are not just memories those are full blown computers inside (granted very embedded, but still computers) they never give access to what is inside, but rather are used to sing, decrypt and encrypt data

[@Falney]

I remember a while a go, when contacless payments first arrived in the west there were stories of people walking around with portable payment terminals on packed trains just taking a buck here and there through wallets in pockets. Payments low enough most people wouldn't notice.

[@ThylineTheGay]

Congrats on 1 million!!!

[@tee-tech-old62]

In a German identity card is a RFID chip as well, and it is readable with the Arduino RFID reader :O

[@christianB1234567891]

Yeah, but its useless to do so because it sends you any time you do a Reset another ID, at least so is mine. Most Datasheets for RFID Cards are under NDA, so you won't know how to talk to it/decrypt it. You can't even get the Datasheets for a Desfire Card without signing any NDA. Actually, they have done well on it in the "Internet Neuland" ;D

[@Tadasis72]

Diy or buy rfid smart door lock?

[@ctnelsoncar]

Cool,would definitely like to see

[@jameskoitsky3526]

Still not safe tho

[@matthiasvanduysen362]

DIY, i have a $1000 SALTO-system at my home. Way to expensive

[@imnota]

Depends of the safety you need. If it's for your house's main door definitely buy, but if it's just to keep your annoying sibling out of your room or something like that diy is the way to go.

[@harrymu148]

buy an encrypted one for the front door/backdoor/exterior access. Definitely DIY anything on the inside because buying each time for the inside will leave your wallet drier than the mojave.

[@adkharu]

Congrats on the 1M!

[@alfblack2]

Nice! been reading about RFID and NFC but still learned quite a bit here.

[@EkelundDK]

You can also carry two nfc payment cards right up against each other in your wallet, which will confuse the reader.

[@TheThursty100]

doesn't even need to be a payment card. I've got my ID card, train ticket, blood donation card, public swimming pool card.... Shit, everything has NFC nowadays

[@orange11squares]

nice 7 cards...x 25 euro ...the bad man can take 175 euro :)) i'm joking..

[@domints]

except it will confuse only shitty readers, because ISO 14443 has collision detection and resolving mechanism described :) With good reader they can bill all your cards at once (except they won't because of reasons I described elsewhere, but having multiple cards isn't the problem)

[@yosyp5905]

I thought the cards need energy to activate the chip, so two cards do absolutely nothing to each other. edit: nevermind, I've read the message wrong.

[@domints]

@Lucas Cruz who should believe what?

[@SpectreOZ]

NFC limits are way higher here in Australia (think of people buying groceries etc) I killed my antenna but left the chip untouched, so no contactless payment for me (or anyone else if I lost my wallet) 👍

[@phsch108]

Here in Europe, NFC also works above €25,-. You're just required to enter the PIN after the NFC transmission for those transactions.

[@SpectreOZ]

@@phsch108 $100 AUD here is the point after which a pin is required, $100 in multiple store would soon deplete a healthy bank account

[@thomasmarliere2505]

Very interesting, thank you Scott !

[@CrazyWillTechShow]

Always love your videos thanks!

[@user-so9hf3ji7h]

Came here before the notification!

[@sunlaser6587]

lmao me too haha

[@Stefano91ste]

Now if everything is connected to the internet, nothing is safer :( Thanks for this video!

[@brent_peterson]

This video had nothing to do with the internet

[@brent_peterson]

flexairz Transfer between the store and the bank would happen the same way whether or not the customer used NFC. This video is about RFID and NFC so I was just saying this comment is not very relevant to the topic of the video.

[@stephensu4371]

does not matter internet or not， nothing is absolutely saft

[@DanielleMoren]

You shouldn't be, at least if you're using Google pay or similar. If Google messes things up you'd be sure that they won't take it lightly, besides banks always insures you that your money is safe, no matter how stupid you are.

[@RizLazey]

You could live even without internet just some simple Phones and Messages now it is painful because most of time everything uses Internet for faster communication

[@real4487]

Congratulations for 1 Million subs

[@americanrebel413]

This was awesome thank you for sharing this!

[@tegrqbruh4158]

I use a contactless card and also my phone for wireless payment in stores

[@PolakeXD]

That's not really true... You can pay with NFC on credit cards with higher values than 25€ ;) For example I paid 480€ contact less for my TV. The limit of 25€ is only set by your local Sparkasse bank

[@simaopacheco4529]

depends on the banks, you can also make that limit higher or delete. if limit exceed you need to enter your code

[@larcomj]

Interesting, the modulation scheme uses what is called LSK(load shift keying). this is also used in implantable medical devices to communicate with the implant.

[@naitikshailendrakumaryadav2824]

Glad to see you with new topic. Stay creative and see you next time

[@spudhead169]

I've reported my card missing then used it afterwards contactless several times. I'm about 200 bucks up atm.

[@houdiniabracadabra6180]

I hope u didnt use it in the same location where you live.

[@spudhead169]

@@houdiniabracadabra6180 Yep I sure did. That was a year ago, not had any backlash yet. Banks aren't going to file police reports and subpoena CCTV footage over a couple hundred dollars, they'll just write it off. If I'd stolen thousands or done this more than once, then maybe they would. Good thing about contactless is there's no clawback from the retailer, the Bank takes all of the hit. The extended story behind this is that a utility provider had mistakenly took a large amount out of my account and the bank allowed it even though there was not enough in the account to cover it. It was all sorted and the utility provider refunded the money but the bank refused to refund the fees they charged (which added up quickly) for the unauthorized "borrowing". Instead of going through all the hoops and legal nonsense to get the fees returned, I just did the card thing, then closed the account.

[@houdiniabracadabra6180]

@@spudhead169 ok then i won't hate you. U did what had to be done. Get your rightfull money back. Thx for the idea though ;)

[@hopkinskong]

By standard, EMV cards uses strong security which allows safer data exchange. (e.g. RSA/Asymmetric Cryptography)

[@innovation4u336]

You are great teacher. I always wait for your video

[@laxmanraobhele9813]

Best quality content for electronics on ytb

[@kooan112]

Before watching the vid, i thought nfc stands for No Freakin' Cable...

[@harrymu148]

lol

[@iProgramInCpp]

Near Field Communication*

[@SirDella]

@@iProgramInCpp really? I'm shocked

[@funny-video-YouTube-channel]

OK, it sends the data, but encrypted by the manufacturer key. *Safe as long as the card maker* can keep their encryption keys safe. After that, everybody is not safe. The govts can probably pressure the card issues to give them the keys, if they wanted to. OR till real evil people figure out some weakness in the tech.

[@KnowledgePerformance7]

Why would the govt want the keys?

[@muhammadaarif3019]

Congratulations for 1 million.. ☺️☺️

[@gerritweiermann79]

Danke für die Quellen. Sind sehr interessant :D

[@ushiocheng]

Contactless payment is not dangerous since it is a RFIC card instead of RFID card that uses an internal key to sign transactions. Therefore, it is ridiculously hard to clone it even if you get physical access to the chip. Even in that case, just use the CVV is much easier :) Also, mobile payment is great because it requires you to confirm before release the information. like apple pay or sumsung pay. In my opinion, ApplePay may be the most safe method since it have a physical chip dedicated to cryptography and generate a unique transaction id to perform the transaction. BTW, the magnet strip contains card#, date, and CVV. therefore, a card w/o card number is just as dangerous if it have a magnetic strip on it. Therefore, I am disappointed that Apple Card have a mag strip on it and still marketing it to be safer. Is your threat model people who are just taking a picture of your card when it is lying on the table?

[@lucasschut4174]

I was thinking like, if the card encrypted then what stops people from just copying the cards info directly onto a second (maybe virtual) card? What is it that makes rfic harder to clone? Does it communicate instead of just information dumping?

[@ushiocheng]

@@lucasschut4174 so the card contains a asymmetric key to sign transactions inside itself, and it would not allow access to the key without some involved process such as DPA Try lookup FIDO U2F key or Bitcoin wallet, they work in a similar way

[@christer.rehnstrom]

You are correct, but bank card uses NFC (Near Field Communication) which is a subset of RFID, but width a much shorter range Up to about 10 cm or 4 inches. Todays RFID can have ranges up to hundreds of meters.

[@World_Theory]

Crazy idea: What if, your RFID card had a normally-off button built in, to interrupt the energy supplied by the wireless energy coil, until such time as you want to let the information be transmitted?

[@alessandroceloria]

Those devices usually are miniaturized, and in some cases it would be very difficult to fit a button in... Think for example about credit cards. But that's just a minor inconvenience, the main issue is that RFID devices are resonant RLC circuits. Their impedance (apparent resistance) is critical for their operation as it determines at which frequency the circuit resonates and works. A button would majorly screw up the circuit's impedance requiring some serious compensation at factory level. That would mean measuring and adjusting every circuit making this idea definitely possible, but very cost inefficient. In the end, it all comes down to production costs.

[@World_Theory]

Alessandro Celoria Ah, I see.

[@felipesantos2]

That's a wonderful video! Thank you very much!

[@dominikworkshop6007]

Awesome video!!!

Aldi, Lidl, Kaufland, Hornbach, Media Markt, Saturn

[@Felix-ve9hs]

Sparkasse?

[@martinrocket1436]

Felix R, totally looks like. But one thing he didn't research correctly: The NFC blockers don't always have to be bought. Sparkasse and other banks give them out for free if you ask politely.

[@TheThursty100]

@@martinrocket1436 I mean, there is literally the Sparkasse Logo on the Card. He taped over the Name of the Bank though, because it gives away his general region

[@martinrocket1436]

Timbo Jones, haven't we agreed that he lives in Leipzig?

[@justinjakull6301]

In the channel description stands he's from Fulda.

[@joshua4302]

Ich heiße das ist sein Impressum und nicht seine echte Adresse. Vermutlich nur eine Agentur

[@thotchs4116]

Love this channel

[@JohnLee-bf2ux]

Thank you for letting me sleep easy after seeing this

[@tomhyhlik1788]

The title is: "How safe is contactless payment?" which was not covered in the video :/

[@joestevenson5568]

the answer is on a card, sort of, at least no one should be able to steal a significant sum. From a phone? very secure.

[@tomhyhlik1788]

@@joestevenson5568 In the video is used completely different card type than the credit card has

[@kingseekerbackup3085]

@@tomhyhlik1788 wdym?

[@tomhyhlik1788]

@@jakedowling8414 no, he is not giving any info about contactless payment at all :D

[@danielvaldez9946]

@@tomhyhlik1788 Contactless payments are rfid cards that emit the cards encrypted data into the reader. the point is that if a hackers reader gets close enough to your card it can get your data, tho encrypted. phones can turn this function on and off. so up till there you can get a pretty good self thought out answer

[@thisfeatureisbad]

This kind of technology is used in shops to prevent from stealing. Am I right?

[@juststeve5542]

Sometimes it might be, but RFID is very limited in range. Often in stores it's a far simpler circuit, purely coil and capacitor which resonates at a specific frequency, this is then detectable by the induction coil by the doors.

[@dronemansk2121]

To presne neviem, ale je to možné.

[@thisfeatureisbad]

@@dronemansk2121 JJ

[@thisfeatureisbad]

V knižniciach sú také karty/nálepky proti krádeží.

[@dronemansk2121]

@@thisfeatureisbad jáj už viem, ktoré myslíš

[@atendimentoplayzz9605]

All hail the Great Scott!!

[@rocketraja25]

Congratulations for one million Subscribers

[@bogmaerke]

5-1=4, that's a minus. ISO 14443-4, that's a dash. Not trying to be rude, just informing you of a mistake you make. You're still the best English speaking German I've heard!

[@joshuabest100]

My bus stops near me have nfc cards in the bus stop and when you scan it you get taken to the time table on the website which is pretty cool but instead of that i read the card and rewrit to the card so now when you scan it you get taken to pewdiepies channel so you can subscribe

[@tanmay______]

Dafaq really? And why did they put rewritable cards on there smh

[@joshuabest100]

@@tanmay______ yeah i thought that because in the card writing setting you can actually write protect them

[@Abdega]

@Joshua Hutton They probably didn’t think to write protect them because they didn’t think people would write to them Whoopsie doodles

[@t_y8274]

@@Abdega bus stops did an oopsie

[@jparky1972]

Pewdpie. Really?! Ffsk.. Yes. They shouldn't have left the cards unprotected. But just because you can. Doesn't mean that you should.

[@florian2119]

Danke ziemlich gut erklärt

[@Robyrob7771]

Very informative!

[@andy9463]

where is the quadcopter????Oh...and also FIRST!

[@greatscottlab]

The video will come out when it is done.

[@tonpa8888]

@@greatscottlab r/technicallythetruth But in all seriousness, take your time. It shurely will be an awesome project, so waiting a but longer will be worth it. Greetings from Luxembourg!

[@sujasanthosh3252]

@@greatscottlab This is one of the questions which made Scott mad. And the one made him hide his "to-do list" 😉😉

[@andy9463]

@@tonpa8888 maybe he burn it :D

[@zaprodk]

Minus four 😢 It's dash or hyphen.

[@gearstil]

Very informative, thanks!

[@waynestewart1919]

You are awesome. That was a fun.

[@dattastycookie1930]

Cooles viedeo sehr interessant und hilfreich. Kannst du vieleich mal ein paar viedeos auf deutsch machen?

[@eliteschw31n64]

Schau mal in sein (erstes?) q&a rein er will es auf englisch machen ende

[@Maze-]

Nein

[@RakshithPrakash]

I only use Samsung pay, make a video on MST technology

[@nikomo]

MST works by emulating a magnetic stripe being read. Magstripe is no longer in use for payments in Europe, hasn't been for a long time. But that also means that it's just as insecure as magstripe, so, not much to learn there.

[@wodsex]

@@nikomo They are still used in Denmark

[@marcusm5127]

@@nikomo That is not the case, the Samsung pay is way safer. I don't know the terms, but it only works one time with each code generated and ofc you can only read the code when the user wants to pay. The only way to scam someone with Samsung pay except for hacking and such would be to have a powerful receiver and read the code and jam the real reader. Would be hard to do in practice and you still need to trick the bank.

[@kaseyboles30]

@@marcusm5127 It wouldn't have to be that powerful. Also one could just hijack the phone through blue tooth. Then next time they go to use it the token is relayed to your phone instead of the coil. just only do it on a percentage of first tries and the user won't even realize what's going on and just thing it's a normal failure. And both the bluetooth hack and the token relay have been tried and worked. And the relayed of token even worked when relayed to another country that at the time wasn't on Samsung pay's availability list, many miles away from the originating phone, meaning Samsung pay didn't even sanity check it. "oh you're buying a snack in a country we don't support hundreds of miles away from the phone? No problem"

[@omicron0mega]

My OCD was pleased with your diagram drawing proficiency.

[@leextranjee]

you just got a subscriber, thank you for the explanation!!!!

[@domints]

You totally oversimplified (or just didn't dig enough) the RC522 / PN532 topic. The 13.56MHz tag isn't spitting out data. It won't even spit out ID without being asked, not to tell about the data. All the data on the card (1KB in case of Mifare Classic 1K) is password protected and your card spit the data out because your reader asked for it and had proper access keys - in case of your card it was transport key, default consisting of loads of 0xFs. The only card that just spits out data are the 125kHz cards, but there isn't much there to spit - just few bytes of ID.

[@samtzam3774]

All this technology (RFID, NFC, Magnetic Cards, etc) Is not dangerous in mater of security. But is extremely dangerous in mater of privacy. So If you want to have privacy in your life, simply reduce the use of them of even better stop use them.

[@vgamesx1]

That doesn't make any sense, in terms of of payments your purchases are logged the same by both the store and credit card companies either way you pay, only way around that is to use cash for everything... Now if you were talking about working at some place that uses wireless tags in order to get around the building, then you kinda have a point.

[@jasonlisonbee]

@@vgamesx1 If I was in charge of building security tech, it would include near range fingerprint scanning, palm line scanning, hair and dot configuration fingerprinting of arms, fingerprint of bare foot characteristics, voice analysis, retina scanning, breath and over all air fingerprinting (seeking most unique possible set of particulate mixture put off by a given person [how animals with a strong sense of smell identify]), as well as checking visible physical characteristics of the body, posture and movement. Not necessarily impossible to fool, but if someone did, every living other spy would blush upon it being proved. Most likely armed security would catch them trying to penetrate a wall, floor or ceiling surface that they can't detect is being monitored.

[@AliYassinToma]

That outro gets me every time

[@al35mm]

I've been using NFC Tools a lot recently in conjunction with NFC stickers I got for peanuts online - 10 for about £3 with free shipping! I've been experimenting on different ways of using them and I have been finding some great uses. The only real limitation is storage space so you have to program them efficiently.

[@daddynikolatesla6663]

When you walk on street, then a man bumped accidentally to you. Who has a pin machine in his pocket and takes 25 euros (because thats the limt in our country) by passing the pinmachine along your pinpass... How to earn 500 euros each day!

[@noggin73]

That pin machine needs to be linked to a bank account (maybe a merchant account?) so he will soon get caught.

[@KanalMcLP]

but it might be a stolen account that is just used to get the money physically to then put it somewhere else.

[@MrDoItNice]

And all his personal information becomes available to your bank to press charges. I'd much prefer that to someone running off with my wallet.

[@daddynikolatesla6663]

It was just pure sarcasm but oke😂😂

[@trinidad17]

You probably can build a high power transmitter and drive around. It's illegal to do so, but if you're one person stealing people's money I guess you wouldn't care about that.

[@aaaaaaaaaassssssssdf]

at work i use a handheld rfid machine to scan rfid tags for inventory control, it takes about 10 seconds to scan 200 items and works about 20-30 feet away. none of my current debit/credit cards use rfid now, and only one did before but didn't last long it seems.

[@christianB1234567891]

Its all about the frequency^^ There are Toll Stations with long range RFID, but they can't read your credit card in your wallet, cause they use another frequency.

[@scheme4685]

Uhh thankaaaa youaa foraaa theaaa videoaaah.

[@pedrokern9943]

Opening applications with the card is a good idea!

[@warengonzaga]

Great work... buddy!

[@stmlab149]

Thanks for Great Explanation!!!

[@jrioublanc]

Thanks for this video, do you know where I may find data about the working distances vs. the frequency? You briefly mention that and I would like more detail for an application (I look for 50-10 mm).

[@pw673]

Great video with lots of usefull information in it

[@louisc8873]

Sehr gut! Vielen dank

[@manishadwivedi1929]

Awesome video. I love it

[@mazengomaa27]

The greatest explanation EVER

[@getsomeknowledge3580]

Awesome man