How to hack RFID-enabled Credit Cards for $8 (BBtv)

Рет қаралды 965,818

boingboingtv

Күн бұрын

Пікірлер: 516

@waldoisdead3507 4 жыл бұрын

Am I the only one from 2020!! 😂😂

@mesiroy1234 3 жыл бұрын

M etoo

@sizzlemctwizzle 16 жыл бұрын

What a lot of criminals do is get a job as a cashier and keep a portable magnetic strip reader writer at the register. When someone hands them a card they first scan it on the portable read(maybe under the counter) and then on the actual reader for the store. They then go home and apply for similar credit cards and when they receive them in the mail they replace the data with your's, thereby having charging from you're account without your knowledge.

@WAYGULOLBEEF Жыл бұрын

yup.. or even more common and simple.. they just snap a quick picture of the front and back of your card using their phones.. or even more simple.. when I worked in call centers back in my younger years there was a huge problem with fraud in our industry where employees would write down customer billing info and credit card #s and then use them later..

@GuruAidTechSupport 9 жыл бұрын

Actually, the banks have changed it so your name and CVV is not simply shown anymore like it used to be.

@JemimaDoesASMR 9 жыл бұрын

***** Thank God. This video's 7 years old =/

@NAWFSIDE_SLIM 5 жыл бұрын

Lies

@teresabuehler4449 4 жыл бұрын

Contact hak_slav on instagram or mail him on hak.slav007@gmail.com or +14132827250 on whatsApp (he does not take upfront payment) if you need help hacking your PayPal,credit score fix, bank account,phone hack(cheating husband or wife)western union hack,money gram,credit card hack,instagram verification, facebook and many more.. His fast and reliable

@fillepus 12 жыл бұрын

He's a professional. No one will expect it was him.

@collegeBoi15 15 жыл бұрын

the data is sent out as radiowaves, and so could be read by any device within range, even if there were more than one. though, you're completely right. the range is so small you *would* have to practically dive between the checker and the customer to use it. :)

@TMWarMoth 15 жыл бұрын

standing in line at the store would be a perfect place to do this.

@DJLiquidice 16 жыл бұрын

Think about an employee working at a store that takes your credit card and swipes it, or a waiter who cakes your card.. so many hands that card gets passed through can be swiped behind a counter.. don't even need to get near anyone

@wackyrice1 14 жыл бұрын

smooth move, exlax. I can understand the need to get this information to us, knowledge I didn't have before, and am grateful to have now, but now all the nasties out there know WHERE to get that scanner, and how to use it. I guess you're between a rock and a hard place. Perhaps SOME of the information could have been withheld, and the information still given to us...but, thanks for the info. I'll take better care of my cards from now on.

@rahmega7 16 жыл бұрын

All your statements are 100% true to my understanding. Keep up the good work fellow freedom fighter. We'll have our day I'm sure of it.

@BenjaminFranklin2u 16 жыл бұрын

Maybe in the future, but the RF signal is very weak because the card doesn't carry batteries. So you have to be within a few inches to get the information. Scanning an area bigger than 6inches square would be impossible. Since you can't fit more than one person in that space, then this is not likely.

@sh1ttykitty 12 жыл бұрын

A disguise :P No one would suspect him. Ingenious!

@kopaganda13 15 жыл бұрын

Yes it does. It's just not shown in the demonstration.

@ericsean67 16 жыл бұрын

This is the same technology that will be and is possibly already on your drivers license. Called the real ID act or the national ID, each one will have RFID. So any info that is contained on the chip will be easily read as well. Oh yeh, it is already on all new passports.

@tuttt99 16 жыл бұрын

Chase tried to foist one of those chipped cards on me. Since my existing non-chipped card is valid for 2 more years, I decided to cut up the chipped card and stick the pieces in the microwave. Made a nice fireworks show complete with sound effects. Bye bye chip. Called up Chase and told them never to send me a chipped card again. Also said if the only choice is a chipped card when my old card expires, then I will close my account

@Linqua2112 15 жыл бұрын

the wallet seen here uses the same principals as the "magic bag" that is sometimes used to shoplift. you can make a "magic wallet" that will protect your rfid cards out of about 5 layers of tin foil, or what works great to my experience, metal duct tape.

@TomBellenger 13 жыл бұрын

The best you can hope for is getting the card holder name. The dynamic CVC check will fail if you try to make a transaction with your scanned data.

@BenjaminFranklin2u 16 жыл бұрын

You clearly DIDN'T think, that's the problem. Lots of sites do not require you to put personal information. Often they have the goods delivered to vacant houses...etc. It takes on avg a week to notice charges that you didn't make on any credit card. Often companies will let you know if you accumulate a lot of suspicious charges, but often they don't. You don't need money, just the ability to buy shit, which can be exchanged for cash or just keep the stuff :).

@kingtiger01 15 жыл бұрын

Yes, since you're entire nervous system is nothing but electrical currents being carried throughout the body.

@TheRedsox321 12 жыл бұрын

I'm so confused. He's a hacker? On a Macbook?

@codexbasher 16 жыл бұрын

RFID tags...scary stuff. For now the credit card is a prop, whereas scanning of the ass may be a literal truth when the RFID is inside the user, not merely on their credit card. As displayed in the video, the irony of the supposedly enhanced security is quite apparent, and would become tragically profound once ALL of and individual's important data is contained only in their body(or ass). But as said in Zeitgeist, the majority of us will embrace this technology. A brave new world indeed.

@Denamic 16 жыл бұрын

To all people who thinks hackers = bad, this is why some hackers are necessary.

@Terabiel 11 жыл бұрын

One piece of key information about Passport RFIDs: The chip in Passports and Passport Cards only contains an ID number, it has to access the secure network to link that number to a name.

@MikeTrieu 7 жыл бұрын

Terabiel: And, yet, what is typically printed on a passport? That's right. Your full name and probably other exploitable information. Anyone with a telephoto lens and a directional RFID antenna can obtain this information.

@jameskray4368 7 жыл бұрын

Mike Trieu they can't do anything with the information tho can't they ?

@RRRRussia 16 жыл бұрын

if you were going to brute force the pin number you wouldnt need a random number generator. just a counter that goes from 1 to 10^4. the problem is the time/method of testing each combination. it would be a lot more difficult than you might think.

@robertgisthebest 14 жыл бұрын

All you would have to do to make it more mobile is strap the scanner to you rist and run the cable up your sleeve to a netbook in your back pack.

@IzzyShooter 14 жыл бұрын

Are most RFIDs operating in the same frequency so a reader can pick up a wide variety of them? Just curious.

@tok4life420 15 жыл бұрын

the wallet was pretty fucking cool, and that man can be rich LOL, good thing he uses his hacks for good, damn!

@hackspy 12 жыл бұрын

I'm not defending him but, a MAC, Kernel OS Darwin (FreeBsD Based) IMHO near to a Unix than a Torvald Linux; Hardware, Intel, and Graphically well you know... And to be a hacker, you need more than a fancy laptop, or a hard console with lots of hexa info, I believe that is the way you analyze problems, and how you get the answer... is more a state of mind or a way to live your life...

@qin02 16 жыл бұрын

so when u put the numbers in it should have been encrypted that will save processing capacity, plus its not too hard to produce a encryption only chip. I have just worked on one recently

@mankinPT 15 жыл бұрын

He can never break the system this way, the only thing he may remove is a name and account number, which will be ALIAS names or non existing on the card.

@sabotoged 14 жыл бұрын

In man, (and technology) we trust!

@gray1963 16 жыл бұрын

No joke, this was on CNN this morning.

@Membrane556 16 жыл бұрын

Neat also expected you also can do the same to those pass key things people use to get gas and those RFID fobs some cars use instead of keys. Though in theory the reader could be made to work with a tiny micro controller instead of a bulky laptop. Maybe a linux dimm or a MCS-51 with lots of sram.

@qin02 16 жыл бұрын

MD5 so u compare the encrypted string. but to get around the delay just store the information in encrypted format IE not encryption on chip but store the ASCII plus MD5 is a one way hash

@Amandandoug 12 жыл бұрын

This is why I purchased an Allumi Wallet from Walgreens =)

@kiblasfla 12 жыл бұрын

Once you have the device, what do you do? like how does it work? You plug it to your pc and what software or hack do you use? You scan the card but how do you make all the info magically appear on your computer screen? this is just curiosity, nothing illegal >:) hehe

@papajohn5656 14 жыл бұрын

@LiquidSwrdz Mac OS X was based on NeXTSTEP, which was a BSD derivative using a different microkernel (mach). since then, it's been updated plenty of times and has been certified as actual UNIX by the open group.

@IdleGod 15 жыл бұрын

Its why I have a faraday cage wallet. $5 off of the internets. Use your chip, not your rfid. But most places still require a swipe.

@ClutchSins 14 жыл бұрын

*Linux And Macintosh is based from a Unix code base with FreeBSD additions

@AutoproGreece 6 жыл бұрын

Hi. We like to know if we can use your video to show people that they have to buy a RFID Card protector!

@teresabuehler4449 4 жыл бұрын

@RandomShortguy 13 жыл бұрын

you need more than just the number to really use it. 2nd NFC communication requires you to be very close to the card. It's pretty bulky to carry a reader around to read the data, Decrypt it and then whatever else. My cellphone has it and I use it to ride the trains and make payments at convenience stores and vending machines. Using a reader and and RFID card for the purpose it was designed for is not "hacking."

@pyro3rg 15 жыл бұрын

anyone else notice that when he says "I can take this info and go shopping online" that only 5 #'s from the card show up?

@itsa3ringcircus 12 жыл бұрын

Like? Not so much. Passports by the way are secured via format. Only Federally issued readers can work.

@dawin45 14 жыл бұрын

@TellinTheTruth they can shop using your card info,withouth pin introduction(wherever available),and youll see the long bill at the end of the month....

@PastisAndBuenri 12 жыл бұрын

Could anyone tell me the brand/model of the device ??? Thanks on beforehand !

@DigitalPraise7 15 жыл бұрын

Amen, misterscreenprint! We need to stay in the Word or we WILL be deceived. God Bless!

@Dontenslaveme 11 жыл бұрын

I put my CC in the microwave oven and it exploded in 2 seconds and melted the plastic where the antenna and chip was. I cleaned it up with a straight razor and it still works fine in the ATM and when I swipe the card. Don't put it directly on the glass plate. I blew a hole clean through the plate.

@teresabuehler4449 4 жыл бұрын

@werehyenataur 14 жыл бұрын

what is this device called specifically?

@Manuelc33 12 жыл бұрын

Since most stores require a CVV2 which are those 3 little numbers on the back of your CC I don't know why this is a big deal...

@WAYGULOLBEEF Жыл бұрын

That's true, but what is crazy is Amazon does not require a CVV at all.. granted they do have pretty OKAY fraud detection BUT the method to beat it is pretty well known within the criminal world and they are a HUGE target of fraud..

@rahmega7 16 жыл бұрын

If it's one thing I hope all you people understand is that capitalism was never to blame for the issues we have today. Capitalism is what made this country great. You see what's happening with the government bailing out big banks THAT'S NOT CAPITALISM!!! I CAN'T STRESS THAT ENOUGH!!! In a real capitalistic society those banks would fail and it wouldn't even effect the economy that much because it's power would have been restricted to only those who banked with it. Do your history guys please!!!

@nullwii 12 жыл бұрын

i seem to miss the part where the 3 digit key needed online is available

@CrackBabyG 10 жыл бұрын

what model is that rfid reader?

@jameskray4368 7 жыл бұрын

PhiberOptics what is he using and what software ?

@gracechen1717 7 жыл бұрын

Hi Friend,we can provide all kinds of card to you,my email:grace@greenrfid.com

@ceoaleostm2146 5 жыл бұрын

Vivotech RFID reader on ebay

@teresabuehler4449 4 жыл бұрын

@Wigwhom86 15 жыл бұрын

so does the Security Code pop up or not

@iicekingak47 15 жыл бұрын

a grate way to disguised it would to make it into some sorta belt buckle (it may not look right when scanning) but it might jest work (with some luck)

@kings7man 10 жыл бұрын

this is SOOOO easy , the banks need to do something about this ,it is all very well to be vigilant with your cards but this sort of thing could potentially even net the most careful .

@teresabuehler4449 4 жыл бұрын

@madichelp0 13 жыл бұрын

@Flomounier1 You know that mac is unix based right? As a windows user myself (for gaming, etc.), I would never use a windows if I wanted to get serious with computer science. It doesn't matter if it's a linux or a mac, as long as it's not the horrible windows terminal...

@AonnrecordsBlogspot 14 жыл бұрын

My name is Robert Lee Taylor. I wrote the thesis on Advanced Biometric Defense Systems. This is old hat, nothing new and the technology has existed for more than a decade.

@sharpasadullknife 13 жыл бұрын

so basically if you went on the subway during rush hour you could easily get alot of info

@nisher15 14 жыл бұрын

A car based scanner can read further so you can read at like 50 ft away. Same thing goes for the RFIDs in US passports,

@klevis2010ify 12 жыл бұрын

where can i get a reader like this please help me

@TheAnarchist33 16 жыл бұрын

It comes with the reader!

@emerson24 13 жыл бұрын

@dangitcarn Can you educate me please? Does a mac not have the capability to hack?

@TeganBurns 10 жыл бұрын

I really don't see why these banks haven't implemented a thumbprint scanner yet...

@teresabuehler4449 4 жыл бұрын

@Nadnetuk1 13 жыл бұрын

@MrJobonski Mifare is a RFID card for example ISO14443 card. its has a micro-Chip embedded in it with a antenna. With stores information on the Tag. Tag is the mifare. Now Smart Card is a Card aswell but it can be for example a ISO7816 form mean Credit Card. SmartCard ISO7816 is the design form. i.e credit card.with a smartChip. a Chip embedded in the card which communicate using the ISO design. I hope i have answer your question. If you need more help, i'll be happy to assist. ?

@lezhotty83 13 жыл бұрын

"in the future i hope to be able to do it without even getting near you" oh that is a comforting idea NOTTTTTTTTT if a dumb dumb can that everyone dumb and not so dumb can. "being safe isnt the priority" dang!!!.. it should be

@Paraneoz 10 жыл бұрын

Usually you would need the CVC number aswell written on the back of the card though?

@tcpnetworks 10 жыл бұрын

Nup... Not with paywave - it's totally unlimited for transactions under $100.00

@juggalo69141 10 жыл бұрын

Zack Doop explain how this could work and im interested with proof

@amazonalternatives7276 8 жыл бұрын

Not on Amazon you don't.

@jameskray4368 7 жыл бұрын

tcpnetworks how does it work?

@teresabuehler4449 4 жыл бұрын

@LynxHope 11 жыл бұрын

Have you tried turning it on and off again?

@teresabuehler4449 4 жыл бұрын

@utterube 15 жыл бұрын

Any sensitive information released for educational purposes isn't illegal. I would say this is a good thing to know, like the guy said, tinfoil your chips

@ProjectZro 15 жыл бұрын

but its so much fun and this is realy to show ppl that just cuz your new fancy credit card has a security chip just means its 10 times easier to get your info. so stick with the old stuff OR get a stainless steel wallet

@ForgedEggs 14 жыл бұрын

@L2DragonHunter That's where you;re wrong. This Pablos figure is a White Hat hacker, he'll find all kinds of holes in security and he'll make sure it'll come to light so it can be fixed. A Blackhat, which is the type you are referring to finds holes in security systems, or in this case credit card RFID tags and abuses this for personal gain, or just for the hell of it.

@okhabin 13 жыл бұрын

@recommenderinaction there is a reason why you see the numbers censored. like **** **** **** 1234. they ONLY show last 4 digits. card #, expiry dates, and name are only things needed to purchase stuff. So this is pretty major security threat.

@NickPerales-qv5xv 8 ай бұрын

What is this device

@zerocoolojoia 13 жыл бұрын

at 2:55 she mentions something about "wondering around with your laptop"... did it ever occurred to anyone that it's already possible, by using a simple "SMARTPHONE"? no one tried it?

@shawry95 13 жыл бұрын

what software does h use?

@JoeCfb 15 жыл бұрын

He's a professional hacker......

@GoReRoTTedDeAtH 16 жыл бұрын

what is that reader?

@Nadnetuk1 13 жыл бұрын

how do you by pass Key authentication and enter the RFID Data. I would like to read my own credit card. i have a RFID Reader read ISO14443 type A. but it doesnt let me in the sector key of my credit card??? Why... i know its something to do with Access Control denies

@DNICEDOINGME 11 жыл бұрын

Thanks for these kinds of information& it's always good to know how corrupt ppl are. I try to be as careful as possible when it comes to my cc & personal information so reading these kinds of posts&watching the videos are definitely helpful in making me more aware. What goes around comes around. How would you like if it happens to you. Have a blessed day. Dawn

@teresabuehler4449 4 жыл бұрын

@phoonjzc 15 жыл бұрын

Can you do a video on the tinyfoil wallet. I wanna know more about it.. Better still make it on sale. I gonna buy it.

@AnonymousDoe1 13 жыл бұрын

The reader is called ViVOpay 5000m from vivo tech i checked on ebay and they don't sell it there

@justamar 15 жыл бұрын

wait wait, April 8th? the unibody MB were not out untill later in 2008

@lochinvar00465 16 жыл бұрын

So, if everyone who put in their $1000 savings wanted to close their accounts -- it couldn't be done - Good point. I have had many times that my bank has made it difficult to remove large chunks under some "security" excuse.

@Kennethstupi 14 жыл бұрын

could you get like a gift card with money on it swip it save all the information on it spend the money on the card go back to the writer and write the information you saved when it had money and then respend it? or do they have some sort of lock were you can only use that data once.

@ChadMees 15 жыл бұрын

hey look out for that guy hes hoping to take the info still

@RealRaynedance 15 жыл бұрын

And we can't flag for "Promotes Crime" or "Shows how to commit crime"...

@losroftheday 16 жыл бұрын

wouldn't it look weird where some guy with a blue thing connected to a laptop just goes up to ur rear and walks away casually?

@highonsmog 16 жыл бұрын

valid concerns.

@roadragecafe 12 жыл бұрын

The company is hedging the security risk against the complexity of implementing a *real* secure RFID solution. It's their own dime, since they are effectively "good for it" if any fraud occurs. Why is that an outrage?

@tardisrocks 13 жыл бұрын

what is the scanner called? i have searched for paypass, credit card scanner, credit card reader, rfid scanner/reader, with no results quiet like the scanner shown..... does any1 have a link? or know exactly what it is called?

@knarkis90 13 жыл бұрын

RFID is stupid to use in terms of security. In credit cards there is a passive RFID I suppose?

@omglollmao123 14 жыл бұрын

@johnrcoben Ever considered that perhaps the corporations distributing these cards want the "secure" information stored on them to be easily readable so cards can be tracked & monitored remotely, away from the point-of-sale, and across the globe?

@Tedybear315 11 жыл бұрын

Ask for a card without the "Pay Wave" feature. My bank will allow this! (And I've had my number stolen 4 times with the pay wave feature.) Once I had them send the card without that chip? No theft in over a year now!!

@teresabuehler4449 4 жыл бұрын

@kingtiger01 15 жыл бұрын

Done, been done since 2006. Wake up people. i can do it with a high-band attenna @ 15dbi, from my home. with a 1watt amp, and pick up RFID's of CC and Passports 6 blocks away... now... if i were to use signal bouncing, or setup repeaters on harmless wifi attenna's at Companys... well, i now have the worlds largest RFID scanner! LAME

@middimadz 13 жыл бұрын

@Flomounier1 I dont see why a hacker with a demand for a GUI would use anything else. OSX is fundamentally linux - windows gets hacked, it doesnt do the hacking.

@ginohaskins 16 жыл бұрын

whats the name of that reader?

@collegeBoi15 15 жыл бұрын

but even with the ss wallet, it will still be vulnerable every time you take it out to pay for something

@qeeky 13 жыл бұрын

you don't get phone # or address which is needed to use cards

@ozburg7 15 жыл бұрын

If we all get one of these scanners and everybody hacks each other - then given time, chance and random process we may all end up with roughly the same amount of money we started with - minus eight dollars. But really, this is not so much about hacking..... it's more about tracking. I may actually agree with him on one point - are the banks worried about real card security, or making people 'believe' they're secure?

@nathanjamesbaker Жыл бұрын

Underrated comment.

@tardisrocks 13 жыл бұрын

@jesforchrist computer forensics student? what school? if you dont mind me asking?