RFID Threat - John Dunn, Consultant, Ambertec, P.E., P.C.

RFID (radio frequency identification) is showing up in more and more places and let me express an opinion: RFID is very scary.

I read how affixing RFID tags to warehouse merchandise makes inventory control much easier than it once was. The workmen need only pass by the fronts of storage shelves, scan the affixed RFID tags and account for all of the items there.

That's wonderful.

Then I read how RFID tags are now being included in credit cards and as with the warehouse example, by carrying no more equipment than can be stuffed into a duffel bag, a criminal can walk through a crowd and scan the RFID tags on the credit cards of passers by, thus stealing their credit card information.

That is not wonderful.

In connection with this, in Consumer Reports for August 2006, page 11, the "Your Letters" section, the editor wrote:

"Some data security experts have recommended using foil liners in wallets to block scanning of RFID-enabled payment cards that don't have to be swiped. But extending that type of protection to every item you carry could be cumbersome."

So which is worse, cumbersome or robbed?

Comments

[Mark Roberti]

John,

You are misinformed about RFID. As a member of IEEE, it seems odd that you would spread misinformation about technology.

Mark Roberti
Founder and Editor
RFID Journal

[John Dunn]

That's your opinion , Mark.

Per the admonition in Consumer Reports and other writings I have come across from time to time, I keep my credit card securely wrapped in foil and have instructed each of my family to do likewise.

[John Dunn]

Just in case you still don't believe this, see the current issue of Consumer Reports, June 2011, page 23, "House of Cards, Why your accounts are vulnerable to thieves".

The bad guy doesn't need a duffel bag anymore, a briefcase will do.

Also note the illustration on page 25: "FOILED AGAIN A duct-tape wallet lined with aluminum foil made RFID cards more difficult to read."

[Steve Lyons]

So the long term question is, what value does the RFID offer the consumer?

If the security risk is greater than the value, I fail to see how this will catch on. If the risk is suppressed by the media, then they are doing a great disservice to the public.

I myself have informed all my credit card providers that I do NOT want RFID embedded in my cards for any reason. If they refuse to provide a non-RFID card, then that account will be closed. I don't find it inconvenient to swipe a card when I make a purchase.

More to the point how do you know which card is charged if you have multiple RFID enabled cards in your wallet at the time of purchase?