RFID (click here for a page from Wikipedia explaining what it is) is everywhere. It’s in credit cards, passports, inventory systems, and even is used to track athletes in sporting events like the Ironman. It’s also really hackable, almost frighteningly so actually. Not to mention that there are privacy issues with the technology. But that hasn’t stopped it from being rolled out in a big way. My new MasterCard for example comes with a RFID tag that allows me to “tap” the card against a reader to pay for something. Tim Horton’s among others has these readers installed. So I can pay for my large “double double” easily and without a signature. That’s great for Canadian coffee addicts. But I digress.
The issues with RFID (hacking, privacy, etc) are not well known in the public domain and the Mythbusters show planned to change that by having a show on the topic. That was until the credit card companies lawyered up and forced Discovery Channel to not broadcast the episode.
Here’s a suggestion to the credit card companies: Your customers would be far better off if you spent the money that it cost you to lawyer up on actually improving security so that this isn’t an issue. Maybe then I along with others on the Interwebs wouldn’t have created postings on this topic making you all look like scumbags a bunch of people who have something to hide.
Just to rub some salt in the wound of credit card companies everywhere, here’s a video with Mythbuster Adam Savage explaining the situation as best as he can:
UPDATED: Here’s a video that describes how to hack an RFID credit card using $8 worth of stuff off eBay. No wonder the credit card companies are upset!
Mythbusters Host Backs Away From Comments About Shelved RFID Episode
Posted in Commentary with tags Mythbusters, RFID on September 3, 2008 by itnerdI’m guessing that Adam Savage got a call from his corporate master boss at Discovery Channel. That’s because he’s backed away from the comments he made about that RFID hacking episode that never happened. Before I get to that, let’s hear what Texas Instruments had to say about Adam’s comments:
“In June 2007, MythBusters was interested in pursuing some great myth-busting ideas for RFID. While in pursuit, they contacted Texas Instruments’ RFID Systems, who is a pioneer of RFID and contactless technology, for technical help and understanding of RFID in the contactless payments space,” Huff said. “Some of the information that was needed to pursue the program required further support from the contactless payment companies as they construct their own proprietary systems for security to protect their customers. To move the process along, Texas Instruments coordinated a conversation with Smart Card Alliance (SCA) who invited MasterCard and Visa, on contactless payments to help MythBusters get the right information. Of the handful of people on the call, there were mostly product managers and only one contactless payment company’s legal counsel member. Technical questions were asked and answered and we were to wait for MythBusters to let us know when they were planning on showing the segment. A few weeks later, Texas Instruments was told by MythBusters that the storyline had changed and they were pursuing a different angle which did not require our help.”
Nothing sinister here. So when that statement got out, Adam came out with this statement:
“There’s been a lot of talk about this RFID thing, and I have to admit that I got some of my facts wrong, as I wasn’t on that story, and as I said on the video, I wasn’t actually in on the call,” Savage said in the statement. “Texas Instruments’ account of their call with Grant and our producer is factually correct. If I went into the detail of exactly why this story didn’t get filmed, it’s so bizarre and convoluted that no one would believe me, but suffice to say…the decision not to continue on with the RFID story was made by our production company, Beyond Productions, and had nothing to do with Discovery, or their ad sales department.”
So, it sounds like the credit card companies didn’t force this story off the air. Of course the Fox Mulder types will say that this is spin to cover up the fact that they did and they don’t want to look like scumbags people with something to hide. So to clear the air, I think it would be a good idea if Adam did go into detail about why this story didn’t get filmed. That way everything is out in the open.
So, how about it Adam? Will you do that for your fans?
Oh, all of this still doesn’t change the fact that RFID credit cards can be hacked easily using $8 of gear bought from eBay. So no matter what, there’s still a security issue here.
1 Comment »