RFID credit cards = bad idea - Journal of Omnifarious
Dec. 16th, 2003
07:54 am - RFID credit cards = bad idea
There might be interesting applications of RFID technology that don't destroy privacy and aren't horribly insecure. Sadly, the people behind RFID don't seem to be interesting in figuring that out. My recommendation is to stay away from anything that mentions RFID at all.
The newest idea is to have credit cards where each card is identified by an embedded RFID chip. This is very insecure as the chips do not require a cryptographically secure challenge/response exchange in order to function. This makes it very easy to clone your card.
Please spread this information around a lot. A lot of people will lack the knowledge and/or analytical skills to see why this is true. So, a lot of 'bad feeling' needs to be generated about the technology to discourage its use and avoid the rather plausible adoption scenario discussed at the end of the article.
Simply put, if RFID credit cards are widely adopted, we will all end up paying for the extra fraud.