Hacking Through the Air | Contactless Payments and NFC

Подписаться 464 тыс.

Просмотров 173 тыс.

50% 1

So, there’s a high probability that you’ve used a contactless payment method today, whether that’s for your morning ‘decaf soy latte with an extra shot’ or for the underground fare, it all depends on your daily routine and lifestyle.
With solutions such as Apple Pay, our phones are basically becoming our wallets too. However, that’s literally an ‘all eggs in one basket’ situation.
To stay safe in the digital jungle, it’s important to keep up to date with the latest technologies, their vulnerabilities and techniques for their mitigation.
In today's video, we’re going to squeeze out the juice of Near-Field Communication’s pros and cons.
Chapters:
00:00 - Intro
06:15 - Hard
09:25 - Magnetic Stripes
11:18 - PIN code
17:12 - EMV
18:41 - Near-Field Communications
20:33 - DIY POS terminal
23:00 - Conclusion
Useful videos:
Watch This Before You Buy Bitcoin
• Bitcoin Is Not Anonymo...
How To Disappear Completely and Never Be Found
• How To Disappear Compl...
How To Remove Your Personal Data From The Internet | Tutorial
• How To Remove Your Per...
#digitalSecurity #Sumsub #Personaldata
Sumsub - empowering compliance and anti-fraud teams to fight money laundering, terrorist financing, and online fraud.
More about us:
sumsub.com
/ sumsubcom
/ sumsubcom
/ admin

Наука

Опубликовано:

14 июл 2024

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист

Посмотреть позже

Комментарии : 243

@kindlehaha 2 года назад

I don’t get how this channel doesn’t have millions of subscribers. The videos are so informative and well-produced. Definitely underrated!

@jeffbrownstain 2 года назад

Channels not even a year old yet

@I_Unintentionally_Morph 2 года назад

I don't even want people to know this channel ,

@honeybunny79 2 года назад

@@I_Unintentionally_Morph why?

@clawpa104 2 года назад

For real

@fireskorpion396 2 года назад

@@I_Unintentionally_Morph why not? Are you a scammer? xD

@AwokenEntertainment 2 года назад

layers and layers of valuable information here 💡

@augustinasdoesarchitecture3900 2 года назад

Are we just going to ignore the ever changing high quality spaces you film in?!

@Pysslis 2 года назад

Sumsub is a company, I guess that help in having access to all these filming locations.

@Sumsubcom 2 года назад

We are running away from the hackers trying to catch us, that's why

@hb3393 2 года назад

@@Pysslis no way?? This is all sponcon??? 😭😭😭

@zucc4764 2 года назад

@@hb3393 I'm not complaining tho. They're not in-your-face hard sellers. There doesn't even seem to be an agenda to these videos other than information. I didn't even know this till I read this thread. It's not deceptive imo

@zekiz774 2 года назад

@@hb3393 so what? what's so bad about this?

@Gaven7r 2 года назад

I'm amazed at averything, and specially, at how high quality this channel's content is! Keep it up!

@Sumsubcom 2 года назад

Thanks for your support!

@EfficientRVer 2 года назад

Another great video. Maybe because I rarely do small transactions (no coffee shot habit here, thanks) I've actually never done a phone pay or NFC card transaction. Some of the grocery stores here in fairly average suburban and small city USA, don't even reliably read the chip on credit cards, and often then do work upon swiping the magnetic stripe! Likewise at gas (petrol) stations. Holding 4 different credit cards in front of a Chrismas laser array shows that 1 is totally opaque, 1 is almost opaque but allows some light (both green and red) through the borderlines of the CPU chip, 1 lets a bit of red show through the card, and one has its empty innards well lit up by the red array. But no NFC coil in any of them. I've never asked for an NFC version of my cards, but I've also not ever refused any offer where they push out new types of cards.

@archygrey9093 2 года назад

Generally NFC cards will have a symbol on them that looks like a wifi symbol, The NFC antenna won't always be a circular loop but may be rectangular or close to the outside edge of the card if you look with a light. Personally i've always found NFC to be the most reliable method of card payment, it very rarely fails compared to chips or magnetic strip (my cards have all three options).

@sprinkles2765 2 года назад

Fun fact: The foil between the card and reader doesn't necessarily need to "block" the signal, it just needs to soak up enough of the energy that's coming off of the reader to make the card unusable. This is fairly easy to do because of how little energy readers use.

@hexstaticloonatic4194 2 года назад

Recently got into programming basics and this channel has potentially set me on the route of cyber security and penetration testing (@John Hammond is responsible too though tbh)

@tatka_5470 2 года назад

You should checkout Live Overflow's channel! ru-vid.com Specifically his older "Basics" series. You can learn a lot about many flavors of cyber security, he pretty much got me excited for it in the first place - I now work with browser security on a daily basis and I have to thank him for introducing me to it.

@hexstaticloonatic4194 2 года назад

@@kcnl2522 what do you mean? 😅🤔

@hexstaticloonatic4194 2 года назад

@@tatka_5470 thanks! will definitely check it out

@hexstaticloonatic4194 2 года назад

@@kcnl2522 the advice is very much appreciated, thank you kind sir! I've had trouble with that, my solution is to find one and only one tutorial/course i find interesting, when i do i put all other study topics on hold and just burn through that one course without dispersing my energy. Once I've completed it, only then do I go on to other things/topics/courses/tutorials. Keeps things nice and compartmentalised, and stops me wasting energy on a thousand things

@ProudlyINDIAN360 2 года назад

@@tatka_5470 thanks

@caladestine4540 2 года назад

Your Russian pronunciation of the Kavrakov's full name was extremely good, was pleasantly surprised. Great breakdown, great vid. Keep it up

@Mark-lu8ee 2 года назад

Yea same, it surprised me too

@ebermtheburn 4 месяца назад

Thanks. I noticed a video trying to sell expensive "radio theft proof" wallets and came searching for an explanation. Luckily I found it here and realized that the people trying to sell you fancy wallets are the real scammers. There is no threat of someone stealing your credit card information by walking by you with a scanner.

@at_oussama 2 года назад

this channel must be the best one i subscribed to in the past 10 years alone

@piksler 2 года назад

This is my favorite channel on youtube. Thank you for making such insteresting videos!

@Sumsubcom 2 года назад

Our pleasure!

@stanleymakafui 2 года назад

Stunning set design, everytime

@itssooverweresoback 2 года назад

This channel is god tier,fr.

@TripImmigration 2 года назад

first time in your channel....such good quality. I'm living for..+ one subscriber

@Sumsubcom 2 года назад

Thanks so much! Welcome on board. :)

@notnth 2 года назад

16:35 this instant transition to a perfect russian accent really caught me off guard lol

@aussiebob1315 Год назад

what a great channel i just found , love your approach cheers from NZ

@velmu4463 2 года назад

Spectacular Bradventure!

@huggybare9 2 года назад

Awesome content bro. Thanks

@jetseverschuren 2 года назад

I disagree with a couple of key points. The main protocol of the bank cards, emv, is fully open. It's actually pretty easy to implement, I've done it for both contact (stick the card into a reader) and contactless (nfc). Furthermore, multiple stacked cards are definitely readable. The underlying standard (iso14443) has a built in mechanism to allow reading multiple cards "at the same time" (not exactly, it quickly switches between them), but since most people don't need it, it's often not implemented.

@Tr3m0rz 2 года назад

While i'd agree that for the most part the things he talks about in videos are not 110% Technically correct, I'd argue that is probably a good thing, the things he makes videos on are correct enough to make your average Joe re-think things. If he where to bombard people with all of the 110% Technically correct information. the average Joe would be half way through some other video before sumsub covered 5% of the Technically correct info. and at the end of the day most of his videos i have seen are aimed at making your average Joe more aware of things they may have taken for granted or not put much thought into.

@jetseverschuren 2 года назад

@@Tr3m0rz sure, but he's wrong on some fundamental points, which leads to a false sense of security. While a bank card is almost impossible to clone, it's not because two cars together can't be read. An NFC blocking waller is still important for a lot of other applications

@Tr3m0rz 2 года назад

@@jetseverschuren I really can't comment on the bank card thing, i'v never really done any research into them or their technologies beyond a cursory glance, i was more referring to his video's in general. Though i do agree that NFC Blocking wallets have their purpose, there are devices available for purchase, or diy build-able that will quite easily pull data from every person in an elevator or from a casual stroll past in a busy shopping centre for instance without needing to get close enough to warrant any suspicion from the targets, paired with some other similar devices one could take all of this accumulated data and load it onto a device capable of storing a great number of these and replaying them to any reader. I'm being intentionally vague with the wording of that, but i get the feeling you're more than aware of these devices.

@tyrinlowe 2 года назад

Awesome video bro!

@coolnormalandwelladjusted 2 года назад

It’s called contactless but 99% of people rub their card or phone all over the the thing anyway

@Sumsubcom 2 года назад

Yes I absolutely hate it.

@steffm.4884 4 месяца назад

Great content, just subscribed!

@FrancXPT 2 года назад

Good job hope you get more exposure .

@fadedapollo 2 года назад

Love your videos!!

@Sumsubcom 2 года назад

We love you too!

@EstebanGM245 Год назад

Brilliant! Nice video, keep growing!

@_GhostMiner 2 года назад

X files theme song in the outro? 😃

@skiney 2 года назад

Thank you

@MissFoxification 2 года назад

There's ways to extend the range on the card readers using certain antennas, people put them in backpacks and capture cards in small space like elevators. This method is useful for capturing cards to enter buildings, garages and the like. It won't be able to capture a smart bank card due to the configuration. It can however damage them, I do that to old cards I don't use anymore. Alas, as you noticed you can't capture more than one at a time, putting an old card behind the new one blocks both. Skimmers that go on the line between the bank and the terminal are still an issue.

@nopeyep2089 7 месяцев назад

Hey, Im interested in learning how you did this and How its replicate able, Any way we can get in contact?

@MissFoxification 7 месяцев назад

@@nopeyep2089 I don't put personal details on here or "break the wall". Essentially all you can do is optimise the coil. At some point amplifiers or filters just won't work as there's no signal there to boost. A lot of devices have deficient coils and you can usually get a bit extra out of it. They also have orientation and mere positioning can be the difference between getting a signal and not. There's a reason the readers on public car garages use massive coils.

@tedclubberlane1638 2 года назад

Usually your content is very up to date and informative on cutting edge tech. I had a nfc app on my Samsung galaxy s7 able to read through wallets in 2016…

@FrangezM 2 года назад

Yeah reading really isn't the hard part. No matter how good your reader is, you can only ever get the card number and expiration date - the card simply doesn't transmit anything else. The only place where that is useful is online, but there you also need the CVC and these days often a second factor (SMS/app code). Also, the point about multiple cards is still valid I don't know of any commercial NFC readers that can handle multiple cards.

@kodwanikennethmsosa 2 года назад

Thank you Bradley

@mgreek31 2 года назад

The Knowledge never ends !!!!

@Follower_Of_Xi_Jinping_Pooh 2 года назад

There are already phone apps around that can read card number and name using nfc. I worked for a card reader company before. I'm sure a malicious programmer who have worked in similar company/technology can make apps that can steal more info.

@philomathicdude 2 года назад

Happy to see ..🔥🔥

@garlicbread7344 7 месяцев назад

I am doing fyp of NFC security, I think the general of talking give me sort of idea on it. Thanks man, you're handsome

@E7ENEZER Год назад

Bruuuh! This homie got me cracking up at 5am! 😂

@hexstaticloonatic4194 2 года назад

Dat audio clip at the very end though 😍

@George-ps5 2 года назад

Nice man 💯

@omalaydrinks1847 2 года назад

I Love this

@ProudlyINDIAN360 2 года назад

Thanks a ton

@andrewsgarage796 2 года назад

Very educational Bradley Best regards Andrew

@Sumsubcom 2 года назад

Thanks Andrew, I'm glad you enjoyed it.

@OmDahake 2 года назад

Really nice explanation

@Sumsubcom 2 года назад

Glad you think so!

@rokyo401 11 месяцев назад

Perfect opportunity for Ridge Wallet as a sponsor

@musakh_ 2 года назад

This guy really did his homework

@cyberdevil657 Месяц назад

Jesus this was before the flipper0 :') that is so beautifully done omg.

@MichaelDude12345 Год назад

Oh my god the Black Books reference was 👌👌

@Mark-lu8ee 2 года назад

16:34 that pronunciation was on point!

@Karlavaegen Месяц назад

For me, expert at EMV and payment terminals, I can only enjoy your video :) Of course you are wrong in pretty much everything, but fine by me :) Security is what I care about, and this is a joke. I defend all

@user-dao 2 года назад

love it hehe

@rapiddu6482 Год назад

Here in India digital payment system is so ingrained you can basically max out your credit card limit in single contact less payment if you want. I am a student hence have small credit card limit of ₹25k but can do single 25k transaction if I really want ofcourse given I have usable limit.

@machinainc5812 2 года назад

A shame this video got little views so far but this is what i call long term relevant content. Its not super time sensitive and very educational. Might even blow up in the future. Awesome video as usual

@wavyseahill 5 месяцев назад

Greetings from Rīga! Nice video! P.S. we don't give tips by card, it's not possible here. Only cash, even if you paid by card for your order. And tipping is not so widespread as in UK or USA.

@gman83090 2 года назад

Our Myki ticket system in Melbourne has that issue if you hold two cards together that have NFC it comes up on the screen with multiple card read

@fromagperspective9428 8 месяцев назад

I never leave without my wallet Ive literally been detained and taken to a station for not having my ID on me but then Im Black. I was released 10 min after getting to the station but not driven back to where they stopped me just told I could leave.

@purnasaimadala 2 года назад

I always use 2 cards, one with no nfc that I use for larger transactions, and one with nfc from a different account that has very less balance

@Sumsubcom 2 года назад

Smart man

@rapiddu6482 Год назад

Same I have limited credit card limit and also daily limit of contactless payment no matter how much unused limit I have. The only think that bothers me is that these card controls are wildly different from one bank to other. It's frustrating. I have a card that allows for daily limit but not per transaction limit. Another that does the opposite. I want both damn it. 😂

@triularity 2 года назад

Even if, in principle, they are secure, implementers are too often lazy, which can introduce implementation flaws or even design vulnerabilities (which take a long time to remove ue to compatibility). The fact that _any_ private data is being passed unencrypted (and subject to eavesdropping) is a red flag, when there is little reason establishing a secure link couldn't be a first mandatory step.

@filmaker256 Год назад

Use cash anything electronic Is awful .

@imark7777777 2 года назад

A lot of this information is very UK? non-US specific. As in they went to chips far before we did and we still didn't implement them right when we did it. Most of the history is quite good. It's just that we still have actual magnetic strips and chips and tap.

@jpierce2l33t 2 года назад

As long as there are clever individuals inclined to break such security measures, they'll always eventually become vulnerable somehow. It's just the way things are 😁

@Sumsubcom 2 года назад

That's just the way it is 🎵

@jpierce2l33t 2 года назад

@@Sumsubcom whoa I'm all giddy I got a reply 🤣🤣. Love all your stuff, as a security guy myself, I completely realize the value in bringing this info to the people! It's needed now more than ever, keep up the good work!

@harishannamalai8669 2 года назад

What bothers me is that the Contact Less payment option on Credit Card cannot be disabled by the user. A thief stealing your purse can just tap and keep purchasing items on a whim within the limit. Now I just leave the card at home ,The nincompoops that run these companies don't understand that shoving features that customers don't need, just makes the customers not use it at all.

@Follower_Of_Xi_Jinping_Pooh 2 года назад

They don't even need to steal the purse or wallet, they can just tap it. There are mobile apps around that can read card info (dunno if that is legal). You can test if it can read a stack of cards. Haven't tried it, but aluminum foil works it blocks nfc.

@rapiddu6482 Год назад

What are you talking about? Lol. Every credit card I have here have card controls that too very refined controls as well. All credit card have card controls you can even turn off contactless if you really want. My card although also support daily limit as well which I have dropped to just 1k for contactless. You can even control the all spending limit. I have credit card that gives me limit of 25k I have limited that to 10k. Basically it is practically impossible to have credit cards that doesn't provide card controls. Contact your bank how to do it. Usually their usual banking app will work just fine unless ofcourse they have specific credit card management app. Usually they don't do it separately.

@absolutium 6 месяцев назад

@@rapiddu6482You cannot "turn off contactless" unless you substract the receiver from the card.. What you are doing os telling the bank to restrict payments from either the magnetic band or the nfc module.. But those physical containers still react to a signal.

@VondaInWonderland 2 года назад

I like banknotes and coins, they are filled with history and mistakes that can sell for more. Just think, you may soon have some with King Charles, making the one's you have now, with "The never to be equaled Queen Elizabeth" left to grab up in a frenzy ♥

@HagakureJunkie 5 месяцев назад

Brilliant breakdown, I sent this very video to my mother to alleviate her fears

@piercedjeebus Год назад

I can talk about this now, but a friend of mine figured out how the credit card companies create card numbers and the security numbers using an algorithm. She got paid but sadly was caught and passed away in Chesapeake city jail.

@ejonesss 9 месяцев назад

the stores often threw the carbons in the garbage so anyone rummaging the store's dumpster could get the carbons and get the info. also stores had telephone directories of stolen numbers they would get on a monthly update and would have to look up the numbers. make it a standard at the credit card co side to always ask for the security code on the card and 2fa (if set up by customer) then even if the terminal does not support that the transaction will not work.

@SpaceSponge 2 года назад

I downloaded an app on my phone it lets me on select NFC cards tap on phone get full 16 card nber cvv exp other cards request my pin to access it. It's hit and miss

@supernenechi 2 года назад

People being scared of new things is normal, like you say. It's dumb when you don't try to understand it then. Thanks for the great video

@OZTutoh Год назад

I have a friend who told me she discovered several transactions had been made from her bank account from a city nowhere near us, while none of her bankcards had been stolen. The bank reimbursed her for the fraudulent payments and told her the thieves had used a "fake card". I couldn't understand how that could be remotely possible for the reasons given in this video. The only clue was that the transactions were small and over a short amount of time, like they were within the pay-wave limit. I don't understand how it was done! I looked into CNP transactions, but that's for credit cards. I was hoping the NFC reader you made would provide some clues.

@filmaker256 Год назад

get the word out..use cash

@OZTutoh Год назад

@@filmaker256 going back to being a luddite doesn't help. The card, issued to her by her bank in person, STAYED IN HER WALLET THE ENTIRE TIME. It could have stayed locked in a vault in her home and she paid for everything down to her road toll with cash in person. It would not make any difference! How could a duplicate possibly be made?

@lanaa.4350 2 года назад

Hey, thanks for existing, bye.

@koolerpure 2 года назад

had this happen to me once on the bus. dunno why the person that got the info bought cow skin rugs but atleast the bank took my side without a fight

@j__m6081 4 месяца назад

how does the usbmon work with the hydra and do you have a arduino or something with it also tutorial for the last parts :D

@FirstLast-fl7mo 2 года назад

Not for payment but i've long been considering making NFC cufflinks (Okay, maybe more so RFID but the idea is the same.) but im too busy making soldering balls instead lol.

@cinemaipswich4636 2 года назад

If the government/business/police/etc: to go digital contactless via the use of a mobile/cell 'phone, then they must give me one for free. If I am forced to have I.D. then they have to give me that for free. If I must use digital to buy or sell anything, then they must give it to me for free. I will never use "contactless" readers. I live in Australia, and I will not let a cab driver force me to "Wave My Money Away". I never use the magnetic strip. I only use a system that requires me to enter my PIN code.

@things-and-stuff 2 года назад

Setting up Apple Pay is free for a lot of banks, and you can set it up even with a non-nfc card :) You just need an iPhone that supports NFC. (My 2016 iPhone 7 does)

@sarimbinwaseem 2 года назад

0:13 the same key chain I have...

@StrifeXTribal 2 года назад

Time to get my Sumsub fix. Love this channel and Bradley, you are an amazing host to it!

@Sumsubcom 2 года назад

Thanks so much!

@SunnyBeetle1922 Год назад

Guess what, if you use the Lloyds banking app, there is a section on there that shows your pin just in case you forget it. I’ve had to use it a couple of times. So the pin is stored. It’s accessible on your online banking app….

@DaKrawnik 5 месяцев назад

Contactless doesn't transmit your actual card number. It uses alternates linked to your account for each purchase.

@deleteduser3749 2 года назад

Can someone post the link the the HOW I DO video where the guy puts magnetic dust on the credit card. Thanks

@Sumsubcom 2 года назад

Speak to this guy to join the dark side ^

@Maco_28 2 года назад

video starts 20:34

@imark7777777 2 года назад

Bank Notes might be immune from power outages ( Best feature ever ) but tellers don't know how to make change.

@filmaker256 Год назад

CAsh is best

@Natty183 Год назад

Lmao

@shreeshaaithal- 2 года назад

Can you make a video on how Machine learning is used in cyberspace or cybersecurity please😁😁

@Sumsubcom 2 года назад

Sounds like a good idea!

@shreeshaaithal- 2 года назад

@@Sumsubcom give a heart for the comment dude😂

@hb3393 2 года назад

It's all about the cameras isn't it. I always cover up my card number with my thumb when I'm making a contactless

@annoythedonkey 2 года назад

I’m kinda annoyed that the companies that make “secure wallets” deceive customers the way they do.

@Sumsubcom 2 года назад

Indeed

@bvg129 2 года назад

Like for perfectly correct pronunciation of Konstantin's name!

@notalextotally 13 дней назад

The video starts here: 0:38

@I_Unintentionally_Morph 2 года назад

Please can u use cookies be used go get your information ?? Eg credit card details

@Charlie-js8rj 2 года назад

So what you're saying is that someone could theoretically run Doom on their credit card chip?

@Sumsubcom 2 года назад

Yee buddy

@nuclearnyanboi Год назад

I just disabled contactless on my phone, and card

@christopherellis2663 Год назад

The law in Romania 🇷🇴 insists on a receipt. 😊

@Greydonkey. Год назад

17:34 "But can it run Doom?"

@rapiddu6482 Год назад

This is exactly the situation where you will tire yourself explaining how nuclear energy is the most environment friendly and safest energy generation you have but they won't understand because of all the unnecessary paranoia they have.

@csakdee 2 года назад

Keep the jacket buttoned up or sit down... choose one

@randyjd3706 2 года назад

hello bradley

@sixunity1171 2 года назад

5:11 in Latvija we dont really give tips, our servers and bartenders get paid more then enough to live comfortably.

@Sumsubcom 2 года назад

Sounds perfect

@carlostrudo 2 года назад

Yeah!!! Brazil making to Sumsub. Brazilian banking system is very advanced but criminals are very resourceful lol.

@neiltansey3041 2 года назад

I personaly learnt nothing from this video. What works for me is, I only use contactless / phone payments in reputable establishments and, only debit from an account with the bare minimum in it and, have TWO low cash accounts from different banks. PLUS, as the young gentleman said, carry some 'emergency' cash.

@jeffbrownstain 2 года назад

Woot