The article is a bit confusing (perhaps deliberately to scare the reader). The attack is possible on all current electronic chip payment forms (contacted/conta

The article is a bit confusing (perhaps deliberately to scare the reader). The attack is possible on all current electronic chip payment forms (contacted/contactless, with & without PIN). For contactless without PIN, transactions are limited (in my country to €25 per transaction and €50 total before a PIN is required). Contactless without PIN is much easier to attack (for obvious reasons), but cannot break this limit. Contacted with PIN is fully vulnerable, but also a lot harder to pull off. The 600km limit is also highly deceptive, as it doesn't take into account latency introduced by electronics. E.g. a typical good wifi connection has a much higher ping than 2ms.