3 ms·
You can't use it to back up your cards for use with PayPass. The idea is that you can scan a card in one location and simultaneously use it in another location
by sturmeh 14y ago
You can't use it to back up your cards for use with PayPass.
The idea is that you can scan a card in one location and simultaneously use it in another location by using two phones as a proxy medium.
A successful skim would involve one person attempting to complete a paypass transaction with their phone in McDonalds, and another person attempting to scan someone's card in the restaurant (by the looks of it, it needs to be over WiFi?).
- vy8vWJlco 14y agoThis is the proxy method, but I think in a worst-case scenario, it is possible to emulate the card from the perspective of an older non-cryptographically-challenge-based reader. Specifically, there seems to be interoperability between PayPass (PayWave) M/Chip cards and MagStripe terminals (insecure), so they may only be as secure as the MagStripe terminal, which they have to maintain backwards compatibility with (even though it's called "MagStripe" I believe it is still a contactless interface). I'm still learning about it myself, so correct me if I'm wrong.