Hacker News new | ask | show | jobs
by the_mitsuhiko 3689 days ago
> contactless card are less secure than an tokenized mobile app because contactless card send you credit card number with NFC without encryption.

Only in the United States. In mainland Europe NFC has always used EMV authentication between terminal. Also as an aside: a european credit card's number alone is kinda useless.
1 comments
edent 3689 days ago
I'm not quite sure that's the case. Using an NFC app on my phone, I was able to get my credit card's number without any issue. Also had the expiry date and a list of transactions.

https://twitter.com/edent/status/724639270284189696

True, it didn't have the CV2(?) number on the back - or my address - but enough to make me buy an NFC shielded wallet.

link
the_mitsuhiko 3689 days ago
> I'm not quite sure that's the case. Using an NFC app on my phone, I was able to get my credit card's number without any issue. Also had the expiry date and a list of transactions.

If your card speaks MSD over NFC then it will provide that information. That's up for your bank. My cards not do it and as such I cannot use NFC in many places in the US.

link
tonylemesmer 3689 days ago
is that info stored inside the card?
link
edent 3689 days ago
On some, yes. My MasterCard had a list of previous transactions. I wasn't able to get anything out of my Amex.
link