Thursday, August 2, 2012

NFC Hack - Blame the Crap Apps, Says NFC Forum


ePaymentNews "Near Field Communications"
Blame crap apps for pay-by-bonk hacks, say NFC bods
Register
The Near Field Communications (NFC) Forum has defended its short-range radio tech, and blamed insecure apps that use the pay-by-tap tech for the security vulnerabilities revealed at the Black Hat conference last week. Charlie Miller, best known for his ...
See all stories on this topic »


Debbie Arnold, director of the NFC Forum, told NFC World.
However, the NFC Forum works to ensure that tools are available to allow applications to operate with the appropriate level of security. These tools include: (a) Signature RTD (NDEF Signing), a specification the NFC Forum has released to digitally sign messages transmitted between devices and tags; (b) ISO/IEC 13157, a data link security standard to complement higher-layer security, originally developed by the standardization body Ecma International; (c) application security (end-to-end encryption) defined by the service provider; and (d) additional security layers in service providers' respective back-end systems.

All of these activities and mechanisms work hand-in-hand. NFC solution providers may add security measures to their applications as they see fit, including both required and optional user actions to enable or disable functions.
Miller's demonstration underscores the importance of providing appropriate security measures at the application layer and enabling users to adjust security settings to suit their own needs and preferences.
Google Wallet finally gets real, expands to all major U.S. credit providers
BetaNews
Google on Wednesday afternoon made a huge announcement for its near field communications (NFC)-powered Google Wallet platform. Beginning August first, with an update to the Google Wallet app, Android phone users with supported NFC devices such ...
See all stories on this topic »
First Data TSM offering qualified by Discover
Finextra
This qualification enables First Data to support financial institutions in the deployment of their Near Field Communications (NFC) services on mobile devices. NFC is a wireless technology that enables data transmission between two objects when placed ...
See all stories on this topic »



Disqus for ePayment News