There is a replay attack vulnerability present for Visa cards added to any NFC wallet incl Apple Pay, GW etc. link: https://play.google.com/store/apps/details?id=me.spot …
-
-
Replying to @cherian_abraham
@cherian_abraham Cherian, many remediations: Visa qVSDC adjusted to squash w/ a tweak by Apple. A paper published: http://www.cs.ru.nl/J.deRuiter/papers/fc15.pdf …1 reply 0 retweets 1 like -
Replying to @BrianRoemmele
@BrianRoemmele Not sure if we are talking about the same thing. The app exploits a Visa Paywave MSD flaw of not using a terminal UN.3 replies 0 retweets 0 likes -
Replying to @cherian_abraham
@cherian_abraham Cherian, Apple can force also force the Visa fDDA to use a MC GENERATE AC command with a cryptogram like PayPass. A tweak.3 replies 0 retweets 0 likes -
Replying to @BrianRoemmele
@BrianRoemmele Right on the money. For once we are talking about the same thing. :) Either V fix it, or each wallet must choose for them.1 reply 0 retweets 2 likes
@cherian_abraham Cherian, thank you! I appreciate it!
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.