Security experts familiar with the cards' radio frequency identification (RFID) technology, described by Chase as "contactless functionality," expressed some concern over the devices' security strength. Some have suggested that they may make it easy for perpetrators to commit fraud or identity theft.

Saw an add for ChaseBlink tonight. This ought to be interesting... Contactless credit card purchases. No signature. No pin. Just waive it over the reader. I can tell you how I'd have designed it, but I would be suprised if there were no vulnerabilities here.

While this is rather elaborate, a computer controlled rfid device connected to increasingly common cellular wireless internet systems relays the transaction to another reader, maybe taped to a chair in a shopping mall foodcourt.

[ I just got one of these in the mail. I had been a BankOne customer, and then Chase bought them up. So my BankOne visa is now a Chase visa with Blink. I'm not 100% happy about it. I think this one may end up getting cancelled, since I'm not *really* into walking around with a foil wrapped credit card. Still, if anyone's got a reader, we might be able to play with it... i'm kinda curious what's on there.

-k]

CRM News: RFID : Chase Bank Rolls Out Contactless Credit Cards