] Privacy Implications of Magstripes ] ] Pull out your wallet. How many cards have magstripes? Do ] you know what's on them? Would you be surprised to find ] your Social Security Number, or your Mother's and ] Father's name? What about flight information, or medical ] data, or even passwords and PIN numbers? And would you be ] surprised to learn I can get all that information in less ] than a second? ] ] First we will discuss what magstripes are, and how they ] work. Then we'll talk about easy ways to read this ] information, and demo scan some cards from the audience. ] We'll discuss some of the worst offenders of private ] information, and steps to protect your privacy. Next, we ] look at magstripe projects you can do (such as a Unix PAM ] plugin), and ways to remove information from magstripes. ] We will briefly touch on smart cards and RFIDs, and the ] security/privacy issues involved with both. Acidus speaking at ToorCon 2004 |