|Page 2 of 2 <|
Electronic Pickpocket Stoppers
"If I had an RFID that didn't have a cover, a driver's license, a credit card, a corporate ID card . . . suddenly a [shielded] wallet isn't such a stupid idea," says Schneier, an author of books on security and the chief technology officer of Santa Clara, Calif.-based BT Counterpane, a network security company.
Marc Rotenberg, president of the Electronic Privacy Information Center in Washington, keeps an ad for one of those shielded wallets, clipped from a travel mag, posted on his office door. It's a little joke, but he's also serious. "RFID creates security and privacy risks," he says.
A couple of years ago, when the State Department announced the new style of passports, EPIC recommended that people wrap their passports in tinfoil. Instead, the State Department addressed such concerns by embedding metallic shielding in the front and back cover of the passport books. In addition, the new "passport cards" to be offered to U.S. citizens who travel frequently between the United States and Canada, Mexico or the Caribbean will come with similarly shielded sleeves.
The fact that the State Department has resorted to shielding material -- does that mean the threat is real, that shielded wallets for other types of cards are a good idea? Schneier, for one, thinks the passport books are still vulnerable when they are open.
But spokesmen for the State Department and the Department of Homeland Security say the shields are just an extra level of security for documents that are already safe because of encryption and the nature of the information on them. Even when the passport books are open, the digital information can be read by a scanner no more than a few inches away, says spokesman Steve Royster. As for the passport cards for frequent border-crossers, they can be read at 20 to 30 feet but contain no personal information, Royster says. The personal stuff is safe in government computers, he says.
MasterCard, for its part, says consumers need not invest in shielded wallets -- they can save their money for other purchases.
"All of our cards go through very strict security testing," says MasterCard spokeswoman Erica Harvill, who says she carries her PayPass unshielded as a key fob. The data on the cards are encrypted using a system involving random, unique authentication codes that can only be used once, Harvill says. In addition, the signals can travel only a very short distance.
But if the specter of unauthorized leaks from your hip pocket keeps you awake at night, Geb Masterson, president of Kena Kai in Anaheim Hills, Calif., will sell you one of his DataSafe models. The shielding material is a thin "metalized nylon," finished for the style-conscious with fine Italian leather. They come in colors, and in selections for men and women. The result is no heavier than a standard leather wallet, says Masterson, who adds that he has sold more than 50,000 in less than two years. And no, the metalized fabric won't magnetize or demagnetize your credit cards, he promises.
His sales pitch is shrewd: Hackers are only going to get better at data theft, so better safe than sorry.
"I have to carry a wallet anyway," he says. "I'd rather have it lined in this material that radio frequencies can't get through."
But if you put your SmarTrip card in a shielded wallet, won't you have to take it out to make it work on the Metro? Yes -- so some models have window flaps that let you expose such cards when necessary.
Most affordable of all: tinfoil.