Exxon And Timex Release The Speedpass watch

introverted writes "Exxon and Timex have released a Speedpass-enabled watch. From the article, this sounds like a regular Timex watch with an RFID chip in it. According to a radio news story, you can not only use the watch to buy gas, but at some locations in Chicago you can also use it at McDonald's. The watch is available from Timex. This was first mentioned on Slashdot in March last year."

Comments

I need an RFID transceiver

[coinreturn]

I want to pass an RFID receiver over everybody's watches (especially at gas stations), collect the RFID, and then transmit it every time I need some gas. Cool - free gas, MacDonalds, etc.

Re:I need an RFID transceiver

[coinreturn]

Maybe if there was a way for an RFID to act as a one-way hash function- the receiver would send out a unique signal, and the tag would somehow transform this probe signal into a response using its own unique method that cannot be deduced by knowing both the probe signal and the response. Perhaps this is what they already do?

Nope. Just a unique serial number is transmitted. RFID was not invented for security reasons, but for inventory.

RF snooping

[computechnica]

So how long until you can buy a small RF snooping device that lets you record and replay RFID signatures, kind of like the kind for garage door openers.

Or is thinking of this a violation of the DMCA.

Time and money.

[wondafucka]

One of my friends and I were theorizing a money system where your total cost of existance (rent, food, hookers) was summed up and divided by a cost per second. I forget the exact numbers but somewhere around the poverty level is around 3 cents a minute. We were horrified at the implications and applications. (You can only enter The Demiplex Residencies of the New United Anglophyles if you have a time money index of 20 cents a minute or higher).

It's kind of cool (not really) how when we were little we saw visions of distopia and laughed. Now we see the building blocks being built before our eyes.

I sure hope they build tinfoil hats with "speedpasses" so I don't have to take mine off to get a cheeseburger.

Make sure it has a good band!

[MissMarvel]

I'm in favor of anything that makes it easier to shop online, in groceries stores, at the gas pump, whereever. But this new watch could cause you a mass of grief if it fell off your wrist. At least credit cards can be cancelled. How do you cancel a radio frequency?

User verification...

[perly-king-69]

What sort of security is built into these things? If it's stolen can anyone just go and use it to buy some fries, or does it require some sort of user interaction like a credit card (pin/signature)?

Great Geek Watches?

[Cpt_Kirks]

What are some of the current great geek watches?

There are: watches with simple computer functions, watches with atomic clock radio recievers, watches with digital cameras, watches with IR remotes, watches with calculator/basic PIM functions, watches that run on Mars time and pager watches.

Any others? What is your fav?

Re:Great Geek Watches?

[n9fzx]

Casio's Wristech product line has been the standard bearer for Geeks for nearly two decades. Highlights include:

1. The legendary CFX-200 Scientific Calculator watch
2. MP3 Player watch
3. GPS unit watch
4. IR Remote watch
5. Camera watch

Of these, only the IR Remote and Camera watches have become part of the permanent product line. Casio still produces calculator watches, but without scientific functions.

Hacking for fun and profit?

[pesc]

How long until (1) someone makes a device to read others RFID chips (without them noticing), and (2) can create RFID tags with programmable IDs?

Really, how is the security / authentication implemented here?

Five finger pass

[MrEd]

I wonder how easy would it be to clone someone's SpeedPass. It's an RFID chip with a unique serial number, I take it?

Do PROM-style RFIDs exist? Could you overhear the challenge-response interaction at the pump and make your own copy?

Enquiring thieves want to know.

Do you still need an SSN?

[billh]

Years ago, when speedpass first came out, I filled out an application, but declined to put my SSN on it. If I link it to a credit card, why should you have my SSN?

Needless to say, I never heard back, and I don't intend to ever get one if the SSN is required. Or maybe I'll just make one up and see what happens.

For those who don't know - it is not a credit device, it is a billing device. It links to an existing credit card. They may have expanded to granting credit, but it was not part of the deal when I tried to sign up.

Re:I've had mine for almost a year...

[LinuxHam]

I have 2 keychain fobs and 2 window transponders. The window transponders work about 1 out of every 10-20 tries. The keychain fob works great for me in the Northeast b/c, when it so damn cold out, its nice to just hold your keys inside your fist up against a "Place Speedpass Here" sign instead of taking off your gloves to fark with your wallet and credit card. The trick to get it to work inside is to pinch it between your thumb and index finger but rest your index finger's nail on the reader. Yes, radiate the RFID right through your fingertip. Works like a charm for me.

But, boy is it nice when it's about 3 below, and the pump is ready to go by the time you get out of your car. Privacy, shimvacy, its effin' freezing out! I only wish they, and more, places would take EZ Pass.. especially parking garages. Sometimes I just want to drive without stopping or rolling my windows down, is that too much to ask?

Universal ID

[WindBourne]

With Pat. Act II, we no longer need SSNs or universal IDs. Now the government can locate us quickly via the use of corporate DBs. I am guessing that in the future if you do not have one of these marvelous devices, then the government will simply focus on your movements in the traffic cams.

Yeah, yeah. No doubt several of you will post something about tin foil hats and all, but then you obviously do not read your history.

First they came for the jew, but I did nothing....

Re:Y'know, I don't think...

[LinuxHam]

I'd be curious to see how many Mobil SpeedPass holders pay some other way because they forgot the fob or out of habit...

When my local Mobil was having trouble authenticating their Speedpasses to hq, they kept calling the cops with license plates of "non-payers". I found this out b/c my wife said it took a couple tries for the light to stay on the very first time she used it, but she showed me the receipt she ended up getting anyway. The next day, a cop was at the door and explained the situation. I told him that she showed me the receipt last night, and he didn't even wait around to see it for himself. He did say that if they didn't fix their problems, he's going to start charging them for all the false reports he'd been getting.

It took me a while to get her to start using it again, and it hasn't happened since.

Is it more secure?

[joshamania]

It's my understanding that the best kind of security is physical security. i.e. Don't put your credit card out over the air...even if it is only six inches.

Though you may have a point there. I guess I don't see RFID being any less secure, than, say, the internet. And I'm sure as hell not going to stop using Amazon.

Hello...Earth to Clown Planet :)

[djupedal]

Did I say RFID tags have GPS? Noooo....however, if you were at all knowledgeable about the industry, you'd perhaps know that it is common to combine RFID, GPS & wireless.

Where that approach hasn't quite reached c'cards just yet.

Take a pill, jill :)

So when can I...

[kindbud]

Get a clock embedded in my credit card?

Get a calendar printed on paper currency?

Get a sundial added to Sacagawea dollars?

I can go on.... ;)

make your own.

[Lumpy]

I made my own 2 years ago.

I simply ground down my speedpass dongle until I got to the thickness I desired and then ground down the sides for length. Then after I broke that one, I did it to the second one knowing what to expect and called in the first one as lost.

I then superglued it inside the leather band of my watch.

really simple and sounds like the exact same thing they did.

NOTE: record your speedpass numbers and keep them in a safe place when you need to report it lost/stolen.