Slashdot Mirror

← Back to Stories (view on slashdot.org)

Google Wallet Stores Card Data In Plain Text

Posted by samzenpus on from the read-it-and-weep dept.

nut writes "The much-hyped payment application from Google on Android has been examined by viaForensics and appears to store some cardholder data in plaintext. Google wallet is the first real payment system to use NFC on Android. Version 2 of the PCI DSS (the current standard) mandates the encryption of transmitted cardholder data encourages strong encryption for its storage. viaForensics suggest that the data stored in plain text might be sufficient to allow social engineering to obtain a credit card number."

2 of 213 comments (clear)

  1. Re:Social Engineering by L4t3r4lu5 · · Score: 3, Interesting

    I don't answer the questions. I say "I'll save us both some time. If this is a sales call, I'm not interested, and you should remove my details from your marketing list. If there is an issue with my accounts, I'll call the number on my bank statement, because frankly I don't trust cold callers. Which is it?"

    They seem quite accommodating. They've done their job by contacting me, and I avoid all social engineering attacks.

    --
    Finally had enough. Come see us over at https://soylentnews.org/
  2. Re:Not tooo worried about this one by History's+Coming+To · · Score: 4, Interesting

    My bank stores my password in plain text. It's clearly not even hashed as they only need (eg) the third and fifth characters to give me access. I queried this with them and the person couldn't understand what I meant, and I wasn't allowed to talk to anyone who might understand for "security reasons". Interesting policy.

    --
    Please consider this account deleted, I just can't be bothered with the spam anymore.