This talk covers the attack surface of NFC Mobile Wallets (including Google Wallet) and details attacks to date. As more and more Mobile Wallet rollouts are deployed, it is important to understand Wallets' inherent strenghts and limitations. This talk details communication with the Secure Element, the EMV payment standard, and Android, iOS, and BlackBerry NFC APIs.
Max is a senior consultant at Intrepidus Group. Along with traditional security assessments, Max frequently reviews pre-release embedded devices to ensure both hardware and software meet industry best practices. He has done extensive hardware security research, notably in the fields of RFID, NFC, and Bluetooth. He has spoken at security events including local conferences, CanSecWest, ShmooCon, SecTor, and OWASP. Max is a licensed HAM operator and contributes chapters to several best-selling Linux reference books.