Will "smart all-in-one-cards" be secure?

[MattKun]

So starting by the end of this month (June, 2017) Fuze will ship their All-in-one smart card. This will probably be the beginning of the 'all-in-one' card competition. I have decided to back their project myself just to get one and in theory, it seems like a great concept. My concern, however, is that "everything" gets hacked, I mean hell I was just trying to backdoor into my Arris modem this weekend myself lol. So what do you guys think about the security of all these new "Smart" devices in this new "App Age"? Finally, should LTT review these products? I would truly love to see them take a look and how exploitable they are.

 

Product Info

https://www.fuzecard.com/

 

"Fuze Card: Your Whole Wallet in One Card

Secure, Slim, Convenient. Electronic Card with EMV Chip. Holds Up to 30 Credit, Debit, or Gift Cards"

[idontknowwhy]

i think that as long as they are secure they will be great. the only thing I think would be bad other that the security is tht there is a battery. it would suck for your credit card to die while trying to buy something

[HeavyFtw]

6 minutes ago, idontknowwhy said:

i think that as long as they are secure they will be great. the only thing I think would be bad other that the security is tht there is a battery. it would suck for your credit card to die while trying to buy something

Hell yes i need to buy a new game ... oh no i need gas *buys gas* *drives to store and goes to purchase game* Sorry but your card is dead

 

that will always happen to me

[Froody129]

Smart watches are already struggling because no one wants yet another thing to plug in. The battery is going to be a big problem. The card is interesting, the question is just: if 'they' can get into one account on the card, can they get into all of them?

[paddy-stone]

I use a curve card, where you can switch between which card is actually in use with their app, you can also disable your curve card from within the app too, so if you think your card is lost/stolen you can disbale it in the app with one click. You can also change currency being used, so if abroad you won't get hit with an exchange fee etc IIRC.

 

https://www.imaginecurve.com/

 

Very easy to add cards etc, and you get texts/notifications when you have used the card, so if you see something dodgy you can disable it wuickly and then contact curve I believe... your card details are safe as they are only used by curve themselves and not given to retailers, all they see is the curve card.

[bob345]

remember plastic from a few years ago?

[MattKun]

I agree with the battery concerns, but I would never use Only a "smart card" just like I currently don't carry just one "credit/debit" card. I suppose I should have posted the video too, but I didn't want to solely make this a Fuze Card post. They are just shipping this month and the demo I saw was super cool.

 

TL;DR

 

Battery life will definitely be an issue, however, there is a portable charger.

Never carry only the smart card.

The card has a display and touch buttons for cycling between cards.

You use the app and swipe scanner to add your card's info to the device. 

 

More promo images:

[Arika]

[removed]

[divito]

Pretty good idea but way too late. With the advent of Android and Apple Pay, and other apps that exist like Stocard, we're more likely to move to permanent NFC usage with our phones than anything else.

[ARikozuM]

Personally, I hope they don't actually display the CC numbers (not the expiration date) when trying to select a card. You can't do much with the last four numbers but the first are easily guessed with time. 

 

https://www.nerdwallet.com/blog/credit-cards/decoding-your-credit-card-number/

 

I'll probably back them on this since I think it's a good idea and thanks to the chip is a bit more secure. Also, kudos if the magnetic strip isn't active unless the card is in use preventing CC scanners from grabbing data.

 

That said, I really do want to see NFC take off globally. It's really sad that people with Samsung/Apple smartphones or smartwatches aren't using their NFC chips when going to stores. 

[0ld_Chicken]

I have to order a new card a couple times a year as it is because thats how hard I am on it.  I just don't think that adding all that "stuff" to it is a reasonable idea for people like me.  That curve card sounds like an interesting idea but the security would be my concern

[Bleedingyamato]

3 hours ago, 0ld_Chicken said:

I have to order a new card a couple times a year as it is because thats how hard I am on it.  I just don't think that adding all that "stuff" to it is a reasonable idea for people like me.  That curve card sounds like an interesting idea but the security would be my concern

What are you doing to your credit cards?  ?

 

My cards don't stay brand new looking from use but they don't get ruined multiple times each year.  

[tlink]

they promote remote wipe, but how are they going to achieve that without some kind of cellular interface? ah it only has LP bluetooth and NFC. well thats pretty useless. if its out of range well good luck wiping it, yes it will lock but i doubt its hard to spoof/bruteforce. they do only support magstripe for now (lol so horribly insecure) and EMC they have to get bank approval for (never heard of banks allowing anything but their card but whatever). it also locks after transaction which seems pretty annoying. overall i think its a bad idea, the whole reason why android pay, apple pay, nfc card pay etc was invented was because of easy of use. this has undone that by making you select the card, unlocking the card etc. and for every unsupported card you would still have to carry that and a battery bank around. sounds like an apple dongle fiasco to me but now on credit card level.

a better idea in my opinion would be to just have a rotating disk in which you can put EMV chips that a bank can supply (i think you can actually make them yourself too by simply cutting it out but im not too sure, it works that way with simcards atleast ). put numbers above or under each chip and a piece of paper under some see through material so you can write what is what and voila, easy to use while still secure since the bank now deals with the security side on chip. but this is coming from Europe where credit cards are pretty much only used when a website/store only accepts credit cards.

[vorticalbox]

I am willing to bet "security" was not very high on the things to do list. 

[paddy-stone]

9 hours ago, 0ld_Chicken said:

I have to order a new card a couple times a year as it is because thats how hard I am on it.  I just don't think that adding all that "stuff" to it is a reasonable idea for people like me.  That curve card sounds like an interesting idea but the security would be my concern

The actual curve card doesn't have your card details at all, it's like you pay "through" that card if you like, the curve card has it's own card number/expiry etc. IIRC, what happens is the card just recognises if you have a payment method selected at all, I have tried it when no payment method selected and it fails to pay. If you leave a card "active" then you don#t need data to enable or anything as it's already enabled... the only downside is that you would also need data access to disable the card in the app, or you would have to phone curve I guess.

I have not had to carry any of my cards with me since I got this curve card. I do however carry an "emergency" pockit card (prepay) with a few hundred on it, just in case. Haven't needed it yet and been with curve around 7-8 months now.

I love the fact that I can just go into my curve app any time and see wat transactions I have made at whcih stores and by card used too, so it's easy to keep work expenses separate by using a certain card. The app by the way locks out certain functions until you enter a pin, so stops you selecting a different card etc unless authorized. You can only see the "active" card, and it doesn't display card numbers or anything, only what you have named it and a picture minus the details eg lloyds bank  VISA debit and called lloyds personal. and under tha ypu can see transactions at which store and for how much... anything else and you need to enter pin to enable.

The card I got was £5 only and came within a few days of me ordering and setting up my account, all this can be done within the app. Oh forgot also that the card is contactless payment too, and is mastercard.

 

OK, well I've gone a bit off here, sorry for the long explanation. If anyone wants more info, something that I haven't covered you can PM me if you want. Sorry OP for going a bit off topic here, but wanted to inform people there were other choices.

[0ld_Chicken]

6 hours ago, Bleedingyamato said:

What are you doing to your credit cards?  ?

 

My cards don't stay brand new looking from use but they don't get ruined multiple times each year.  

I live an active life and am always moving and always have my card in my wallet which is always in my back pocket.  I think part of it has to do with working construction type jobs where I'm always moving and causing rubbing/friction to everything in my wallet for 10 hours a day 5-6 days a week.  I'll burn through a leather wallet in a few years usually 

I'll admit the chip part of the cards have been lasting a lot longer, but the strip based portion (which is still used a lot here) goes bad very quickly for me.

 

@paddy-stonesounds like a good deal.  If I actually end up getting more than a couple cards I might end up looking in to that. 

[PineyCreek]

The idea of security as an absolute is a sham.  Absolute security is a laudable goal that one should never expect to achieve, but should always be pursued.

 

This card does have a lot of nice features though.

[paddy-stone]

2 minutes ago, 0ld_Chicken said:

I live an active life and am always moving and always have my card in my wallet which is always in my back pocket.  I think part of it has to do with working construction type jobs where I'm always moving and causing rubbing/friction to everything in my wallet for 10 hours a day 5-6 days a week.  I'll burn through a leather wallet in a few years usually 

I'll admit the chip part of the cards have been lasting a lot longer, but the strip based portion (which is still used a lot here) goes bad very quickly for me.

 

@paddy-stonesounds like a good deal.  If I actually end up getting more than a couple cards I might end up looking in to that. 

Yeah, I love it, it's so handy having access to all the info you need without having to look it up on your bank or soemthing. I also forgot one thing actually... as well as coming up in the app when you have made a purchase (online or instore) it also emails you a receipt too. There are no fees for using this card anywhere, not even other countries, but can't remember whether you can get cash from ATMs with it, although I think you can, but might be charged a fee by the ATM. I don't really bother with cash too much in my daily life, I just use this card and carry a little cash with me for purchases I don't want on my cards

 

[0ld_Chicken]

8 minutes ago, paddy-stone said:

Yeah, I love it, it's so handy having access to all the info you need without having to look it up on your bank or soemthing. I also forgot one thing actually... as well as coming up in the app when you have made a purchase (online or instore) it also emails you a receipt too. There are no fees for using this card anywhere, not even other countries, but can't remember whether you can get cash from ATMs with it, although I think you can, but might be charged a fee by the ATM. I don't really bother with cash too much in my daily life, I just use this card and carry a little cash with me for purchases I don't want on my cards

 

hm I don't do a LOT of international travel but that would be a big benefit if it works well outside the US. 

[paddy-stone]

32 minutes ago, 0ld_Chicken said:

hm I don't do a LOT of international travel but that would be a big benefit if it works well outside the US. 

Yep, you can change card currency with 2 clicks on the card you want to change. But I believe if you leave it in the currency that your card is normally, then I think your card/bank won't charge conversion fees, all they will see is a charge from curve in your normal currency IIRC. Haven't been out of the country for a while so can't confirm.

 

[Bleedingyamato]

4 hours ago, 0ld_Chicken said:

I live an active life and am always moving and always have my card in my wallet which is always in my back pocket.  I think part of it has to do with working construction type jobs where I'm always moving and causing rubbing/friction to everything in my wallet for 10 hours a day 5-6 days a week.  I'll burn through a leather wallet in a few years usually 

I'll admit the chip part of the cards have been lasting a lot longer, but the strip based portion (which is still used a lot here) goes bad very quickly for me.

 

@paddy-stonesounds like a good deal.  If I actually end up getting more than a couple cards I might end up looking in to that. 

I go outside.  Sometimes..  It's too bright ok?!  ?    (Kidding)

 

I have a solution for you: stop rubbing your butt.  ? lol

[BuckGup]

PLEASE Don't buy that. There have already been many before it and they all work about the same as a dead prostitute. The coin was the same thing and it worked once out of the 300 times someone tried it. Another person bought it and it worked twice! Lou fails to show it working for a big reason. IT DOESN'T WORK

[yathis]

How many cards do you have that you need this card?

 

I have 2 bank cards and one credit card, DL, Health card, gym card, bus pass, business cards, and maybe a gift card.

I use my wifi on my card to tap the payment, that is totally unsecure, the old magnetic strip was even more unsecure. The banks cover losses so do what you want.

 

I think if anything I may try a clip style wallet, but to carry everything around in one card, I dont know if I would do it.