Now on your iPhone

I have just added the WPtouch plugin, which provides a better interface to the people who read the blog on an iPhone or iPod Touch. Every time I do this, I am amazed by how smoothly this works (although, this time, I have had to weak the PHP on another plugin). Works fine on my […]


Java Card @ JavaOne

I worked on my JavaOne slides today, and I searched for the “java card” keyword on the conference catalog. It returned 6 references, all of course related to Java Card 3.0. And on top of it, the content is rather diverse. Of course, you will get a few basic talks: Step-by-Step Development of an Application […]


Secure magstripe?

Visa seems to be investigating a new way to use magnetic stripe cards. The article does not give much details, but the basic idea seems to be that the magnetic stripe is scanned with a high definition, which provides a “unique” pattern, which Visa compares to the DNA or fingerprint of the card. Of course, […]


JC301-4: Where are the differences?

[Corrected April 9, 2009: more mentions of Classic, added a conclusion] You have been warned in the previous posts. The Connected Edition of Java Card 3.0 is very different from Java Card 2.x. But, how exactly are these two versions different? Well, there are differences at all levels, from the virtual machine to the application […]


Google ads in Java Card 3 ?

You may have noticed that I have added Google Ads to this blog. Well, it’s the crisis, and you never know, it may bring in a few extra bucks. Of course, I know that I don’t have millions of readers, so this is not the only motivation. I have been busy in the past week […]


Do you want a side order with your SIM?

As electronics keep getting smaller and smaller, a SIM card, which once was a very small platform, now starts to become too large for the electronics it hosts. As a consequence, many actors are thinking about adding various add-ons to SIM cards. We have seen quite a few of them lately, so let’s take a […]


JC101-20C: A secure channel API

Continuing our secure channel example, we will next define a secure channel API, and provide a small example based on this API. Beware! As mentioned before, this is only an example, not intended for real use. In addition, the code has not been actually tested so far …


Card readers for online banking

A few weeks ago, Cambridge’s team of security researchers published a paper about the small card readers that are currently being deployed as a way to make online banking more secure. Their article is quite critical, and I would just like to review the vulnerabilities that they mention, because I don’t think that these products […]


Blackout

After New Zealand, it is France’s turn to organize an Internet blackout, as France is considering the adoption of a law that would cut Internet service to people who are suspected (twice) of copyright infringement. I strongly believe, among many others, that this law is wrong, for many, many reasons. However, there is one thing […]


Update on Android and the SIM card

One year ago, I blogged on Android security. I recently received a comment asking if my impression had changed now that Android actually exists, even on devices. Well, no. Not at all.