Comment by ChocolateGod

5 days ago

That isn't the kind NFC you think it is.

It's RFID communication with a smart card. The bank would have to transmit keys to your computer to be able to interface with it, which they probably won't want to do for security reasons.

The way chip cards work is that a challenge is issued to the card and it sends back a response. The challenge is just a random number that makes it so you can't replay a previous response to a future challenge. The bank can then verify that the response came from the card, i.e. that you have the card right now.

Your computer doesn't need to have any keys to do this. The card has a secret key, but it doesn't give it to the reader, it just responds to the challenge. The challenge often comes from a point of sale terminal, but it could just as easily come from the bank's web servers, and it isn't really a secret.

The only thing which resembles a secret here is the response from the card, which is the thing anyone can get regardless when have the card. Also, the entire premise of the card is that the attacker doesn't have it, so if they do then you've already lost that part of the game.