Return of the son of GPJ

The descendant of the venerable GPJ has been announced. Its easy-to-use command-line is sure to be popular with developers, and it also offers a simplified interface for key provisioning and diversification. Code: https://github.com/martinpaljak/GlobalPlatformPro

Open Software, Protocol and Format Documentation Project

The Understand project (Open Software, Protocol and Format Documentation Project) at GoogleCode has a plethora of information on all kinds of smart cards and readers (mostly contactless).

Java Card programming: best practices

Read and remember. Very useful tips, especially about reducing memory consumption. A short summary of how the JCVM allocates memory is also given, including the amount of overhead per object.

Essentials

Hacking fingerprint USB drives

Excellent hack walkthrough and security analysis of two standard fingerprint-secured USB storage drives. The vendor reacted in a mature, proactive way to the news that their drives were hacked. That's not something you see very often... respect to USB-Secured.com.

Principles of secure Java development.

Nicely elucidated.

Reading public EMV data on a VISA card

The JavaEmvReader project provides a quick and simple way to parse the unsecured information on a VISA card - a bit easier than the alternative mentioned in a previous post.

One example application is described with the embedded element and Google Wallet in a Samsung Nexus S.