A security-focused look at MIFARE DESFire, Android HCE, virtual cards, mobile provisioning, and the expanding NFC attack surface.