Radio Frequency identification

learn more… | top users | synonyms

9
votes
3answers
18k views

Is it possible to clone an RFID/NFC card using a simple RFID reader, for future reuse and impersonation?

RFID/NFC technology is used in credit cards and many other personal identification applications. Is it possible/how easy is it to clone a card using a simple RFID reader? In other words, can the ...
2
votes
0answers
38 views

How do (broadcast-only/passive) RFID licence plates assert their identity?

I would have guessed by some kind of challenge-response, but there seem to be many claims of 'passive' or 'broadcast-only' tags in the plates. For example from http://www.e-plate.com/security.html: ...
0
votes
0answers
15 views

Digital Signature on a Passive RFID tag with small-ish memory constraints

I'm pretty new to the crypto and security worlds and I'm looking for some guidance. Briefly, my project involves Widgets (physical items that need to be authenticated) and Gadgets (physical machines ...
5
votes
1answer
530 views

Security differences between Passive and Active RFID tags

Most people are aware there are two types of RFID tags, active tags (ones that contain a power source of some kind) and passive tags (ones that are powered by the RF field). I'd like to know if ...
6
votes
4answers
2k views

Are keys or RFID tags more secure access control solutions?

Just musing to myself, what is the preferable access control mechanism in high security environments? Locks and Keys or RFID tags? Going under the assumption that the locks/keys are not knoow to be ...
3
votes
0answers
43 views

What is the current state of RFID / NFC security?

I'm attempting to do some RFID and NFC cloning and replaying research, as I'm hoping to be able to demo physical security as an attack vector to a few of out clients and prospects. The downside (...
10
votes
2answers
13k views

Reversing an entry card - How to find out what type of RFID hardware I need to read the chip?

I have an acccess/entry card chip I want to copy for demonstrational purposes. However I am not sure how I can find out what type of RFID reader I need to get a hold of. Does anyone have a ...
9
votes
1answer
199 views

How do EMV contactless cards protect against replay attacks?

I understand that standard RFID cards are vulnerable to replay attacks however, how do smart cards which are also contactless protect against replay attacks? Is this decided by the chip or by the ...
0
votes
1answer
101 views

What's the best way to test if an RFID blocking wallet is effective? [closed]

I was recently gifted a wallet that alleges to block RFID signals. As I am sure you fine folks at Information Security are aware, this is to protect the information stored on my contactless bank card ...
2
votes
3answers
785 views

Is it possible to brute force a card reader lock?

Recently they've added a new lock to my building which looks like this: Now we were given the code to access the building, but not the cards/tags. I swiped my tag used for a different lock and it ...
2
votes
0answers
110 views

What are the differences between the Proxmark3 and the Chameleon Mini? [closed]

I want to play with RFID/NFC cards and I need a tool to read, write and emulate tags. I know the Proxmark 3 (http://www.proxmark.org/), but I also heard about the new Chameleon Mini (https://www....
7
votes
1answer
599 views

RFID blocker with a card

There is a company out there that developed a product which looks like a simple card ( format of a credit card or so ) and claims to block rfid-signals in a distance of 10mm. It is not a case to ...
0
votes
0answers
24 views

How to get all mifare UIDs of nearby tags?

Is there a way to list all nearby tags around reader using libnfc? By default reader communicates just with one card, but mifare classic has its anticollision protocol in case more cards answer reader'...
0
votes
0answers
168 views

How Mifare classic nested attack works?

I familiarised myself with all available docs on mifare nested attack available, yet I fail to see how predicting tag nonce can help cracking keys. When tag sends nonce (N_t), key stream ks1 is ...
2
votes
0answers
92 views

What's the standard protocol for secure contactless communication

A contactless smartcard has to communicate with a reader in a secure way. The ICAO standard, for example, defines an encryption key (check BAC, EAC and PACE), so that the communication is not ...
1
vote
1answer
57 views

Using metal business card holders as RFID wallets

I have been reading about RFID technology and products. Are metal business and/or credit card holders viable substitutes for RFID wallets? Are all metal wallets Faraday cages?
6
votes
3answers
1k views

Are RFID shielding sleeves/wallets necessary for payment cards?

I have seen advertised several times now products that claim to "protect" contactless payment cards (e.g. special sleeves, wallets). What exactly do these products protect against? Is it just ...
2
votes
0answers
325 views

NXP NTAG 21x/Desfire password protection and Original signature, protects against cloning?

Hi i saw a few threads about NFC NTAG against cloning and NTAG Desfire , i just want to find out if NTAG 21x with their "New" password protection and "Original Signature against cloning" really does ...
4
votes
2answers
513 views

Approach to hack RFID Cards

Recently RFID cards 13.56Mhz band caught my eye. What is the step by step approach to hack RFID Cards? I have a rough idea, but there are still quite a few doubts. Identify the type of the card. Eg. ...
2
votes
0answers
163 views

Code execution through JSP RFI?

I'm working on improving my understanding of RFI (Remote File Inclusion), especially in JSP apps. I've created a vulnerable application that imports a JSP page from another server to replicate the ...
0
votes
2answers
127 views

RFID – based identification card

I have the question below, I did question 1 and 2. I am failing to understand question 3. You have been asked to participate in developing the requirements for RFID-based identification card for ...
2
votes
2answers
270 views

Securing RFID membership cards [duplicate]

Let's say I issue RFID-enabled membership cards for events. People can have their credit cards, personal ID, etc tied to this membership card. When they come to my events, they can use this card to ...
2
votes
0answers
75 views

How secure is the “read-only” feature of a passive NFC tags?

I want to write some data in a NFC tag (probably mifare) then put a permanent lock to it, so it can be read-only. How secure is that ? As in, how am I certain that nobody every will be able to re-...
0
votes
1answer
737 views

How does duplicated RFID work?

I was surprised to find out today that condominium, garage etc. access cards can be duplicated and used without being registered with the reader system. Are these RFID cards? Does it mean that store-...
3
votes
3answers
529 views

Do RFID key cards track the user through entry ways?

At work we use RFID tags to enter the building and each floor. The tags double as photo ID, I always wondered if they are used (or can be used) to keep track of staff movements. I always assumed that ...
0
votes
2answers
177 views

RFID safety defense

RFID credit cards are designed for short-range operation (1 centimeter), and radio fields drop off with the square of the distance. Even as close as 1 meter you're talking about a field 10.000 times ...
48
votes
10answers
36k views

Can a steel woven wallet prevent RFID scanning of credit card information?

According to the Popular Mechanics article RFID Credit Cards and Theft: Tech Clinic, the fact that many new credit/debit cards have a RFID chip embedded on it, there is a risk (albeit, small according ...
2
votes
1answer
1k views

From how far away can passive RFID tags be read?

I have been told in the past that with specialized equipment, passive RFID tags could be read at 1100 feet. This seemed a bit far fetched to me, and sure enough, a quick Google search turned up ...
7
votes
3answers
10k views

How does Near Field Communication (NFC) compare to RFID technologies? Looking for a functional primer

I'm starting my independent studies in RFID and NFC and am trying to understand how they relate to each other, and what security issues are common/unique to each. Is RFID a superset of NFC? (or vice ...
2
votes
1answer
131 views

How are RFID access systems compromised?

http://www.incontrol.co.nz/82/Cards-and-Tags Say, for example, a group of people were given the card tag, "Proximity Blue Key Tag", in the link above. This card tag gave access to buildings 'A' and '...
14
votes
4answers
12k views

Is Visa PayWave secure?

Recently (well, a few months or even a year ago), my bank, here in Australia, introduced this PayWave technology to their Visa debit cards. They claim it's secure, but all they talk about is their ...
4
votes
1answer
694 views

How can I validate data on RFID chip that has RSA signatures and SHA1 hash values?

I have a RFID chip that has a digital signature using RSA and has data hashed using SHA1. I would like to compare data from the chip and user input in a program but I believe in order to do that I ...
6
votes
1answer
253 views

Motorola Human Authentication Pill/Vitamin Security?

This appears to be hot news today, Motorola announced a form of pill that a user can swallow which is activated and powered by stomach acids and transmits a signal back which can be used to ...
2
votes
2answers
681 views

What are the vulnerabilities of using NFC on my Samsung SGS3?

The new Samsung SGS3 is equiped with Near Field Communications, which is basically an RFID reader inside the mobile phone. The RFID reader can be programmed to execute commands or run programs. What ...
1
vote
1answer
356 views

Satellite dish giving off RF signal with no reciever [closed]

I have a pretty decent and new satellite dish on my roof (Direct TV) but have no receiver in use. It was still technically connected to my cable lines and I found RF signals all over that section of ...
1
vote
1answer
657 views

Pseudo-Unique PICC Identifier in Passports/ID Cards

I'm currently researching fingerprint abilities of german ID cards. These cards are compliant to ISO 14443 (the same standard as for passports). I found a part that caught my attention and I have a ...
3
votes
2answers
70k views

Can a SIM card be tracked without cell phone and battery?

I have a SIM card alone without cell phone and battery. Can it be be tracked?
1
vote
2answers
181 views

hardware required for wifi security system

i am planning to implement one WIFI security system , in which one can lock or unlock door remotely. As i have serched over internet and i came across lockitron and schlage Now what i want to know ...
6
votes
1answer
228 views

Resources on security risks of NFC

Mobile phones are, increasingly, starting to support NFC. NFC can be used for a rich set of applications (including mobile payments, identity, and file sharing). What are primary security risks ...
5
votes
2answers
230 views

What are the risk tradeoffs of all-in-one “smart” IDs vs. using a separate hardware authenticator?

In many organizations these days, employee IDs are very mutli-functional. They can serve as: Visual identitiy verification. (Including employee photo, name, ID number, and other details on the ...
3
votes
3answers
2k views

Vulnerabilities of RFID Smartcards

Recently my organization wants to move into the smart card system instead of static password. We want to move the entire infrastructure to the smartcard system. we are looking for a single smartcard ...
13
votes
5answers
1k views

How to get into RFID auditing?

I would like to get more knowledge around RFID-systems auditing. Does anyone have a basic guide step-by-step which I can use to set up a lab with proper RFID "sniffing" equipment? I would like to ...
9
votes
3answers
7k views

Using RFID-only on door lock to house?

I'm thinking of equipping the door to my house with an RFID-reader and a custom arduino-like board to do the authentication. My question is what is the recommended security level for a normal house (...