Questions tagged [nfc]

NFC (Near-Field Communication) is a short-range wireless technology, typically requiring a distance of 4cm or less to initiate a connection between two endpoints.

Filter by
Sorted by
Tagged with
111
votes
4answers
59k views

How can RFID/NFC tags not be cloned when they are passive technology?

Everywhere a question like this is asked, I see people responding that (in a scenario where a card is used) the card does some processing with the data it receives/generates some data when it receives ...
2
votes
4answers
914 views

Best practices for loyalty cards (barcode & NFC)

I am currently trying to determine the best way to go about designing a system that integrates both barcodes and NFC passes. The barcodes will be displayed on a phone screen. The barcode (2D, Aztec, ...
8
votes
2answers
8k views

Is it possible to clone my contactless debit card while it's in my pocket?

I have a bank account that I never use, someone cloned my debit card and used it to buy something in Brazil in order to make sure the cloning was successful then they started making transactions of £...
1
vote
0answers
480 views

Mifare cards authentication

I have few questions about Mifare authentication: 1) Can you confirm me that the authentication between the reader and the tag is as follow: the reader send the correct key to the tag for the sector ...
14
votes
1answer
3k views

How safe is my contactless bank card?

In the past few years Contactless Payment cards have been introduced and I have been reading some articles surrounding security of these cards. The following article "Stealing data from contactless ...
1
vote
1answer
248 views

What data is sent between an NFC/BTLE FIDO U2F device and Chrome (or other agent)?

I need to explain what "conversation" occurs between a FIDO U2F device (YubiKey NEO) and the agent (Chrome). I want to know if it's a challenge response, and ultimately figure out how much ...
-1
votes
1answer
375 views

How does NFC card and reader transfer data? [closed]

Just out of curiosity. In our town we use NFC cards for the public transportation, so when you use the train you have to touch on and then touch off when getting off. I've recently found out that ...
6
votes
1answer
430 views

What is the current state of RFID / NFC security?

I'm attempting to do some RFID and NFC cloning and replaying research, as I'm hoping to be able to demo physical security as an attack vector to a few of out clients and prospects. The downside (...
-3
votes
2answers
389 views

NTAG216 lock bytes security [closed]

I want to ask about the "lock bytes" implemented on the NTAG216 by NXP. What exactly are these and how do they work? Are they a standard or is it some proprietary technology by NXP? Are there any ...
3
votes
0answers
2k views

What are the differences between the Proxmark3 and the Chameleon Mini? [closed]

I want to play with RFID/NFC cards and I need a tool to read, write and emulate tags. I know the Proxmark 3 (http://www.proxmark.org/), but I also heard about the new Chameleon Mini (https://www....
7
votes
1answer
1k views

RFID blocker with a card

There is a company out there that developed a product which looks like a simple card ( format of a credit card or so ) and claims to block rfid-signals in a distance of 10mm. It is not a case to ...
2
votes
0answers
129 views

What's the standard protocol for secure contactless communication

A contactless smartcard has to communicate with a reader in a secure way. The ICAO standard, for example, defines an encryption key (check BAC, EAC and PACE), so that the communication is not ...
19
votes
3answers
16k views

Do readers for the “Mifare DESFire EV1” smartcard really need to know the card's secret key in order to authenticate the card?

I'm trying to understand the security of a contactless smartcard system, used for access control and payment. The card is a Mifare DESFire EV1 implementing ISO 14443 (see the this documentation ...
4
votes
1answer
619 views

NFC - Felica / NXP (Desfire EV1) or ACOS3 which is more secure?

I am new to NFC, and just have been researching on security from different manufacturers, trying to find out which system is more secure with their password protected area. I only know that Desfire ...
2
votes
5answers
653 views

Is the newly adopted NFC technology going to be safe?

I got sent a link today talking about how the business card company "Moo" is implementing a chip into their cards that will allow NFC connections to do many things such as share contact info, open a ...
4
votes
0answers
1k views

NXP NTAG 21x/Desfire password protection and Original signature, protects against cloning?

I saw a few threads about NFC NTAG against cloning and NTAG Desfire, I just want to find out if NTAG 21x with their "New" password protection and "Original Signature against cloning" really does ...
-1
votes
1answer
815 views

Information Security Thesis idea [closed]

I need advice. Currently I'm doing my Masters in Information Assurance, and I only have my Thesis left to graduate. I chose a topic for my thesis but for some reason I don't feel confident that it's ...
5
votes
2answers
3k views

Approach to hack RFID Cards

Recently RFID cards 13.56Mhz band caught my eye. What is the step by step approach to hack RFID Cards? I have a rough idea, but there are still quite a few doubts. Identify the type of the card. Eg. ...
5
votes
1answer
720 views

Security protocol for NFC stickers/cards

Lets say I'm using NFC cards for access control. NFC cards/stickers are easily readable and writable, so my worry is that the data on them could easily be cloned onto another card/sticker and bypass ...
2
votes
1answer
875 views

How dangerous is negligent RFID / NFC card use?

Nowadays RFID / NFC is everywhere. From public transport use, door opening to Credit Cards. I see often people just passing their wallet in RFID/NFC readers to do all kind of operations. This seems ...
16
votes
3answers
40k views

Is it possible to clone an RFID/NFC card using a simple RFID reader, for future reuse and impersonation?

RFID/NFC technology is used in credit cards and many other personal identification applications. Is it possible/how easy is it to clone a card using a simple RFID reader? In other words, can the ...
0
votes
3answers
193 views

Can AES encryption prevent modifying bits in a wireless protocol?

I'm building an application with NFC which is a wireless communication protocol. An attacker can modify bits in a wireless communication protocol. I want to prevent this. I know we can't prevent an ...
19
votes
5answers
3k views

NFC contactless payment security

This is really bugging me. Up until recently debit cards with an electronic chip were the most popular electronic form of payment available in Poland (I'd wager that in other European countries as ...
40
votes
1answer
62k views

How do NFC tags prevent copying?

Ten years ago, we opened our building's front door with a badge. Five years ago we paid public transports with an RFID card. Today we pay for our bread with the same system and tomorrow we would ...
2
votes
2answers
2k views

Mifare DESFire EV1 UID Uniqueness?

I'm currently investigating the Mifare DESFire EV1 card and would like to know if there are the same issues with the UID as there were with the classic? Are the DESFire UID truely unique or have so ...
5
votes
3answers
3k views

Security concerns with malicious NFC tags?

I was reading this article from Life Hacker, How to Automate Your Phone for Every Room in the House with NFC Tags. The idea is to place NFC tags around your house, car, etc. so that you phone will ...
11
votes
3answers
11k views

How does Near Field Communication (NFC) compare to RFID technologies? Looking for a functional primer

I'm starting my independent studies in RFID and NFC and am trying to understand how they relate to each other, and what security issues are common/unique to each. Is RFID a superset of NFC? (or vice ...
7
votes
2answers
10k views

What NFC protocol is used to read information on a Passport?

I'm experimenting with NFC and realized that my passport actually stores data that is only available when the passport is opened. (A closed passport doesn't seem to divulge any information) What ...
6
votes
1answer
312 views

Resources on security risks of NFC

Mobile phones are, increasingly, starting to support NFC. NFC can be used for a rich set of applications (including mobile payments, identity, and file sharing). What are primary security risks ...
9
votes
1answer
1k views

How secure is NFC on mobile devices?

Near field communication is becoming more commonly available in modern mobile devices, such as smartphones and tablets. This functionality can be used to communicate between such devices, or with ...
2
votes
2answers
780 views

What are the vulnerabilities of using NFC on my Samsung SGS3?

The new Samsung SGS3 is equiped with Near Field Communications, which is basically an RFID reader inside the mobile phone. The RFID reader can be programmed to execute commands or run programs. What ...
17
votes
3answers
1k views

What prevents people getting charged over NFC in crowded places?

I don't have an NFC-enabled device and I couldn't find any information about this in Google. What is it that protects me against an attacker with a portable NFC terminal charging payments by just ...

1
2