Questions tagged [rfid]

Radio Frequency identification

Filter by
Sorted by
Tagged with
-1
votes
1answer
57 views

How can those “RFID signal blocker cards” work without any kind of battery or power of any kind? [closed]

https://www.netonnet.se/art/hem-hushall/bra-att-ha-hemma/safe-n-sound-antiskim-card/1011895.9253/ This card is apparently put in your wallet and protects your pay cards from skimming, by "sending ...
2
votes
0answers
47 views

Is it possible to emulate a full (mifare 1k) card with the ChameleonMini (Rev.G 2)?

I am testing a lock box I own, it uses a Mifare 1k lock with default key, and I use a keyfob to unlock it. I have both a Proxmark3 and a ChameleonMini. With the Proxmark3 I am able to both clone the ...
0
votes
2answers
161 views

Defending against Wiegand sniffing (ESPKey) attacks in RFID card readers

It's known that card readers, which use the Wiegand format, can be attacked by installing a sniffer, such as an ESPKey. After the sniffer is installed, whenever anyone uses the reader, their ...
1
vote
1answer
353 views

Are there any contactless (RFID/NFC) card vulnerabilities that are still unsolved? even minor ones

The title is pretty self explanatory. The market is pretty secretive about these kinds of matter since companies won't give out vulnerabilities for attackers to abuse and will give out vulnerabilities ...
1
vote
1answer
73 views

Does UHF RFID implement any security at all?

Feel free to correct my below logic. As far as I can tell, HF RFID tags (specifically I've tested MiFare Classic 1kb) have a 48-bit encryption key (default to 0xFFFFFFFFFFFF or something) to protect ...
0
votes
1answer
86 views

What are the different types of RFID shields for cards? (Some seem to block 1 side only, some affects all nearby cards regardless of side, etc.)

I'm new to RFID blocking and find it interesting. I came across this video to learn more and just have 2 questions https://www.youtube.com/watch?v=NKwJwOm3bfI Why would Vaultcard (4:42-5:30) protect ...
1
vote
0answers
57 views

RFID // Understanding security of Standard-UID

We are evaluating how to improve security on our RFID System. Our system was reviewed by someone finding the point that there are duplicate Tags we must get rid of. So the first idea was to read the ...
0
votes
0answers
129 views

Detect card type (RFID, NFC, Magnetic, …) [duplicate]

I would like to know how the communication between my gym card and the checking point works. I bought an ACR122U reader, but it seems that I can't read my card with it, the card is not recognized as ...
0
votes
2answers
104 views

smart card authentication process

Smart cards (for instance, public transit cards) are widely used in some countries for authentication purposes at universities and workplaces, so that an authorized person can use a printer or access ...
1
vote
1answer
120 views

Does having 2 or more RFID-enabled cards in a wallet prevent all attacks?

I've heard about RFID-shielding wallets and even individual card sleeves, but my wallet has multiple RFID cards in it (credit card, bus card, building entry card), and if I tap my whole wallet on a ...
3
votes
1answer
143 views

How concerned should we be about RFID skimming?

I've heard/read several pentesting stories where the pentesters clone RFID badges. I've also seen some articles saying RFID skimming is a negligibly small problem. The RFID skimming I'm talking about ...
1
vote
1answer
112 views

What is it called when someone glides through a building's external door behind you? [duplicate]

One form of social engineering is the practice of running up to a building's external door just as an employee is entering. The employee often holds the door open for the intruder, bypassing security ...
0
votes
1answer
493 views

Is there a secure way to disable NFC and RFID on credit cards and personal IDs?

If you're wondering why would I want that - it's for my own security: against identity and data theft.
0
votes
0answers
325 views

How to find sniff communication to smart card reader?

I use a smart card reader and I want to know if the reader is secure. How to sniff communication between card and card reader?
0
votes
0answers
109 views

Is there a way to clone my student ID card with an Android phone? (MIFARE DESfire) [duplicate]

Is there any way to clone my Student ID card for use with my Android Phone? I found an app for cloning MIFARE Classic cards, but it shows my card as a DESFIRE I realize it's exactly the sort of ...
0
votes
1answer
122 views

RFID protected wallet

Is there something I can put behind my bus pass in my rfid protected wallet so that it will scan on the busses. At the moment I have to take it out to use it.
0
votes
1answer
1k views

Identifying and cloning NFC Card double size UID - type mifare plus 7 byte 2k or classic 7 byte 1k

I am trying to clone/write copies of an NFC card. I am using an ACR122U-A9 receiver and running nfc-tools on a kali linux VM. The card I am trying to clone is identified as a Mifare Classic 1k tag ...
-1
votes
2answers
79 views

What kind of RFID chips are on parking tags?

I was looking at buying a Proxmark, but one of my bigger interests in parking tags. What kind of RFID tags are commonly used in parking badges, and is that kind programmable with a Proxmark?
7
votes
1answer
227 views

How to tell Mifare Plus from others?

How would one determine what version of Mifare a system is using, if one only has access to the fob? For example: https://www.amazon.com/MIFARE-Blue-Key-Fobs-RFID/dp/B011PJXG0U From the product info ...
4
votes
2answers
5k views

RFID-Safe Wallet destroys mag stripe?

I'm getting a hang of paying with credit cards, and contactless payment especially, lately (which was quite uncommon where I live until like a few months ago). I'm now looking to buy one of these ...
0
votes
2answers
102 views

RFID Transmission from far away

Is it possible to trigger a reader from a standard RFID Access Control System? More specifically the badge system commonly used in companies for allowing entry. As in passing an ID to it? Assuming ...
1
vote
0answers
46 views

Security of RFID/NFC card Payment [closed]

You are standing in front of a building with 3 rooms and have a NXP Mifare Classic 1k card. In the first room is a device (device1) that can do the following things: Shows how much money is on the ...
2
votes
1answer
150 views

What secure RFID standards are there; for high value item inventory?

I am wanting to use some RFID devices to help with inventory management of some high value items (paintings). The paintings are packed in wooden transport cases, awaiting shipment. Periodically we, ...
0
votes
0answers
267 views

Cloning Contactless Credit Cards [duplicate]

I have the idea to inject an RFID/NFC chip in my hand and use it for payments and some other stuff. As far as I understand, Visa Paywave is just an RFID chip with a specific ID in it, I've tried ...
1
vote
0answers
43 views

How to secure unique identification of physical resources in a distributed system?

I'm attempting to build a mechanism to prevent frauds and provide traceability of physical resources in a distributed system. The idea is straightforward: the resource travels hop-by-hop on a network ...
5
votes
1answer
2k views

Why do DESFire and Mifare Plus cards offer a random UID feature?

Why do DESFire cards and Mifare Plus cards offer a Random UID feature? What risks should it mitigate or what features should it offer? Section in document: NXP Semiconductors N.V., Application note ...
0
votes
0answers
30 views

Using Access Readers for software access

Is it possible to use card access readers for something other than physical access? I've been reading about Wiegand and OSDP protocols and it looks like the hardware is all based on that (with some ...
1
vote
0answers
49 views

How is the key shared between tag and reader in RFID mutual AES protocol?

In the RFID mutual authentication protocol, how and where are data stored? What data is stored in the tag, reader and server (database) before first time of communication? For example, in the AES-128 ...
-3
votes
1answer
85 views

Are active tags more vulnerable than passive ones?

According to me, active RFID tags are more likely to suffer from a security attack (i.e. the risk is higher) than passive tags because active tags manifest their presence themselves in their ...
4
votes
2answers
459 views

How to make a secure communication between UHF reader and UHF RFID Tag?

I found some boom barriers,used for gate system, were integrated with UHF reader + access controller and a UHF stickers (attached in car's windshield) for access control using wiegand protocol. In ...
88
votes
4answers
61k views

Can a student ID containing an NFC chip be cloned?

The head of our IT department and Networking class in my college has given me and another student a challenge; he told us that if we could clone the NFC tags in our student ID's used to sign in on ...
1
vote
2answers
199 views

RFID lock security

first of all, i really apologize for asking this kind of generic question, but since i am a complete newbie in this area, i hope you wont mind. I found a nice and cheap RFID powered locking system (...
1
vote
1answer
564 views

mifare desfire ev1 security with wiegand and rs485

I have learned a lot on access badge rfid but something there is not much in the google world. I know Mifare Desfire ev1 works like apps with several keys for each app. As of now it is the most ...
0
votes
2answers
915 views

What should I know to prevent relay attack on NFC?

I am doing thesis on "NFC relay attack" in my BSc last year. I have studied 10-15 papers and learned the basics of NFC and relay attack. Still I am no where near to understand how relay attack is ...
1
vote
0answers
743 views

NFC Forum Type 4 Tag and NXP MIFARE DESFire EV2?

I have some comprehension problems regarding the NFC Forum Type 4 Tag capabilities of NXP MIFARE DESFire EV2. I found the NXP Application Note AN1104 regarding NFC Forum Type 4 Tag and NXP MIFARE ...
1
vote
2answers
2k views

Are NFC tags with cryptographic features “write-only”?

I was wondering how exactly cryptographic NFC tags/cards retain their security. I read that there are certain types of cards that are able to perform symmetric or asymmetric cryptography. These cards ...
0
votes
1answer
105 views

Why are card associations launching RFID enabled payment cards despite of their being unsecure?

You can use applications to get data from these cards. I got tracks data of my cards as well as card number and expiry from my debit card just by single tap of phone. A criminal can use that data and ...
6
votes
2answers
29k views

Mifare DESfire EV1 cloning?

How can I clone an encrypted Mifare DESfire EV1 Card? Tried a 13.56Mhz Reader/writer from eBay but didn't work properly... I need to find any possible way of doing this.
1
vote
0answers
195 views

Connect RFID readers with system/PC [closed]

I have a Raspberry Pi, HID smartcard (HID iClass Px G8Y), HID Card Reader (RP40 multiClass). What I am trying to do is to read the data from this smartcard via the Card Reader onto my system (Laptop/...
2
votes
1answer
11k views

Is there a reason why Android blocks emulating a RFID tag?

So, I have this public transportation card, as well as a card that grants access to my school and lastly one that grants access to my work's office building. My android device doesn't allow me to ...
1
vote
3answers
1k views

How to make the Tag number of the RFID device appear as a secret number?

I just bought RFID-reader device (USB reader) and with it the Tag cards. These tag cards are meant to be as a secret card that no one should know the number of it even its owner. The problem is the ...
1
vote
1answer
820 views

13.56 Mhz RFID security

I am new to the security field, i hope you can help me with this issue, I am designing an access control system based on RFID 13.56 Mhz, and i am using Mifare RC522 IC, which is compatible with the ...
2
votes
1answer
1k views

Mifare Desfire symmetric authentication with master key on android

I wanted to use the Mifare Desfire chip for product authentication purposes, where the chip would be embedded into products. As such, I am looking for a NFC solution that makes it virtually impossible(...
3
votes
3answers
1k views

mifare classic 1k for micropayments

Can Mifare Classic 1k be used for micro payments in a secure way? I have a system in mind for use in a arcade game saloon. You are getting a card from cashier and can top it up for example with 100 ...
1
vote
3answers
517 views

Are wireless card skimmers just fearmongering?

I'm not sure about other countries but Australian Banks have been releasing cards with RFID Chips in them (for what reason is beyond me since around the same time there's been payway apps which swap ...
5
votes
0answers
7k views

Is it possible to clone an NFC/RFID chip that uses IsoDep, NfcA and NdefFormatable

I have an NFC/RFID keychain that looks pretty much like this one: When I read it with an Android app called "Nfc Reader", it shows me a specific ID (always the same) and it says that these ...
4
votes
3answers
998 views

Is this RFID blocking wallet actually secure?

This question is based on a quick experiment that I ran when questioning the effectiveness of my RFID blocking wallet (this one). In my experiment, I walked out of my office, placed my RFID id card in ...
6
votes
1answer
483 views

Privacy and security risks of Green Card scanning with or without offical RFID protection envelope

The presentation slides by Bishop Fox at RFID Hacking - Live Free or RFID Hard - 01 Aug 2013 – Black Hat USA 2013 – Las Vegas, NV briefly describes a number of RFID hacking approaches, and ends with a ...
112
votes
4answers
62k views

How can RFID/NFC tags not be cloned when they are passive technology?

Everywhere a question like this is asked, I see people responding that (in a scenario where a card is used) the card does some processing with the data it receives/generates some data when it receives ...
2
votes
4answers
993 views

Best practices for loyalty cards (barcode & NFC)

I am currently trying to determine the best way to go about designing a system that integrates both barcodes and NFC passes. The barcodes will be displayed on a phone screen. The barcode (2D, Aztec, ...