Questions tagged [rfid]

Radio Frequency identification

Filter by
Sorted by
Tagged with
-1
votes
0answers
37 views

Is it possible data collection of RFID, WI-FI and Mobiles be use to mimic attacks? [closed]

This data that has been collected, can someone, for example, in a different location get access to it? Even buses nowadays provide wifi. Can they use such means to gain access to these details and use ...
3
votes
1answer
129 views

How concerned should we be about RFID skimming?

I've heard/read several pentesting stories where the pentesters clone RFID badges. I've also seen some articles saying RFID skimming is a negligibly small problem. The RFID skimming I'm talking about ...
1
vote
1answer
86 views

What is it called when someone glides through a building's external door behind you? [duplicate]

One form of social engineering is the practice of running up to a building's external door just as an employee is entering. The employee often holds the door open for the intruder, bypassing security ...
0
votes
1answer
110 views

Is there a secure way to disable NFC and RFID on credit cards and personal IDs?

If you're wondering why would I want that - it's for my own security: against identity and data theft.
0
votes
0answers
85 views

How to find sniff communication to smart card reader?

I use a smart card reader and I want to know if the reader is secure. How to sniff communication between card and card reader?
0
votes
0answers
37 views

Is there a way to clone my student ID card with an Android phone? (MIFARE DESfire) [duplicate]

Is there any way to clone my Student ID card for use with my Android Phone? I found an app for cloning MIFARE Classic cards, but it shows my card as a DESFIRE I realize it's exactly the sort of ...
0
votes
1answer
97 views

RFID protected wallet

Is there something I can put behind my bus pass in my rfid protected wallet so that it will scan on the busses. At the moment I have to take it out to use it.
0
votes
1answer
565 views

Identifying and cloning NFC Card double size UID - type mifare plus 7 byte 2k or classic 7 byte 1k

I am trying to clone/write copies of an NFC card. I am using an ACR122U-A9 receiver and running nfc-tools on a kali linux VM. The card I am trying to clone is identified as a Mifare Classic 1k tag ...
0
votes
0answers
30 views

RFID IDs: Who decides them? Implementation or Convention/Authority? Concerns about security in regards to Bruteforcing

I've been playing a bit with RFID cards of various types lately, and have noticed that the passive cards I'm using all seem to have digits of data on them as a unique identifier. Which leads me to ...
-1
votes
2answers
63 views

What kind of RFID chips are on parking tags?

I was looking at buying a Proxmark, but one of my bigger interests in parking tags. What kind of RFID tags are commonly used in parking badges, and is that kind programmable with a Proxmark?
7
votes
1answer
150 views

How to tell Mifare Plus from others?

How would one determine what version of Mifare a system is using, if one only has access to the fob? For example: https://www.amazon.com/MIFARE-Blue-Key-Fobs-RFID/dp/B011PJXG0U From the product info ...
2
votes
2answers
2k views

RFID-Safe Wallet destroys mag stripe?

I'm getting a hang of paying with credit cards, and contactless payment especially, lately (which was quite uncommon where I live until like a few months ago). I'm now looking to buy one of these ...
0
votes
2answers
88 views

RFID Transmission from far away

Is it possible to trigger a reader from a standard RFID Access Control System? More specifically the badge system commonly used in companies for allowing entry. As in passing an ID to it? Assuming ...
1
vote
0answers
41 views

Security of RFID/NFC card Payment [closed]

You are standing in front of a building with 3 rooms and have a NXP Mifare Classic 1k card. In the first room is a device (device1) that can do the following things: Shows how much money is on the ...
2
votes
1answer
108 views

What secure RFID standards are there; for high value item inventory?

I am wanting to use some RFID devices to help with inventory management of some high value items (paintings). The paintings are packed in wooden transport cases, awaiting shipment. Periodically we, ...
0
votes
0answers
200 views

Cloning Contactless Credit Cards [duplicate]

I have the idea to inject an RFID/NFC chip in my hand and use it for payments and some other stuff. As far as I understand, Visa Paywave is just an RFID chip with a specific ID in it, I've tried ...
1
vote
0answers
40 views

How to secure unique identification of physical resources in a distributed system?

I'm attempting to build a mechanism to prevent frauds and provide traceability of physical resources in a distributed system. The idea is straightforward: the resource travels hop-by-hop on a network ...
3
votes
2answers
2k views

Why do DESFire and Mifare Plus cards offer a random UID feature?

Why do DESFire cards and Mifare Plus cards offer a Random UID feature? What risks should it mitigate or what features should it offer?
0
votes
0answers
26 views

Using Access Readers for software access

Is it possible to use card access readers for something other than physical access? I've been reading about Wiegand and OSDP protocols and it looks like the hardware is all based on that (with some ...
1
vote
0answers
43 views

How is the key shared between tag and reader in RFID mutual AES protocol?

In the RFID mutual authentication protocol, how and where are data stored? What data is stored in the tag, reader and server (database) before first time of communication? For example, in the AES-128 ...
-3
votes
1answer
79 views

Are active tags more vulnerable than passive ones?

According to me, active RFID tags are more likely to suffer from a security attack (i.e. the risk is higher) than passive tags because active tags manifest their presence themselves in their ...
4
votes
2answers
358 views

How to make a secure communication between UHF reader and UHF RFID Tag?

I found some boom barriers,used for gate system, were integrated with UHF reader + access controller and a UHF stickers (attached in car's windshield) for access control using wiegand protocol. In ...
86
votes
4answers
49k views

Can a student ID containing an NFC chip be cloned?

The head of our IT department and Networking class in my college has given me and another student a challenge; he told us that if we could clone the NFC tags in our student ID's used to sign in on ...
1
vote
2answers
175 views

RFID lock security

first of all, i really apologize for asking this kind of generic question, but since i am a complete newbie in this area, i hope you wont mind. I found a nice and cheap RFID powered locking system (...
1
vote
1answer
475 views

mifare desfire ev1 security with wiegand and rs485

I have learned a lot on access badge rfid but something there is not much in the google world. I know Mifare Desfire ev1 works like apps with several keys for each app. As of now it is the most ...
0
votes
2answers
803 views

What should I know to prevent relay attack on NFC?

I am doing thesis on "NFC relay attack" in my BSc last year. I have studied 10-15 papers and learned the basics of NFC and relay attack. Still I am no where near to understand how relay attack is ...
1
vote
0answers
668 views

NFC Forum Type 4 Tag and NXP MIFARE DESFire EV2?

I have some comprehension problems regarding the NFC Forum Type 4 Tag capabilities of NXP MIFARE DESFire EV2. I found the NXP Application Note AN1104 regarding NFC Forum Type 4 Tag and NXP MIFARE ...
1
vote
2answers
2k views

Are NFC tags with cryptographic features “write-only”?

I was wondering how exactly cryptographic NFC tags/cards retain their security. I read that there are certain types of cards that are able to perform symmetric or asymmetric cryptography. These cards ...
0
votes
1answer
99 views

Why are card associations launching RFID enabled payment cards despite of their being unsecure?

You can use applications to get data from these cards. I got tracks data of my cards as well as card number and expiry from my debit card just by single tap of phone. A criminal can use that data and ...
5
votes
2answers
22k views

Mifare DESfire EV1 cloning?

How can I clone an encrypted Mifare DESfire EV1 Card? Tried a 13.56Mhz Reader/writer from eBay but didn't work properly... I need to find any possible way of doing this.
1
vote
0answers
180 views

Connect RFID readers with system/PC [closed]

I have a Raspberry Pi, HID smartcard (HID iClass Px G8Y), HID Card Reader (RP40 multiClass). What I am trying to do is to read the data from this smartcard via the Card Reader onto my system (Laptop/...
2
votes
1answer
9k views

Is there a reason why Android blocks emulating a RFID tag?

So, I have this public transportation card, as well as a card that grants access to my school and lastly one that grants access to my work's office building. My android device doesn't allow me to ...
1
vote
3answers
1k views

How to make the Tag number of the RFID device appear as a secret number?

I just bought RFID-reader device (USB reader) and with it the Tag cards. These tag cards are meant to be as a secret card that no one should know the number of it even its owner. The problem is the ...
1
vote
1answer
720 views

13.56 Mhz RFID security

I am new to the security field, i hope you can help me with this issue, I am designing an access control system based on RFID 13.56 Mhz, and i am using Mifare RC522 IC, which is compatible with the ...
2
votes
1answer
1k views

Mifare Desfire symmetric authentication with master key on android

I wanted to use the Mifare Desfire chip for product authentication purposes, where the chip would be embedded into products. As such, I am looking for a NFC solution that makes it virtually impossible(...
3
votes
3answers
905 views

mifare classic 1k for micropayments

Can Mifare Classic 1k be used for micro payments in a secure way? I have a system in mind for use in a arcade game saloon. You are getting a card from cashier and can top it up for example with 100 ...
1
vote
3answers
417 views

Are wireless card skimmers just fearmongering?

I'm not sure about other countries but Australian Banks have been releasing cards with RFID Chips in them (for what reason is beyond me since around the same time there's been payway apps which swap ...
4
votes
0answers
6k views

Is it possible to clone an NFC/RFID chip that uses IsoDep, NfcA and NdefFormatable

I have an NFC/RFID keychain that looks pretty much like this one: When I read it with an Android app called "Nfc Reader", it shows me a specific ID (always the same) and it says that these ...
4
votes
3answers
839 views

Is this RFID blocking wallet actually secure?

This question is based on a quick experiment that I ran when questioning the effectiveness of my RFID blocking wallet (this one). In my experiment, I walked out of my office, placed my RFID id card in ...
6
votes
1answer
464 views

Privacy and security risks of Green Card scanning with or without offical RFID protection envelope

The presentation slides by Bishop Fox at RFID Hacking - Live Free or RFID Hard - 01 Aug 2013 – Black Hat USA 2013 – Las Vegas, NV briefly describes a number of RFID hacking approaches, and ends with a ...
105
votes
4answers
52k views

How can RFID/NFC tags not be cloned when they are passive technology?

Everywhere a question like this is asked, I see people responding that (in a scenario where a card is used) the card does some processing with the data it receives/generates some data when it receives ...
2
votes
4answers
855 views

Best practices for loyalty cards (barcode & NFC)

I am currently trying to determine the best way to go about designing a system that integrates both barcodes and NFC passes. The barcodes will be displayed on a phone screen. The barcode (2D, Aztec, ...
5
votes
0answers
88 views

How do (broadcast-only/passive) RFID licence plates assert their identity?

I would have guessed by some kind of challenge-response, but there seem to be many claims of 'passive' or 'broadcast-only' tags in the plates. For example from http://www.e-plate.com/security.html: ...
6
votes
1answer
397 views

What is the current state of RFID / NFC security?

I'm attempting to do some RFID and NFC cloning and replaying research, as I'm hoping to be able to demo physical security as an attack vector to a few of out clients and prospects. The downside (...
1
vote
1answer
8k views

What's the best way to test if an RFID blocking wallet is effective? [closed]

I was recently gifted a wallet that alleges to block RFID signals. As I am sure you fine folks at Information Security are aware, this is to protect the information stored on my contactless bank card ...
9
votes
1answer
1k views

How do EMV contactless cards protect against replay attacks?

I understand that standard RFID cards are vulnerable to replay attacks however, how do smart cards which are also contactless protect against replay attacks? Is this decided by the chip or by the ...
3
votes
0answers
2k views

What are the differences between the Proxmark3 and the Chameleon Mini? [closed]

I want to play with RFID/NFC cards and I need a tool to read, write and emulate tags. I know the Proxmark 3 (http://www.proxmark.org/), but I also heard about the new Chameleon Mini (https://www....
7
votes
1answer
1k views

RFID blocker with a card

There is a company out there that developed a product which looks like a simple card ( format of a credit card or so ) and claims to block rfid-signals in a distance of 10mm. It is not a case to ...
1
vote
0answers
3k views

How Mifare classic nested attack works?

I familiarised myself with all available docs on mifare nested attack available, yet I fail to see how predicting tag nonce can help cracking keys. When tag sends nonce (N_t), key stream ks1 is ...
2
votes
0answers
125 views

What's the standard protocol for secure contactless communication

A contactless smartcard has to communicate with a reader in a secure way. The ICAO standard, for example, defines an encryption key (check BAC, EAC and PACE), so that the communication is not ...