225
votes
Accepted
How can RFID/NFC tags not be cloned when they are passive technology?
Because the cards contain a chip which are powered by a coil.
The coil is not really a antenna, but half of a transformer.
Think your regular mobile charger. This contains a transformer, that will ...
- 8,914
58
votes
Can a student ID containing an NFC chip be cloned?
Many NFC enabled smartphones can write to these cards with an app like MifareClassicTool. However I've found several phones seem to be able to do it when in reality trying to write to Sector-0 bricks ...
- 10.9k
52
votes
How can RFID/NFC tags not be cloned when they are passive technology?
NFC (Near Field Communications) cards are not passive. NFC readers constantly transmit RF (radio frequency) energy; this is called a carrier signal. Very close to the reader (within about one ...
- 34.1k
24
votes
Can a student ID containing an NFC chip be cloned?
I have recently cloned a Mifare Classic tag. The scan you have there indicates there is no information stored on your tags, apart from in the first sector. This isn't readable by that app because it ...
- 341
22
votes
How can RFID/NFC tags not be cloned when they are passive technology?
How can RFID/NFC tags not be cloned when they are passive technology?
Your question assumes 2 things:
That RFID tags cannot be cloned
And they are passive, not active.
Both points are incorrect:...
- 1,736
16
votes
Can a student ID containing an NFC chip be cloned?
If it is Mifare Classic, that should really not be hard.
The general attack on Mifare's broken cryptosystem has been around since 2007. Have a look at this if you want: BlackHat Talk Slides
This is ...
- 2,054
9
votes
Mifare DESfire EV1 cloning?
You would need to extract the key of the card, which is what these cards generally protect against. Authentication protocols in general depend on a challenge response. In case of Mifare EV1 this is ...
- 54.4k
9
votes
Accepted
RFID-Safe Wallet destroys mag stripe?
Short answer: No.
Long answer: Nooooooo.
Longer answer: RFIDs typical work via magnetic coupling to both power and to transmit data. By modulating the load on the secondary coil of the magnetic ...
- 753
8
votes
RFID-Safe Wallet destroys mag stripe?
What can happen, and actually had happen, is that some card holder were badly designed and included a simple magnet for locking.
This will do nothing to the RFID part of the chip, but it can damage ...
- 181
6
votes
Accepted
How do EMV contactless cards protect against replay attacks?
The most-authoritative reference on EMV replay (i.e., transaction cloning) is Peter Fillmore's latest talk from Syscan 2015
https://github.com/peterfillmore/Talk-Stuff/blob/master/Syscan2015/...
- 19k
6
votes
Accepted
RFID blocker with a card
Are you wondering if such technology exist, or are you wondering if the speech of a company you know but for some reason do not mention is realistic from a technical point of view?
No matter what, ...
- 19.2k
6
votes
How can RFID/NFC tags not be cloned when they are passive technology?
I'll try to make it rather short and try to answer every question.
How is this possible without power?
There is power like usual. It works by the same electromagnetical principle as a transformer (...
- 2,389
5
votes
Accepted
Are wireless card skimmers just fearmongering?
ScanBlocker seems like overkill, and depending on how the transmitter works it may even be illegal in some places. RF blocking wallets are much cheaper, much smaller, and have fewer parts to go wrong....
- 34.1k
5
votes
Can a student ID containing an NFC chip be cloned?
I've actually tried a similar thing at my old school, and after months of research, this is what I found:
Write to sector 0 and hope for the best, maybe it's just the ID that's important.
MFCUK, ...
- 151
4
votes
Accepted
Approach to hack RFID Cards
To identify a card, you power it using a carrier wave on its frequency and wait for answers. If there is no answer, you switch to a different frequency and protocol and so on until you get ...
- 12.8k
4
votes
Accepted
What's the best way to test if an RFID blocking wallet is effective?
An RFID reader system consists of an antenna connected to the proper "reader", i.e. hardware and software to process the signal received from the antenna, and then to the computer.
A simple way to ...
- 3,602
4
votes
Accepted
Is this RFID blocking wallet actually secure?
It appears as though this RFID blocking wallet is simply not forming a strong enough faraday cage, and sufficient amount of RF power is able to simply go through the "RFID blocking" wallet; or it's ...
- 4,322
4
votes
Can a security system detect there are multiple copies of a single-issued fob?
There have been different methods of detecting cloned RFID fobs developed over the years depending on the complexity of the system:
a random number added to the fob that gets changed with every ...
- 128k
3
votes
Accepted
Mifare Desfire symmetric authentication with master key on android
The key does not need to reside on the app.
When you ask for authentication, you will get a random number, encrypted with the key, back.
This random number, you can send back to the server with the ...
- 8,914
3
votes
mifare classic 1k for micropayments
Mifare classic can be completely cloned. You can buy cards with changeable UID as well - I just ordered a bunch. The blocks of the card which require non-default keys can be cracked on a PC using ...
- 873
3
votes
Best practices for loyalty cards (barcode & NFC)
NFC cards can authenticate the reader. Mifare Plus (and Classic as well, but they're broken) can implement ACLs on sectors so that a key must be presented in order to read/write a sector. You can have ...
- 12.8k
3
votes
Using metal business card holders as RFID wallets
The simple answer: yes.
A metal case, whether it is solid or a fine enough mesh will block RFID.
- 61.5k
3
votes
Are RFID shielding sleeves/wallets necessary for payment cards?
I'd like to say up front that everyone else who has posted here is essentially correct. I thought I would post a different perspective, as I am a user of RFID shielding technology.
Every card in my ...
- 365
3
votes
Mifare DESfire EV1 cloning?
I'm doing a security feasibility study at the moment.
Short answer: No, you can not (at this point)
MIFARE Classic has been hacked some years ago, so NXP upgraded their security.
At the moment there ...
3
votes
Accepted
mifare desfire ev1 security with wiegand and rs485
Normally you use key diversification. That means you start with a masterkey M and then you have some key derivation function KDF which maps the masterkey and the card id ID to a card specific key C(ID)...
- 1,955
3
votes
How concerned should we be about RFID skimming?
The article you point to presents things more from one perspective than the other.
From the same article, I find the statement :"RFID crime isn’t a great payback for the effort and risk." at least ...
- 8,879
3
votes
Accepted
Are there any contactless (RFID/NFC) card vulnerabilities that are still unsolved? even minor ones
The NFC relay attack is still unresolved. Most of the attacks discovered against contactless payments work on top of the relay attack. The identified security issues result from flawed implementation ...
- 6,761
2
votes
Are RFID shielding sleeves/wallets necessary for payment cards?
You have good reason to be confused about what "threats" these products are actually targeted at protecting against: not one commercial that I've seen for these items actually provides clear, ...
- 2,735
2
votes
Accepted
Are RFID shielding sleeves/wallets necessary for payment cards?
Deciding whether a security measure is worthwhile means you need to balance the cost of the measure against the benefit of using it. In this case cost, other than a bit of money to buy the sleeves, is ...
- 17.4k
2
votes
Approach to hack RFID Cards
There is no single answer to your question on a "step by step approach" to hack RFID cards. As it is the case with a lot of things, IT DEPENDS!! It depends for example the type of RFID tag/card it is. ...
- 21
Only top scored, non community-wiki answers of a minimum length are eligible