Skip to main content
The 2024 Developer Survey results are live! See the results
227 votes
Accepted

How can RFID/NFC tags not be cloned when they are passive technology?

Because the cards contain a chip which are powered by a coil. The coil is not really a antenna, but half of a transformer. Think your regular mobile charger. This contains a transformer, that will ...
sebastian nielsen's user avatar
58 votes

Can a student ID containing an NFC chip be cloned?

Many NFC enabled smartphones can write to these cards with an app like MifareClassicTool. However I've found several phones seem to be able to do it when in reality trying to write to Sector-0 bricks ...
Hector's user avatar
  • 11k
52 votes

How can RFID/NFC tags not be cloned when they are passive technology?

NFC (Near Field Communications) cards are not passive. NFC readers constantly transmit RF (radio frequency) energy; this is called a carrier signal. Very close to the reader (within about one ...
John Deters's user avatar
  • 34.3k
24 votes

Can a student ID containing an NFC chip be cloned?

I have recently cloned a Mifare Classic tag. The scan you have there indicates there is no information stored on your tags, apart from in the first sector. This isn't readable by that app because it ...
comp500's user avatar
  • 341
22 votes

How can RFID/NFC tags not be cloned when they are passive technology?

How can RFID/NFC tags not be cloned when they are passive technology? Your question assumes 2 things: That RFID tags cannot be cloned And they are passive, not active. Both points are incorrect:...
Dai's user avatar
  • 1,728
16 votes

Can a student ID containing an NFC chip be cloned?

If it is Mifare Classic, that should really not be hard. The general attack on Mifare's broken cryptosystem has been around since 2007. Have a look at this if you want: BlackHat Talk Slides This is ...
Ben's user avatar
  • 2,064
9 votes

Mifare DESfire EV1 cloning?

You would need to extract the key of the card, which is what these cards generally protect against. Authentication protocols in general depend on a challenge response. In case of Mifare EV1 this is ...
Lucas Kauffman's user avatar
9 votes
Accepted

RFID-Safe Wallet destroys mag stripe?

Short answer: No. Long answer: Nooooooo. Longer answer: RFIDs typical work via magnetic coupling to both power and to transmit data. By modulating the load on the secondary coil of the magnetic ...
Aron's user avatar
  • 753
8 votes

RFID-Safe Wallet destroys mag stripe?

What can happen, and actually had happen, is that some card holder were badly designed and included a simple magnet for locking. This will do nothing to the RFID part of the chip, but it can damage ...
Kevin FONTAINE's user avatar
6 votes

How can RFID/NFC tags not be cloned when they are passive technology?

I'll try to make it rather short and try to answer every question. How is this possible without power? There is power like usual. It works by the same electromagnetical principle as a transformer (...
AnoE's user avatar
  • 2,409
5 votes
Accepted

Are wireless card skimmers just fearmongering?

ScanBlocker seems like overkill, and depending on how the transmitter works it may even be illegal in some places. RF blocking wallets are much cheaper, much smaller, and have fewer parts to go wrong....
John Deters's user avatar
  • 34.3k
5 votes

Can a student ID containing an NFC chip be cloned?

I've actually tried a similar thing at my old school, and after months of research, this is what I found: Write to sector 0 and hope for the best, maybe it's just the ID that's important. MFCUK, ...
user452094's user avatar
4 votes
Accepted

Is this RFID blocking wallet actually secure?

It appears as though this RFID blocking wallet is simply not forming a strong enough faraday cage, and sufficient amount of RF power is able to simply go through the "RFID blocking" wallet; or it's ...
Herringbone Cat's user avatar
4 votes

Can a security system detect there are multiple copies of a single-issued fob?

There have been different methods of detecting cloned RFID fobs developed over the years depending on the complexity of the system: a random number added to the fob that gets changed with every ...
schroeder's user avatar
  • 131k
3 votes
Accepted

mifare desfire ev1 security with wiegand and rs485

Normally you use key diversification. That means you start with a masterkey M and then you have some key derivation function KDF which maps the masterkey and the card id ID to a card specific key C(ID)...
Elias's user avatar
  • 1,990
3 votes
Accepted

Mifare Desfire symmetric authentication with master key on android

The key does not need to reside on the app. When you ask for authentication, you will get a random number, encrypted with the key, back. This random number, you can send back to the server with the ...
sebastian nielsen's user avatar
3 votes

mifare classic 1k for micropayments

Mifare classic can be completely cloned. You can buy cards with changeable UID as well - I just ordered a bunch. The blocks of the card which require non-default keys can be cracked on a PC using ...
user400344's user avatar
3 votes

Mifare DESfire EV1 cloning?

I'm doing a security feasibility study at the moment. Short answer: No, you can not (at this point) MIFARE Classic has been hacked some years ago, so NXP upgraded their security. At the moment there ...
Thomas De Gussem's user avatar
3 votes

Best practices for loyalty cards (barcode & NFC)

NFC cards can authenticate the reader. Mifare Plus (and Classic as well, but they're broken) can implement ACLs on sectors so that a key must be presented in order to read/write a sector. You can have ...
André Borie's user avatar
  • 12.8k
3 votes

How Mifare classic nested attack works?

I'll give my try to explain, though I give no guarantee for correctness and would be happy if someone provided a better answer, because, I too, struggle with fully understanding the complete attack. ...
kaiya's user avatar
  • 452
3 votes

How concerned should we be about RFID skimming?

The article you point to presents things more from one perspective than the other. From the same article, I find the statement :"RFID crime isn’t a great payback for the effort and risk." at least ...
Overmind's user avatar
  • 8,899
3 votes
Accepted

Are there any contactless (RFID/NFC) card vulnerabilities that are still unsolved? even minor ones

The NFC relay attack is still unresolved. Most of the attacks discovered against contactless payments work on top of the relay attack. The identified security issues result from flawed implementation ...
defalt's user avatar
  • 6,911
2 votes

Do RFID key cards track the user through entry ways?

It depends on how the workplace operates. For example, I work as an IT Technician at a company, literally, and we tag for when we come in, out, etc. When setting this up, I was asked to assign ...
Xanmashi's user avatar
  • 370
2 votes

Best practices for loyalty cards (barcode & NFC)

I'm afraid I'm not familiar with NFC, but I have some suggestion regarding the Barcode shown on the phone screen. You can use a simple cryptographic operation to secure the Barcode before it is ...
700 Software's user avatar
2 votes
Accepted

Is there a reason why Android blocks emulating a RFID tag?

There are two different kinds of RFID tags. Cheap ones which just broadcast their serial number in clear text as soon as they get into a magnetic field Expensive ones which use a cryptographically ...
Philipp's user avatar
  • 49.5k
2 votes

How to make the Tag number of the RFID device appear as a secret number?

Most cheaper RFID tags are dumbtags which stores a static identification value that can be read by any NFC compatible reader. For these dumbtags, you can simply write an app that captures the code as ...
Lie Ryan's user avatar
  • 31.5k
2 votes

13.56 Mhz RFID security

In my opinion the main concern is that Mifare RC522 cards are easy to clone. Anyone with an Arduino and a $1.50 RFID module could copy someone's card and access your building. If you're concerned ...
Ricardo Reimao's user avatar
2 votes

How to tell Mifare Plus from others?

I'm not specifically familiar with how the Plus works, but I can comment on the first two questions. To identify a card, you can look at its SAK and, if applicable, its ATS. MIFARE card ...
VortixDev's user avatar
  • 445
2 votes

RFID protected wallet

Since you have to take it out of your wallet for it to work, I'm going to assume that your bus pass uses an RFID. In that case the answer is very straightforward: No If you have an RFID blocking ...
Conor Mancone's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible