Showing posts with label security tech. Show all posts
Showing posts with label security tech. Show all posts

Friday, March 14, 2008

RFID Proved to Be Entirely Vulnerable


The above screencap comes from a March 13, 2008 Engadget post post (here: http://www.engadget.com/2008/03/13/one-billion-rfid-cards-vulnerable-to-hacks/ )


It's so funny to me how people tend to think technology is so great. Now, speaking as a man with three laptops, three iPods, two cell phones, and a handful of other gadgets, it may seem odd for me to be critical of the very genre of objects I clearly love so much. The thing is, nothing is perfect and "security" is something technology just doesn't do well.

Whether it's electronic voting machines or DVD encryption, one thing you can guarantee about anything digital, is that eventually someone will hack it. The more high-profile the tech is, the faster it will get it's ass hacked. RFID is a great example of a technology widely regarded as a brilliant, despite it being electronic and therefore hackable.

Radio Frequency IDentification chips were originally lauded as a great solution to all sorts of problems. From inventory tracking, to speedy payment for items in stores, to accessing medical records, RFID, to those in denial, is the technology of the gods.

For those of us willing to see the big picture, RFID is still digital.

The above screencap of a March 13, 2008 Engadget post reports that RFID chips are indeed hackable--easily so. Which is really frightening based on a March 14, 2008 Engadget post (here: http://www.engadget.com/…stems-too/ ). It reports that: "Sure, it's fun to say that one billion RFID cards are now at risk due to the Mifare Classic's broken encryption, but it's another thing to comprehend how widespread the fallout could potentially be -- the London Underground's Oyster Card is based on the chip, for example."

They go on to explain that the encryption can be beat using a PC. The post also includes a list over ten cities that use "the Mifare Classic for access control and / or mass transit ticketing" including London, Boston and Hong Kong.

If memory serves, RFID chips are also used in some credit cards and new US passports.

WHOOPS!

The video attached to this post was snagged from YouTube here: http://snipurl.com/21slz and demonstrates precisely how hacking RFID can be done. It's incredibly easy.

Mobile post sent by thepete using Utterz.  Replies.

Sunday, September 16, 2007

ALL ABOUT RFID CHIPS

Back on September 9, 2007, I stumbled across a post at Engadget.com (here: http://urltea.com/1hpx) that reports on those fun little things called "RFID chips." What are "RFID chips"? Well, they are Radio Frequence IDentification chips and they allow all sorts of stuff to be tracked wirelessly. Companies put them in their products to help track inventory. As I understand it, RFID chips are used in those "Fast Pass" gas-paying key chains some gas companies offer so you can pump your gas and not have to "bother" with swiping your credit card. Some want RFID chips implanted into people as a way to replace Social Security cards, driver's licenses, credit cards and medical records. In theory all of this information (and more) could be stored in one of those tiny little chips.


This would allow people implanted with them to walk into a supermarket and roll out a cart-full of groceries without having to stand in line to pay. The RFID chips in the products you bought would let sensors in the door know what you have and the RFID chip in your ass would tell those same sensors what bank account to take the money out of.


Sounds neat, sure--but machines make mistakes. Register scanners make mistakes already (always check your receipts!!). And what happens if you buy something, like a pack of gum and you go back inside the store later? Wouldn't the store charge you twice? Also, someone with a fairly inexpensive RFID chip reader could walk around outside your home and pick up the signals those little RFID chips give off and, in theory, compile a complete list of the items in your home. That way he'd know whether your home would be worth breaking into or not.


I won't even go into how the RFID chip in your ass could be scanned and copied. The point here is that the there are as many reasons not to embrace RFID technology as there are to embrace it. In fact, there's one more in the "cons" column as reported on in that Engadget post I mentioned earlier--cancer.


Yep, the C-word of diseases is apparently a side effect of implanting RFID chips into your flesh. Here's a cutting from that post:

a number of studies over the past decade have amassed which link the chips to malignant tumors in animal tests. Besides the potential foul play going on at the FDA and VeriChip Corp. that got the chips approved for human use in 2004, studies showing as little as 1% cancer rates in lab animals led researchers to note that the aggressive tumors which immediately encased RFID implants with cancerous cells were "clearly due to the implanted microchips", and not random occurrences.


WHOOPS! Well, 1 percent isn't too bad, is it?


Unless, you're the one percent.