5 ms·
This story doesn't quite make sense. I believe that his RSA pass was clonable and that his towel also had an RFID chip embedded in it. What I find hard to belie
by helper 11y ago
This story doesn't quite make sense. I believe that his RSA pass was clonable and that his towel also had an RFID chip embedded in it. What I find hard to believe is that the towel had a writable RFID tag.
My main experience with RFID is cloning tags onto T5557 chips, and I don't think I've ever come across a writable tag in the wild. It doesn't seem to make economic sense to spend an extra penny or two on every towel to put in a tag you are never going to change.
- pjc50 11y agoThe tags have to be writable at the factory to set the serial number. Presumably it's supposed to be write-once but is actually a small EEPROM, and he has an exploit that lets him overwrite it (see the "details withheld").
- kens 11y agoMifare Ultralight C cards have 3DES-based security, cloning protection and read-only locking [1]. So I don't see how copying the RSA card to the towel would work unless the RSA conference totally messed up their use of RFID or the author has some super-hacker key extraction technique. Am I missing something? [1] http://www.nxp.com/documents/data_sheet/MF0ICU2.pdf http://www.nxp.com/documents/data_sheet/MF0ICU2.pdf
- tekklloneer 11y agoI recently was at a Panera Bread, and when I put my Android phone (with NFC) onto the table, it immediately helpfully popped open tagwriter. Turns out they didnt lock the tables' tags, so you could write urls and when people placed their phones down, had those urls open. (they used the tags for their food pager system)
- chipperyman573 11y agoThe ones at the Panera I used to work at weren't writable (I know this because I saw people trying more than once). How long ago was this?
- tekklloneer 11y agoA couple of weeks ago. It did take some work, it seems like there's a "sweet spot" that I had to hit, and some experimentation that required rotating the phone on the surface, but I was able to write google.com and then pop it open on my tablet.
- deleted 11y ago[deleted]