6 ms·

If nothing else: there's a market for fighting back against this. KeyMe kiosks (usually found at US supermarkets, pharmacies, etc.) have had RFID fob/card cloni

If nothing else: there's a market for fighting back against this. KeyMe kiosks (usually found at US supermarkets, pharmacies, etc.) have had RFID fob/card cloning capabilities for a while now. You scan the fob/card at the kiosk, then they clone it to a sticker and send it to you via mail.

closeparen 8y ago
Interesting. I wonder if they have actually productized the security research on HID iClass, etc. or if they are only supporting simpler credentials with no cryptography.
deleted 8y ago
[deleted]
C14L 8y ago
> clone it to a sticker and send it to you via mail. So they have a database full of addresses together with their digital keys? What could possibly go wrong...
- Cpoll 8y ago
  To be honest, not a lot, they only let you past the building door. So as a thief, I can: A. Scrub through a hypothetical leak of all that data, or B. Tailgate someone (even in security-conscious buildings this isn't much harder than following someone while carrying a box in both hands) Locks are for honest people.
  - BurningFrog 8y ago
    So it can be used to steal or deliver packages.
  - jib 8y ago
    Until you live in an apartment complex that has eliminated keys. My place is all keyfobs (except for the mailbox).
  - Scoundreller 8y ago
    Letting people get into the locker room or bike room can create issues. You can get a great lock, but what they lock into is usually a very weak link.
ma2rten 8y ago
Does this also work for company badges?
- sithadmin 8y ago
  In theory, it could. Depends on whether the particular RFID standard used is supported by KeyMe or not. At a glance, they didn't seem to have much info available on what is/isn't supported.
MR4D 8y ago
I wonder what they do with the data after they’ve mailed you the sticker.
- Doxin 8y ago
  Most RFID keyfobs simply contain a serial number (possibly encrypted or signed) and nothing more. There's not a lot of use in stealing a random number. They'd have to be in cahoots with the people running the lock software to gain anything by it.

closeparen 8y ago

Interesting. I wonder if they have actually productized the security research on HID iClass, etc. or if they are only supporting simpler credentials with no cryptography.

deleted 8y ago

[deleted]

C14L 8y ago

> clone it to a sticker and send it to you via mail. So they have a database full of addresses together with their digital keys? What could possibly go wrong...

Cpoll 8y ago
To be honest, not a lot, they only let you past the building door. So as a thief, I can: A. Scrub through a hypothetical leak of all that data, or B. Tailgate someone (even in security-conscious buildings this isn't much harder than following someone while carrying a box in both hands) Locks are for honest people.
- BurningFrog 8y ago
  So it can be used to steal or deliver packages.
- jib 8y ago
  Until you live in an apartment complex that has eliminated keys. My place is all keyfobs (except for the mailbox).
- Scoundreller 8y ago
  Letting people get into the locker room or bike room can create issues. You can get a great lock, but what they lock into is usually a very weak link.

ma2rten 8y ago

Does this also work for company badges?

sithadmin 8y ago
In theory, it could. Depends on whether the particular RFID standard used is supported by KeyMe or not. At a glance, they didn't seem to have much info available on what is/isn't supported.

MR4D 8y ago

I wonder what they do with the data after they’ve mailed you the sticker.

Doxin 8y ago
Most RFID keyfobs simply contain a serial number (possibly encrypted or signed) and nothing more. There's not a lot of use in stealing a random number. They'd have to be in cahoots with the people running the lock software to gain anything by it.