3 ms·

> RFID badge that any kid in the subway standing next to you can clone with his phone Please do not spread FUD. Except for antique technologies. (MCF-1, ...)

• blueflow 4y ago
  Many "security" tokens are just... tokens. Literally an ID that is writable and readable to any close device. If you think its antique... like, its still widely in use today, i think you are wrong.
• korlja 4y ago
  It isn't FUD if it is still true for a majority of deployments, even new ones. One popular example: EV chargers still rely on easily cloneable Mifare Classic for access and billing and are only very slowly changing over to more secure alternatives. And in case it isn't obvious: Mifare Classic security problems were literally more than a decade old knowledge when EV chargers started to be deployed. https://community.nxp.com/t5/NFC/good-alternative-for-EV-charging-infrastructure-market/m-p/757647 https://community.nxp.com/t5/NFC/good-alternative-for-EV-cha... It isn't FUD if reality is that bad...
• throwaway787544 4y ago
  Access company Kisi's blog post from 2018 on hacking 125Khz and 13.56Mhz cards: https://www.getkisi.com/blog/how-to-copy-access-cards-and-keyfobs https://www.getkisi.com/blog/how-to-copy-access-cards-and-ke... Hardware device that copies many keys including encrypted: https://icopyx.com/ https://icopyx.com/