4 ms·

Curious why they are focusing on this gadget when every hacking function in it has a related item for sale. Are they also blocking Hak5 Wifi Pineapples, or the

Curious why they are focusing on this gadget when every hacking function in it has a related item for sale. Are they also blocking Hak5 Wifi Pineapples, or the micro voice activated recorders, or the key-chain sized security card cloning devices, or the myriad of gps tracking gadgets? Do they block downloads of Kali Linux?

toomuchtodo 4y ago
Weak RFID infrastructure. Better to attempt to ban the tool than fix the root cause. Usual optics around “we’re solving the problem!”
- LinuxBender 4y ago
  You are probably right. It's funny though as there are literally hundreds of these RFID cloning devices [1] on Amazon, Ali, ebay and other places. I think trying to block the sale of them would be an endless game of whack-a-mole. I am just linking the first one I found. There are more advanced and expensive cloning devices [2] that can clone anything. [1] - https://www.amazon.com/Keysy-RFID-Duplicator-keycards-keyfobs/dp/B07D7K2LCB https://www.amazon.com/Keysy-RFID-Duplicator-keycards-keyfob... [2] - https://www.youtube.com/watch?v=VkHArCMPDCk https://www.youtube.com/watch?v=VkHArCMPDCk
- pixl97 4y ago
  Infrastructure problems are never easily and cheaply solved. For example when the Meltdown exploit was discovered it was internally embargoed to distribute knowledge of it for some time as how to fix the problem was discovered and the multitude of vendors that needed to issue firmware fixes and kernel fixes were brought up to speed. In theory the best course of actions is to issue mandates that infrastructure gets fixed while the stem of tools to hack said infrastructure is reduced for some time.
capableweb 4y ago
Probably because those devices are certified with the appropriate agency, while this one is not. At least according to the article. > Multiple people in Brazil who purchased the Flipper Zero hacking tool have reported that their shipments are being redirected to Brazil's telecommunications agency, Anatel, due to a lack of certification with the country's Radio Frequencies department. > Because Flipper Devices INC is not certified in Brazil according to this standard, it's not allowed to circulate freely in the Brazilian market. Makes sense, devices have to be properly certified, if they are not, they're illegal. Seems like it has nothing to do with the "hacking" abilities of the device.
- doodlesdev 4y ago
  The thing is that it's not certified because they don't want to certify it. That's really unusual. I'm pretty sure the reason for ANATEL to not certify the device is because they believe it has no legitimate use.
monocasa 4y ago
It's probably the 433mhz (and other sub-Ghz) functions connected to easy to use UX that really scare them. Brazil's aristocracy live and work in little walled compounds and 433mhz can open pretty much any of their gates or jam it so the owners can't open their gate and they get boxed in by a couple cars.
- capableweb 4y ago
  Modern remotes/receivers have encryption, via rolling keys or other ways. It's not super easy to unlock those. Easy to upgrade as well, if you want to. Truth is, the device is not certified so the authorities are confiscating them. Makes more sense than some "aristocracy" conspiracy.
  - monocasa 4y ago
    I mean, the authorities specifically called out it's potential use by criminals to deny the normal one off certification process for test equipment. > Anatel's certification area informs that the equipment called FLIPPER ZERO has been used in the country by malicious users in facilitating a crime or criminal misdemeanor and, as provided for in item II of Art. 60 of the Regulation for Conformity Assessment and Homologation of Telecommunications Products (annex to Resolution No. 715, of October 23, 2019), Anatel has rejected all homologation requests for the product in question, in order to collaborate in the protection of Brazilian citizens against criminal actions. Those 433mhz gate remotes/receivers tend to have very little in the way real security. Not even rolling codes but just transmitting the same code every time is still very common. And in an extremely socially striated country like Brazil, the ruling class using bureaucracy against their common fears isn't a 'conspiracy' any more than, like, the whole of society is.
- guilhas 4y ago
  Don't disagree, but to clone 433mhz you can buy a 10$ device, on eBay or Amazon
DarthNebo 4y ago
The issue they have is primarily due to SDR functionality similar to HackRF, oppressive governments do not want their citizens to have unfettered internet access using satellite internet or be able to exploit weakly secured or conversely use highly secure communications
deleted 4y ago
[deleted]

toomuchtodo 4y ago

Weak RFID infrastructure. Better to attempt to ban the tool than fix the root cause. Usual optics around “we’re solving the problem!”

LinuxBender 4y ago
You are probably right. It's funny though as there are literally hundreds of these RFID cloning devices [1] on Amazon, Ali, ebay and other places. I think trying to block the sale of them would be an endless game of whack-a-mole. I am just linking the first one I found. There are more advanced and expensive cloning devices [2] that can clone anything. [1] - https://www.amazon.com/Keysy-RFID-Duplicator-keycards-keyfobs/dp/B07D7K2LCB https://www.amazon.com/Keysy-RFID-Duplicator-keycards-keyfob... [2] - https://www.youtube.com/watch?v=VkHArCMPDCk https://www.youtube.com/watch?v=VkHArCMPDCk
pixl97 4y ago
Infrastructure problems are never easily and cheaply solved. For example when the Meltdown exploit was discovered it was internally embargoed to distribute knowledge of it for some time as how to fix the problem was discovered and the multitude of vendors that needed to issue firmware fixes and kernel fixes were brought up to speed. In theory the best course of actions is to issue mandates that infrastructure gets fixed while the stem of tools to hack said infrastructure is reduced for some time.

capableweb 4y ago

Probably because those devices are certified with the appropriate agency, while this one is not. At least according to the article. > Multiple people in Brazil who purchased the Flipper Zero hacking tool have reported that their shipments are being redirected to Brazil's telecommunications agency, Anatel, due to a lack of certification with the country's Radio Frequencies department. > Because Flipper Devices INC is not certified in Brazil according to this standard, it's not allowed to circulate freely in the Brazilian market. Makes sense, devices have to be properly certified, if they are not, they're illegal. Seems like it has nothing to do with the "hacking" abilities of the device.

doodlesdev 4y ago
The thing is that it's not certified because they don't want to certify it. That's really unusual. I'm pretty sure the reason for ANATEL to not certify the device is because they believe it has no legitimate use.

monocasa 4y ago

It's probably the 433mhz (and other sub-Ghz) functions connected to easy to use UX that really scare them. Brazil's aristocracy live and work in little walled compounds and 433mhz can open pretty much any of their gates or jam it so the owners can't open their gate and they get boxed in by a couple cars.

capableweb 4y ago
Modern remotes/receivers have encryption, via rolling keys or other ways. It's not super easy to unlock those. Easy to upgrade as well, if you want to. Truth is, the device is not certified so the authorities are confiscating them. Makes more sense than some "aristocracy" conspiracy.
- monocasa 4y ago
  I mean, the authorities specifically called out it's potential use by criminals to deny the normal one off certification process for test equipment. > Anatel's certification area informs that the equipment called FLIPPER ZERO has been used in the country by malicious users in facilitating a crime or criminal misdemeanor and, as provided for in item II of Art. 60 of the Regulation for Conformity Assessment and Homologation of Telecommunications Products (annex to Resolution No. 715, of October 23, 2019), Anatel has rejected all homologation requests for the product in question, in order to collaborate in the protection of Brazilian citizens against criminal actions. Those 433mhz gate remotes/receivers tend to have very little in the way real security. Not even rolling codes but just transmitting the same code every time is still very common. And in an extremely socially striated country like Brazil, the ruling class using bureaucracy against their common fears isn't a 'conspiracy' any more than, like, the whole of society is.
guilhas 4y ago
Don't disagree, but to clone 433mhz you can buy a 10$ device, on eBay or Amazon

DarthNebo 4y ago

The issue they have is primarily due to SDR functionality similar to HackRF, oppressive governments do not want their citizens to have unfettered internet access using satellite internet or be able to exploit weakly secured or conversely use highly secure communications

deleted 4y ago

[deleted]