9 ms·
My friend found out the school he sysadmins for was using weak rfid card keys (despite the readers being smart enough to handle higher level encryption) and fou
by gleenn 3y ago
My friend found out the school he sysadmins for was using weak rfid card keys (despite the readers being smart enough to handle higher level encryption) and found he could clone his key and get in places. So basically he pen tested and then they decided to upgrade to the less or non-cloneable card keys. Security for the win.
- Vegenoid 3y agoBefore anyone tries this, doing this without first checking with security/facilities would likely be grounds for “disciplinary action, up to and including termination”
- spacebacon 3y agoTermination is a favor if security is that lax.
- spacebacon 3y ago[flagged]
- spacebacon 3y ago[flagged]
- BizarreByte 3y ago> Termination is a favor Losing your job is never a favour. Would you prefer termination if any issue was found with your work place?
- spacebacon 3y agoLosing your job may not seem like a favor at first, it depends on how high you bounce after the fact. Being self employed for 20 years after being laid off was the best favor anyone ever did for me. I would have never taken that initial risk without being pushed into it. Now risk is comfortable.
- WantonQuantum 3y agoI don't know why you're getting downvoted for this. It's 100% correct advice. The person you're replying to is a sysadmin so they are probably okay in this situation but cloning access cards without permission would be a serious breach no matter how well intentioned or how easy.
- spacebacon 3y agoI countered the statement and also getting down voted. The key is to train your brain to like down votes just as much as up votes. When the number is just a number not attached to dopamine then you are free.
- faeriechangling 3y agoThis just makes you disappointed if you don’t get negative or positive attention.
- spacebacon 3y agoI never thought about that. Good point.
- catchnear4321 3y agothere are people that read without voting. you could be getting attention of all kinds and not even know it.
- spacebacon 3y agoAnother good point.
- bookofjoe 3y agoI bet an equal number vote without reading.
- spacebacon 3y ago
- wmidwestranger 3y agoIf only issuing clone-able key cards were the infraction instead...
- heavyset_go 3y agoUnfortunately, it sounds potentially criminal, as well.
- infinitedata 3y agoYou can achieve this exact same use case with a $15 RFID reader/writer, supporting higher frequencies and encryption.
- rekoil 3y agoQuite often the keycards have sequential IDs which means you can increase or decrease the number a few times and find a colleagues card with higher or lower privileges than you.