NXP RFID Cracked

kamlapati sends us to EETimes for news that the Chaos Computer Club in Germany and researchers from the University of Virginia have cracked the encryption scheme used in a common RFID chip, NXP's Mifare Classic. According to the article the device is used in many contactless smartcard applications including fare collection, loyalty cards, and access control cards. NXP downplays the significance of the hack, saying that that model of RFID card uses old technology and they do a much better job these days.

Frustrating, but not really...

[PC and Sony Fanboy]

Since RFID needs close proximity to be read, I'm TOO concerned.

It'd be pretty noticeable if someone had a high powered RFID antenna/reader - if they were trying to move it.

But, since it would be easy to install a modified high power RFID reader in a convenience store stand, near a window or in a mailbox on a street corner, this could become a problem.

I guess it means that I'll be wearing tinfoil pants as well as a hat, to keep THEM from reading my mind, and my credit card. And password. And the chip in my dog.

Re:Frustrating, but not really...

[wronskyMan]

I guess it means that I'll be wearing tinfoil pants as well as a hat, to keep THEM from reading my mind, and my credit card. And password. And the chip in my dog.

Must be a pretty small dog or pretty large pants...

After this article...

[zappepcs]

NXP downplays the significance of the hack, saying that that model of RFID card uses old technology and they do a much better job these days.

means absolutely fuck all....

Next hackers to try the new stuff in 3... 2.... 1...

H4x0r3d !! All your code are belong to us!

Seriously, I know they need to try, but personally I don't think they ever try hard enough. Mostly this is due to convenience of not having to generate millions of keys and other such secure ideas. Sometimes I wonder why they try to make it cheap instead of just trying to make is safe? To save a couple of bucks per device? Security is not cheap or easy. period. ever.

Re:Frustrating, but not really...

[JonathanR]

The tinfoil pants are for preventing them reading his mind.

Chess Club

[Anonymous Coward]

kamlapati sends us to EETimes for news that the Chaos Computer Club in Germany and researchers from the University of Virginia have cracked the encryption scheme used in a common RFID chip,

Dammit - that's the second time this week I've scanned the story too fast and wondered why on earth a German Computer Chess Club cared so much about internet security...

Behold -- science.

[jesdynf]

That's right. Science. We have reached the point where we might have to send a technician out to do a firmware update on *a crate of soup*.

"Oh, no, sonny. That there pallet's running v1.47a -- the cyberinjuns cracked that dekacycles ago. Hardly know what's in there now. Could be tomato, could be chicken noodle. Send that back on the factory. We'll get you some nice v1.49 soup out here. Won't be half a cycle."

Forget the soup...

[Smarty_Pantz]

Forget the soup!

Can they read the chip on my shoulder?