SEARCH RESULTS
 
Showing 1-10 of 14 records
 
Expand article

Hacking Mifare Transport Cards

2008-08-07 06:07:02 by schneier in Schneier on Security
 
...Mifare Classic" chip, is used in hundreds of other transport systems as well Boston, Los Angeles, Brisbane, Oslo, Amsterdam, Taipei, Shanghai, Rio de Janeiro and as an access pass in thousands of companies, schools, hospitals, and government buildings around Britain and the rest of the world The security of Mifare Classic is terrible. This is...
 
Tags: mifare, design, design secrecy, mifare classic chip, secrecy, security, secrecy supports security, security properly, chip
 
 
 
 
Expand article

What do the Cold Boot Crypto Attack, DVD Players, and MiFare tell us about the Future of Biometrics?

2008-03-26 00:16:43 by Erik T. Heidt in Art of Information Security
 
...MiFare RFID Cards ( more info Skimming devices attached to ATM machines to steal card and PIN data ( more info Of course, all of these systems worked in the lab. But when a security system is widely deployed, it has to withstand an enormous amount of scrutiny, and minor flaws will be exploited. And of course, the greater the financial gain,...
 
Tags: biometric authentication, biometric authentication infrastructure, biometric authentication challenge, tamper-proof biometric authentication, authentication, authentication device, mifare, tamper, biometrics
 
 
 
 
Expand article

How they hacked it: The MiFare RFID crack explained

2008-03-19 10:24:03 by Editor in Computerworld Security News
 
Hackers, start your microscopes? The MiFare RFID hack, writes Geeta Dayal, used a few tools not in the arsenal of your average code-duffer. But now that researchers have done the heavy lifting, subsequent cracks will be much, much simpler
 
Tags: mifare rfid hack, writes geeta dayal, subsequent cracks, average code-duffer, microscopes, tools, researchers, heavy, simpler
 
 
 
 
Expand article

MiFare RFID crack more extensive than previously thought

2008-04-15 13:00:00 by Editor in Computerworld Security News
 
Security woes for the wildly popular MiFare RFID chip, hacked several months ago, are mounting. New research demonstrated Tuesday at a security conference in Istanbul shows that the chip can be hacked in mere seconds -- and that more models are affected
 
Tags: months ago, security woes, security conference, models, mere, istanbul, research, tuesday, chip
 
 
 
 
Expand article

Relay attacks on card payment: vulnerabilities and defences

2008-01-09 00:01:52 by Steven J. Murdoch in Light Blue Touchpaper
 
...Mifare Karsten Nohl and Henryk Plötz describe how they reverse-engineered the Mifare encryption algorithm, Crypto1, and the weaknesses they discovered Steam-Powered Telegraphy Jens Ohlig et al. demonstrate their Internet connected (but not quite steam-powered) Telex machine What can we do to counter the spies? Annie Machon describes her work...
 
Tags: dns, security, cellphone jammer dns, security michael steil, talks, henryk pltz describe, chaos communication congress, annie machon describes, arbitrary tcp streams
 
 
 
 
Expand article

Dutch RFID Transit Card Hacked

2008-01-21 06:35:43 by schneier in Schneier on Security
 
...Mifare Classic chip, used on the normal ticket. Two German hackers, Karsten Nohl and Henryk Plotz, were able to remove the coating on the Mifare chip and photograph the internal circuitry. By studying the circuitry, they were able to deduce the secret cryptographic algorithm used by the chip. While this alone does not break the chip, it...
 
Tags: dutch, chip, mifare classic chip, mifare chip, dutch parliament recently, circuitry, internal circuitry, secret cryptographic algorithm, statement abut
 
 
 
 
Expand article

London Tube Smartcard Cracked

2008-03-14 07:27:18 by schneier in Schneier on Security
 
...Mifare system (especially the version called Mifare Classic -- and there are billions out there) was really badly designed, in all sorts of ways. I'm sure there are many more serious security vulnerabilities waiting to be discovered
 
Tags: system, mifare system, dutch transit system, video demo, government agencies, version, press release, lousy cryptography, security vulnerabilities
 
 
 
 
Expand article

Sorry CharlieCard, Your Security Model Is Broken

2008-08-09 14:57:40 by Chris Wysopal in Zero in a bit
 
...Mifare work discovered several vulnerabilities that could be fixed without increasing the cost of the cards. NXP did for a long time rely on obscurity for the security of some of their products, but now decided against this outdated design approach and instead bases the security of newer RFID cards on publicly scrutinized cryptography and...
 
Tags: security, security researchers, valid security approach, system, encryption system, boston subway system, discuss security issues, court system, security systems
 
 
 
 
Expand article

BlackHat Picks, Day 2

2008-08-04 17:48:24 by Chris Eng in Zero in a bit
 
...Mifare - Little Security, Despite Obscurity. This is one of the toughest time slots as you also have McFeters/Carter/Heasman and Grossman/Evans in the lineup. Choices, choices 16:45-18:00 Option 1: Bruce Dang , Methods for Understanding Targeted Attacks with Office Documents. Option 2: Christopher Tarnovsky , Inducing Momentary Faults Within...
 
Tags: day, option, attacks, concurrency attacks, cisco ios forensics, msp430 microcontroller firmware, day job, alexander sotirov, impress girls
 
 
 
 
Expand article

MBTA vs MIT students case continues

2008-08-13 22:47:34 by Chris Wysopal in Zero in a bit