full-disclosure - RFID Attack theory

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <44A5314D.3090403@csuohio.edu>
Date: Fri Jun 30 15:11:52 2006
From: michael.holstein at csuohio.edu (Michael Holstein)
Subject: RFID Attack theory

> So most of the research has been done here already.. Which brings me to 
> the work done by www.rfidvirus.org <http://www.rfidvirus.org>
> They have some really good ideas about attacking the middleware using 
> SQL injections, SSL includes, and buffer overflows on the reader to 
> middle ware interface. Some really good stuff.

As small as the actual chips are, imagine how much fun you could have if 
you scattered handfuls of malicious chips around your favorite 
high-security place (airport, office, whatever...).

You could render these high-tech authentication schemes completely 
useless .. just like the military does with their carbon-fiber bombs 
designed to defeat electrical gear.

/mike.