The Security Zealot

This is a common attack against Proximity Badges, but the article claims that this attack is capable of obtaining the credit card information stored on the RFID chip which would including the cardholder’s name, card number, and expiration date. with the $8 dollar RFID reader vs. $1000 of equipment it cost Karsten Nohl and two other unnamed hackers.

If you do have a RFID enable badge, passport or credit card, I would recommend purchasing a faraday bag.

Matthew “The Security Zealot” Becker

A team of hackers comprised of Karsten Nohl and two other unnamed hackers, have announced that they can brute forced the RFID chips which are used on “smartcard”. This RFID chip is the same chip that is used on credit cards, security badges and government identification.

According to several articles, Nohl and his team made this announcement at the Chaos Communications Congress in Berlin, an annual worldwide convention of hackers using readily available equipment which cost them under $1000.
Security code easy hacking for UVa student.

LiquidMatrix Security Blog

Another related article: RFIDIdiot

Matthew “The Security Zealot” Becker

For all you LinkedIn Information Security Professionals around the globe, there is a new group designed especially for you.

The focus of this group is to provide a social network for all Information Security Professionals; no matter the experience level or certifications. It’s hope is to build communication platform, establish mentor ships and assist with employment opportunities within Information Security realm across the globe. The target audience ranges from the Chief Security Officers of fortune 500 companies to the Malware Reverse Engineers.

Please feel free to check out the Global Information Security Professional’s Linkedin Group.

Matthew “The Security Zealot” Becker