Re: [Full-disclosure] RFID Attack theory

[Michael Holstein <michael.holstein@xxxxxxxxxxx>]

> So most of the research has been done here already.. Which brings me to 
> the work done by www.rfidvirus.org <http://www.rfidvirus.org>
> They have some really good ideas about attacking the middleware using 
> SQL injections, SSL includes, and buffer overflows on the reader to 
> middle ware interface. Some really good stuff.

As small as the actual chips are, imagine how much fun you could have if 
you scattered handfuls of malicious chips around your favorite 
high-security place (airport, office, whatever...).

You could render these high-tech authentication schemes completely 
useless .. just like the military does with their carbon-fiber bombs 
designed to defeat electrical gear.

/mike.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/