You know the cards-you're going into your building at work and you wave your ID card at a reader and in you go (and maybe the person behind you that is *tailgating*). Anyway, Black Hat Federal security conference is demonstrating how the hacking of these cards is done.. and one of the manufacturers doesn't like it.
Paget's talk will address widespread security issues with the implementation of RFID in proximity cards that are sold by HID and other companies and that are widely used for building access. His RFID cloner was on display at the recent RSA Security Conference in San Francisco, where he demonstrated for InfoWorld how the device could be used to steal access codes from HID brand proximity cards, store them, then use the stolen codes to fool a HID card reader.
Paget's presentation at Black Hat Federal will go deeper, providing schematics and source code that attendees could use to create their own cloning device, and discussing vulnerable implementations of RFID technology in a wide variety of devices, Paget told InfoWorld at RSA earlier this month.
"Hopefully I'll be able to give people some information about RFID and get some pressure on vendors to fix these lousy RFID implementations," Paget said. "As it stands, I can walk up to someone on the street or maybe stand next to them in an elevator, grab their card ID and get into the building," he said.
Wah! Maybe instead of Corporation whining about how your *secure* card can be hacked, you ought to be making it MORE secure.