Collaborate Disseminate
Sony FeliCa does not provide any official docs on which cryptographic functions are used for their NFC cards. They got some docs explaining that they do mutual authentication, but there is no official paper explaining what cr… Continue reading Is FeliCa DES encryption safe?
A curious custom that survives from the pre-computer era is that of the business card. If you walk the halls at a trade event you’ll come a way with a stack of these, each bearing the contact details of someone you’ve encountered, and each in a world of social media …read more
Continue reading There’s More To Designing A PCB Business Card Than Meets The Eye
Google has patched an Android bug that could have allowed attackers to use NFC to send over a malicious file to the victim’s phone
Continue reading Google patches bug that let nearby hackers send malware to your phone
I have a contactless card which I’d like to know the capabilities. I assume the card works with NFC. However standard tools (nfc-list) do not seem to be able to retrieve regular informations from it (not even the UID), the ph… Continue reading Reversing Contactless Chip Capabilities
If you’re wondering why would I want that – it’s for my own security: against identity and data theft.
Continue reading Is there a secure way to disable NFC and RFID on credit cards and personal IDs?
Does anyone remember the Black Hat BCard hack in 2018? This hack has been documented extensively, most notoriously by [NinjaStyle] in his original blog post revealing the circumstances around discovering the vulnerability. The breach ended up revealing the names, email addresses, phone numbers, and personal details of every single conference …read more
Continue reading Revisiting The BlackHat Hack: How A Security Conference Was Pwned
I would like to emit a custom UID over the NFC chip of my (rooted) Android phone. How can I achieve this ?
Continue reading Force Android to emit a UID over NFC [migrated]
I want to protect my NFC tag against unauthorized copying.
I understand that EMV is using asymetric cryptography. My focus is on understanding of other standards (NTAG413, MIFARE DESFire) or anything else you could suggest t… Continue reading Which NFC standard prevents NFC tags from unauthorized copying?
My ideal bank would offer online banking from a browser with user/pwd and WebAuthn, for example with a NFC or USB key. No OTP or SMS or apps on the smartphone or physical devices required. (It goes without saying, no recovery… Continue reading Why don’t online banks use WebAuthn? [on hold]
The functionality is to hold a store credit amount. If the credit can be set to 50, and from the chip itself this value can only be decreased, there is no chance for hackers to increase this value again.
Are there any NFC ch… Continue reading NFC Chip with countdown pin