Collaborate Disseminate
I have a contactless card which I’d like to know the capabilities. I assume the card works with NFC. However standard tools (nfc-list) do not seem to be able to retrieve regular informations from it (not even the UID), the ph… Continue reading Reversing Contactless Chip Capabilities
If you’re wondering why would I want that – it’s for my own security: against identity and data theft.
Continue reading Is there a secure way to disable NFC and RFID on credit cards and personal IDs?
Does anyone remember the Black Hat BCard hack in 2018? This hack has been documented extensively, most notoriously by [NinjaStyle] in his original blog post revealing the circumstances around discovering the vulnerability. The breach ended up revealing the names, email addresses, phone numbers, and personal details of every single conference …read more
Continue reading Revisiting The BlackHat Hack: How A Security Conference Was Pwned
I would like to emit a custom UID over the NFC chip of my (rooted) Android phone. How can I achieve this ?
Continue reading Force Android to emit a UID over NFC [migrated]
I want to protect my NFC tag against unauthorized copying.
I understand that EMV is using asymetric cryptography. My focus is on understanding of other standards (NTAG413, MIFARE DESFire) or anything else you could suggest t… Continue reading Which NFC standard prevents NFC tags from unauthorized copying?
My ideal bank would offer online banking from a browser with user/pwd and WebAuthn, for example with a NFC or USB key. No OTP or SMS or apps on the smartphone or physical devices required. (It goes without saying, no recovery… Continue reading Why don’t online banks use WebAuthn? [on hold]
The functionality is to hold a store credit amount. If the credit can be set to 50, and from the chip itself this value can only be decreased, there is no chance for hackers to increase this value again.
Are there any NFC ch… Continue reading NFC Chip with countdown pin
I have done research on how to authenticate NFC tags. Seeing how you can use digital signatures, or a hidden key on newer NFC tags, it seems safe. However none of it would prevent a Man in the Middle attack where a device can… Continue reading Can a Man in the Middle attack on NFC be prevented by programming when working with NFC?
I’m not able to set up keepass2android with otp.
Facts:
Yubikey 5 NFC (FW 5.1.2);
Keepass2Android 1.07-r1;
Keepass 2.42.1 (Windows);
Yubikey Personalization Tool 3.1.25;
Android 8.0
I’ve create the database with Keepass on… Continue reading Keepass2Android with OTP not working
This is your Shared Security Weekly Blaze for August 12th 2019 with your host, Tom Eston. In this week’s episode: My summary of last week’s BSides Las Vegas security conference, how a single text message to your iPhone could get you hacked,… Continue reading BSides Las Vegas, iMessage Exploit, 5G and Stingray Surveillance