Collaborate Disseminate
Researchers use malicious NFC tags and booby-trapped physical surfaces to connect Android devices to malicious wireless networks. Continue reading Tap ‘n Ghost Attack Creatively Targets Android Devices
NFC locks are reaching a tipping point where the technology is so inexpensive that it makes sense to use it in projects where it would have been impractical months ago. Not that practicality has any place among these pages. IKEA carries a cabinet lock for $20USD and does not need …read more
Are there any NDEF message smuggling attacks (like http smuggling attack)?
When I say it, I mean that I have a full control on the NFC packet. Is it possible to inject another packet into a NFC payload or something.
My Google Titan security key has both USB and NFC interfaces, and I’m able to use it via NFC on my Android phone. However, my laptop also has an NFC reader, and it doesn’t seem to work out of the box. The laptop makes NFC noi… Continue reading Is there any way to use my Titan security key via NFC on my laptop, instead of USB? [migrated]
We use EMV card readers to automate the payments at the entry and exit to our services. These card readers and the unattended payment terminals are fully PTS complaint and use P2PE encryption. Also, implemented by PCI-DSS com… Continue reading PCI-DSS scope: Using P2PE Compliant devices
Fraud investigators say they’ve uncovered a sophisticated new breed of credit card skimmers being installed at gas pumps that is capable of relaying stolen card data via mobile text message, thereby enabling fraudsters to collect it from anywhere in the world. One interesting component of this criminal innovation is a small cellphone and Bluetooth-enabled device hidden inside the contactless payment terminal of the pump, which appears to act as a Bluetooth hub that wirelessly gathers card data from multiple compromised pumps at a given filling station. Continue reading New Breed of Fuel Pump Skimmer Uses SMS and Bluetooth
I’ve been trying to experiment with cloning NFC cards as part of an experiment. I’ve successfully got to the point where I’ve got a dump of both cards (done with Mifare Classic Tool).
After the ‘write’ to the clone card, the… Continue reading Cloning NFC card failed – dump looks identical
Near-field communication (NFC) is a set of protocols that enables two electronic devices to establish communication by bringing them very close together. Usually the devices must be within less than 4cm. Contactless payment systems use NFC devices, inc… Continue reading NFCdrip: Data Exfiltration Research in Near Field Communication
What are the best ways for NFC encryption with high level of security? Basically, I am interested to have a NFC which can only be read/authenticated with a mobile app/reader. In other words, the NFC must be encrypted in a way… Continue reading What is the most secure NFC Encryption system?
You are standing in front of a building with 3 rooms and have a NXP Mifare Classic 1k card.
In the first room is a device (device1) that can do the following things:
Shows how much money is on the card.
Increase the value… Continue reading Security of RFID/NFC card Payment [on hold]