dymaxion ,
@dymaxion@infosec.exchange avatar

Police remote-scanning the NFC tags in your library book and cross-referencing them with your plate from the ANPR was not on my dystopia checklist. Time to go back to barcodes.

https://archive.is/bYszD

katzenberger ,
@katzenberger@social.tchncs.de avatar

@dymaxion Can somebody please mention the source for this?

archive.is is punishing VPN usage with extra-long loading times and a series of Google captchas.

dymaxion OP ,
@dymaxion@infosec.exchange avatar

@katzenberger
It's a paywalled Forbes article, hence sharing this instead

katzenberger ,
@katzenberger@social.tchncs.de avatar

@dymaxion Much appreciated, though it's annoying me right now.

dymaxion OP ,
@dymaxion@infosec.exchange avatar

@katzenberger
Totally understand!

soviut ,
@soviut@hachyderm.io avatar

@dymaxion Or stop driving cars. People actually prefer when public transit is tracked.

dymaxion OP ,
@dymaxion@infosec.exchange avatar

@soviut
People do not prefer when their individual journeys on public transit are tracked, they're just not given a choice.

soviut ,
@soviut@hachyderm.io avatar

@dymaxion I was referring to the fact that all transit vehicles are lojacked so you know when they're arriving.

dymaxion OP ,
@dymaxion@infosec.exchange avatar

@soviut
... And this doesn't remotely fix the issue of having cops track library books and reading habits

wikinaut ,
@wikinaut@berlin.social avatar

@dymaxion @soviut
Fahrenheit 451

soviut ,
@soviut@hachyderm.io avatar

@dymaxion I know, but it fixes the issue with cars and if anyone has been in league with over reaching law enforcement, it's the auto-industry who made crossing the street illegal and campaigned to call it "jay walking".

vees ,
@vees@epistolary.org avatar

@dymaxion Katherine Albrecht was trying to warn us all about this 20 years ago

farbenstau ,
@farbenstau@infosec.exchange avatar

@dymaxion When tinfoil is outlawed, only outlaws will have tinfoil!

cykonot ,
@cykonot@mas.to avatar

@dymaxion attack surface goes brrrr

dymaxion OP ,
@dymaxion@infosec.exchange avatar

@cykonot
Yes, and

tim_lavoie ,
@tim_lavoie@cosocial.ca avatar
mike805 ,

@dymaxion Never thought I'd have to microwave my library books.

I did have to microwave my shoes once. There was an alarm tag inside one of them and it kept setting off the alarms at stores.

fazalmajid ,
@fazalmajid@vivaldi.net avatar

@dymaxion ANPR not necessary. They can also scan your tyre pressure monitors, which are also wireless.

mikemccaffrey ,
@mikemccaffrey@pdx.social avatar

@dymaxion They don't even need to use your license plate, now that they are putting RFID tags in your government IDs as well.

glennf ,
@glennf@twit.social avatar

@mikemccaffrey @dymaxion My Nexus card comes with its own faraday envelope. Ditto, your US passport has wires in the cover. For others, possible to get a little envelope that blocks RFID, which requires very close connections.

I don't believe the company's RFID claim, though. It seemingly defies the inverse-square law.

wa7iut ,
@wa7iut@mastodon.radio avatar

@glennf @mikemccaffrey @dymaxion

there’s considerable hype in that company’s claims. It’s possible to scan for Bluetooth, WiFi, and Cell from the side of the road. NFC only is good for a few cm at most (by design). RFID passive tags like in clothes at stores are only readable for 10 ft or so at most, seems highly unlikely from the roadside too.

Naich ,
@Naich@fosstodon.org avatar

@wa7iut @glennf @mikemccaffrey @dymaxion
Animal RFID chips can only be read at a few cms at most. Anything further away is physically impossible given the tiny power output of the device.

dymaxion OP ,
@dymaxion@infosec.exchange avatar

@Naich
If you shove a hundred watts of amp on both your transmitter and receiver and use a pair of large, tightly-tuned high hain antennas, you'd be shocked at what's doable. Are they doing that? No clue. But I'm not going to rule it out.
@wa7iut @glennf @mikemccaffrey

Naich ,
@Naich@fosstodon.org avatar

@dymaxion @wa7iut @glennf @mikemccaffrey
The inverse square law applied to an output power measured in microwatts puts paid to any notion of doing that. The RFID tags use scavenged power to transmit and it has to go through the skin on the way out. The signal will be below the noise floor if you are more than 6 inches away.

dymaxion OP ,
@dymaxion@infosec.exchange avatar

@Naich
We did it. Not on animal tags, but on cards, from about 40m.
@wa7iut @glennf @mikemccaffrey

glennf ,
@glennf@twit.social avatar

@dymaxion @Naich @wa7iut @mikemccaffrey Library books in a moving vehicle is what seemed implausible. The fingerprinting also complicated but not impossible. I shouldn’t lose sight that the overall product brief is terrifying even if it’s not a reputable product. It will be sold and misused.

dymaxion OP ,
@dymaxion@infosec.exchange avatar

@glennf
Idk? Iirc, those are all just going to be dumb "energize it and it sends a response" tags, and read times are fast. Commercial reads can read a tag going by as fast as 180kmph. Because this is intended to be used in a vehicle on the road scanning opportunistically, read distances don't need to be much more than 10m, and may be as little as 2m. It doesn't seem that impossible.
@Naich @wa7iut @mikemccaffrey

glennf ,
@glennf@twit.social avatar

@dymaxion The hit rate doesn't have to be 100% (or even 25%) so whatever they get is incremental data.

dymaxion OP ,
@dymaxion@infosec.exchange avatar

@glennf
Exactly

glennf ,
@glennf@twit.social avatar

@dymaxion Now I need to create a project to generate fake RFID responses for various libraries that randomizes to prevent fingerprinting.

dymaxion OP , (edited )
@dymaxion@infosec.exchange avatar

@wa7iut
It's doable — we did 134khz card reads at 40m in the lab about twenty years ago with cheap kit. Huge antennas, though, and a lot of power. Can they scale it down, given 20 years of time? Idk, but I'm not gonna say it's impossible.
@glennf @mikemccaffrey

ge0rg ,
@ge0rg@chaos.social avatar

@dymaxion
Enough power to EMP kill every other kind of electronic device with a built in antenna? Can you send enough power to activate RFID over a relevant distance while at the same time listening for ISM band beacons? It's cool tech, but the physical limits are harsh as well.
@wa7iut @glennf @mikemccaffrey

dymaxion OP ,
@dymaxion@infosec.exchange avatar

@ge0rg
That was not the result when we did it.
@wa7iut @glennf @mikemccaffrey

grosminet ,
@grosminet@piaille.fr avatar

@dymaxion
@tdelmas

😱
Thx for sharing / Merci d'avoir partagé

Meow / Miaouh

FeralRobots ,
@FeralRobots@mastodon.social avatar

@dymaxion in about 2008 or so I wrote a scenario where a specially equipped police cruiser slowly works its way through a neighborhood firing UV laser scanners into every open window on everyone's house, looking for optical codes, as powerful transceivers looked for RFIDs.
It was really hard to write plots in that world. Most of the character breathing space was via bureaucratic incompetence - but once someone in the bureaucracy wanted you, they could find a way to get you.

godzero ,
@godzero@sfba.social avatar

@dymaxion
Don't worry, I'm sure this will never be abused. 🤔

earthy_ ,

@dymaxion now combine this with per item unique RFID tags embedded in clothing and shoes and the dystopia gets complete...

  • All
  • Subscribed
  • Moderated
  • Favorites
  • random
  • test
  • worldmews
  • mews
  • All magazines