scm
Cost-Performance trade off and the nightmare of RFID hackers
Filed in archive Technology by ehsan on March 21, 2006
Cost-Performance trade off and the nightmare of RFID hackers
Most RFID chips remain easy to break by hackers specially in places like supermarkets. One reason: the cheapest and most popular RFID chips don't have a battery; instead, they're powered by the reader when scanned. That limits the amount of encryption that can be placed on a chip.

Here is a Nightmare described by a Business Week author:

A hacker goes into a store, buys a can of soup with an electronic tracking tag glued to the side, and takes it home. There, he attaches a different tag, this one with malicious code. He goes back to the store and lets the item get scanned anew at the cash register. This time, the code jumps from the tag onto the store's computer system, changes product prices and skews sales data, and creates an entrée for an outsider to gain access to the store's internal databases.

So what to do?

To be sure, new chips used for potentially high-value financial transactions have more safeguards. They can be adjusted so that they can be read only from a very short distance of a few inches, for example. That would prevent hackers from reading cards as shoppers pass through a nearby checkout line. They also contain more encryption. (They're also more expensive, at $4 or more per tag, compared with about 20 cents for your average RFID tag.)

So the question still remains: what to do? There is no way to spend 4$ per tag for companies like Wal Mart. One possible answer is to categorize tag applications throughout the company and use high performance tags for the most risky areas. This solution is a bit more economical, at least.


Permalink: Cost-Performance trade off and the nightmare of RFID hackers
Tags: rfid  vulnerability 
Trackback: http://publish.creative-weblogging.com/publish/mt-tb.pl/18575
img Addthis img Ask img Blinklist img del.icio.us img Digg img Fark img Facebook img Google img Lycos img Ma.gnolia Add this page to Mister Wong Mr Wong img Netscape img Netvousz img Newsvine img Reddit img StumbleUpon img Slashdot img Tailrank img Technorati img Wink img Yahoo

Vote for Cost-Performance trade off and the nightmare of RFID hackers:

  • Currently 8.00/10
  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
Rating: 8.00 out of 1 vote(s) cast.
Subscribe
Share It
RSSrss
See all blog subscribe options
Google google
What is RSS?
Yahoo! yahoo
Addthis Subscribe using any feed reader!
Bloglines Bloglines
Newsletter

TwitterFollow us on Twitter!