RFID chip hacking presentation pulled from conference under threat of lawsuit
Well this has to be Hot News...
RFID chip hacking presentation pulled from conference under threat of lawsuit
Last week, at the Black Hat Federal security conference, Chris Paget of IOActive was scheduled to present an ironically titled presentation “RFID for Beginners”. In this presentation, according to the abstract and interviews with Chris, he was going to present how to build a working RFID clone from $20 worth of off-the-shelf electronic parts, mostly from eBay. The maker of the target chip is HID, who threatened lawsuits and otherwise made it ugly and consequently IOActive decided to cancel the presentation, citing the difficulty of bringing these difficulties to a small company.
The chip “hack” he was going to speak about would have allowed for the surreptitious, non-secure reading of the HID chip. HID’s comments include one about protecting against a “major upheaval”among customers. A representative also said someone would have to get “within 2-3 inches and get into the same plane as the card.” Well, if they’re saying it’s not practical, why did they threaten lawsuits about the presentation?
However you look at it, the situation highlights security concerns dogging RFID progress.
Anyway, what do you think? Is the repackaging and sharing of one’s own research public domain? Or is it irresponsible to demonstrate the security vulnerabilities of a supposedly secure market product?
Battle brewing over RFID chip-hacking demo
Published 16:13:17 06.03.2007
Secure card maker HID is objecting to a demonstration of a hacking tool at this week's Black Hat Federal security conference in Washington, D.C. that could make it easy to clone a wide range of so-called "proximity" door access cards.
HID has sent a letter to IOActive, a security consulting firm, accusing Chris Paget, IOActive's director of research and development, of possible patent infringement over a planned presentation, "RFID for beginners," on Wednesday, a move that could lead to legal action should the talk go forward, according to Jeff Moss, founder and director of Black Hat. IOActive will hold a press conference Tuesday at 9:00AM to discuss the issue, according to Joshua Pennell, IOActive's CEO told InfoWorld. More info can be found at :
Source
h**p://www.networkworld.com/news/2007/022707-battle-brewing-over-rfid-chip-hacking.html
WEll the demo at Black Hat has been pulled... OOOOOOOOOO ERRRRRRRRR
Pictures of RFID implants?
h**p://www.technorati.com/tag/RFID
Reply With Quote
Re: RFID chip hacking presentation pulled from conference under threat of lawsuit
Social Networking Bookmarks