<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Angels of security &#187; rfid</title>
	<atom:link href="http://angelsofsecurity.com/blog/tag/rfid/feed/" rel="self" type="application/rss+xml" />
	<link>http://angelsofsecurity.com/blog</link>
	<description>Musings of an infosec renegade</description>
	<lastBuildDate>Tue, 02 Aug 2011 19:01:53 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
		<item>
		<title>Stop the presses!</title>
		<link>http://angelsofsecurity.com/blog/2008/07/13/stop-the-presses/</link>
		<comments>http://angelsofsecurity.com/blog/2008/07/13/stop-the-presses/#comments</comments>
		<pubDate>Sun, 13 Jul 2008 21:00:41 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[compliance, investigations, regulations, and legal]]></category>
		<category><![CDATA[free speech]]></category>
		<category><![CDATA[legal]]></category>
		<category><![CDATA[rfid]]></category>

		<guid isPermaLink="false">http://angelsofsecurity.com/blog/2008/07/13/stop-the-presses/</guid>
		<description><![CDATA[In general, when people try to use the legal system to prevent free speech, they fail.]]></description>
			<content:encoded><![CDATA[<p>In general, when people try to <a href="http://news.zdnet.co.uk/security/0,1000000189,39444421,00.htm?r=2">use the legal system to prevent free speech</a>, they <a href="http://www.cs.cmu.edu/~dst/DeCSS/Gallery/">fail</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://angelsofsecurity.com/blog/2008/07/13/stop-the-presses/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>MiFare RFID cracked</title>
		<link>http://angelsofsecurity.com/blog/2008/06/25/mifare-rfid-cracked/</link>
		<comments>http://angelsofsecurity.com/blog/2008/06/25/mifare-rfid-cracked/#comments</comments>
		<pubDate>Wed, 25 Jun 2008 16:00:41 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Access Control Systems & Methodology]]></category>
		<category><![CDATA[rfid]]></category>

		<guid isPermaLink="false">http://angelsofsecurity.com/blog/2008/06/25/mifare-rfid-cracked/</guid>
		<description><![CDATA[I really pity the people who have to design RFID security systems. I don&#8217;t mean that condescendingly at all, I really do. They have a system which had no native power source, and has to cost about a dime, and they have to somehow build strong authentication into it. They have to design complex circuitry [...]]]></description>
			<content:encoded><![CDATA[<p>I really pity the people who have to design RFID security systems. I don&#8217;t mean that condescendingly at all, I really do. They have a system which had no native power source, and has to cost about a dime, and they have to somehow build strong authentication into it. They have to design complex circuitry for minimal cost that runs on almost no power. With that in mind, it&#8217;s no wonder there are so many examples of people cracking RFID systems. <a href="http://www.theregister.co.uk/2008/06/23/dutch_clone_oyster_card/print.html">This </a>is just the newest case.</p>
<blockquote><p>Researchers of Radboud University in Nijmegen in the Netherlands managed to crack and clone London&#8217;s Oyster travel card. They were able to take free rides on the Underground and even perpetrated a DDoS attack on a Tube gate.</p></blockquote>
]]></content:encoded>
			<wfw:commentRss>http://angelsofsecurity.com/blog/2008/06/25/mifare-rfid-cracked/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>In the beginning</title>
		<link>http://angelsofsecurity.com/blog/2008/03/31/in-the-beginning/</link>
		<comments>http://angelsofsecurity.com/blog/2008/03/31/in-the-beginning/#comments</comments>
		<pubDate>Tue, 01 Apr 2008 02:48:54 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[physical]]></category>
		<category><![CDATA[baby theft]]></category>
		<category><![CDATA[humans]]></category>
		<category><![CDATA[rfid]]></category>

		<guid isPermaLink="false">http://angelsofsecurity.com/blog/2008/03/31/in-the-beginning/</guid>
		<description><![CDATA[I&#8217;ve been stalling on kicking off this blog (or re-kicking it off) for a few weeks because I couldn&#8217;t decide what topic (and there are several) was the one I wanted to start this blog with. I finally decided that I should start in the same place we all started &#8211; as newborn babies. My [...]]]></description>
			<content:encoded><![CDATA[<p>I&#8217;ve been stalling on kicking off this blog (or re-kicking it off) for a few weeks because I couldn&#8217;t decide what topic (and there are several) was the one I wanted to start this blog with. I finally decided that I should start in the same place we all started &#8211; as newborn babies.</p>
<p>My wife and I welcomed our first child into the world a few weeks ago. During our hospital stay, we were informed that each baby was equipped with an electronic device which would set off an alarm should the baby be removed from the postpartum floor. If that happened this entire wing of the hospital would be shut down (doors locked, elevators halted), and security would arrive. We were warned about this mostly in the context of a warning not to accidentally wander outside the confines of the postpartum  floor, however I wanted to know more. I was informed that they did test the security regularly with drills (imagine that!) and that yes, there was a reason for all this. I of course wanted to test their security myself, but my wife, a woman whose common sense far outstrips my own, prevented me from doing so. (In retrospect, this was probably for the better). I also noted that a small electronic device which looked an awful lot like an RFID device was attached to the baby&#8217;s umbilical stump. (Probably smart, because bracelets and ankle bracelets can always be cut or otherwise removed. The umbilical stump cannot be removed without considerably more work).</p>
<p>More research reveals that my experience was not unique, and that the security is not based on fabricated fears.  The national center for missing and exploited children reports that there have been <a href="http://www.missingkids.com/missingkids/servlet/NewsEventServlet?LanguageCountry=en_US&amp;PageId=3088">248 infant abductions in the past 25 years</a>, and 121 of them have been from hospitals. While this seems like an extremely low number, (and a surprisingly large number of them are recovered, <a href="http://www.missingkids.com/en_US/documents/InfantAbductionStats.pdf">even before the advent of this technology</a>), I have a feeling that hospitals have found this to be relatively inexpensive given that they probably have most of their infrastructure in place, and the potential loss is incalculable. (Until the lawyers show up that is).</p>
<p>As for the technology, there are evidently <a href="http://www.orlandosentinel.com/news/specials/orl-stolenbaby2908mar29,0,6376783.story?page=2">two types</a>:</p>
<blockquote><p>The first is an anti-theft device similar to what clothing stores use. The second, more reliable choice is a radio-frequency transmitter that sends a continuous stream of information to a computer at a nurses station. Once that is removed or cut, an alarm sounds.</p></blockquote>
<p>(You can bet I like the later system better).</p>
<p>This is apparently also being deployed <a href="http://iafrica.com/news/worldnews/293263.htm">overseas</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://angelsofsecurity.com/blog/2008/03/31/in-the-beginning/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

