Posts Tagged ‘RFID blockers’

David Beckham - victim of RFID hacking and car jacking!

Going, going, gone – RFID car-jacking!

It’s the stuff of movies. A criminal gang that sets out to steal hundreds of cars, each in under 60 seconds, using the latest in high-tech gadgets to facilitate their heist.   But for David Beckham, Hollywood fiction became a reality when in April 2006 criminals used a simple laptop and RFID scanner to crack the electronic door locks of his BMW X5. Once the locks were cracked they then fired up the ignition and drove away – gone in just 15 minutes!

So how was this possible? After all the RFID industry has gone to considerable lengths to reassure us that ‘contactless’ chips and ‘smart keys’ are 100% secure, and not vulnerable to ‘skimming’.

John Holl, a journalist with Forbes Autos throws some light on the matter saying,

“…Back in 2004, when keyless technology was still new and touted as unbreakable and secure, Dr. Aviel D. Rubin, a professor of computer science at Johns Hopkins University, examined this possibility (with his students). Within three months they had successfully cracked the code embedded within the ignition keys of newer model cars, theoretically allowing them to steal the autos.”

“It was a trial-and-error process,”  Rubin said. “We wanted to see if it could be broken and found out that (surprisingly) it could!”

The technique requires a laptop, an RFID scanner and software capable of probing for encryption weaknesses. It only takes about 15 minutes for the software to explore millions of possible encryption answers, before finding the one that fits with the vehicle’s unique identity.  The thieves then submit an identical code to the vehicle, which allows them to ‘boost’ it.

15 minutes – it’s not long.  About the time it takes to park up, leave your vehicle and order at a restaurant, which seems to be what happened to the Beckhams.  And it just goes to show that no security system is 100% fool-proof, however peace of mind may soon arrive as British company RFID Protect hopes to manufacture RFID shielding sleeves that are specifically designed to protect a vehicle’s ‘smart key’ against unauthorised probing.

Original article at:

http://www.msnbc.msn.com/id/13507939/ns/business-autos/

NEWSFLASH: Update September 2012

This month sees AutoExpress reporting on a new twist to this story.  It transpires that BMW has at last accepted that there is an issue with its keyless entry systems on cars issued between 2007 and September 2011.  BBC’s Watchdog television programme highlighted a problem with certain models (specifically BMW X5 & X6) in June of this year, and since then a number of high profile cases have come to light.  One story in particular demonstrates the problem that BMW is now facing, because when London-based consultant Eric Gallina had his car stolen from outside his home he couldn’t understand how thieves had taken it.  Mr Gallina still had the two factory-issued master car keys in his possession, and there had been no evidence of vehicle break in (i.e. there was no broken window glass at the crime scene).

AutoExpress reported that Mr Gallina was told by police officers,

“…nine other BMWs with keyless entry had been stolen in the Notting Hill area within the past month and a half.”

Apologists for BMW have issued security guidance to owners of these models, although it is not clear whether an actual ‘fix’ for the problem is available at the time of writing.  According to AutoExpress BMW have issued the following advice,

“…[until the fix is available to all models], where ever possible park your car out of sight, in a locked garage, or under the cover of CCTV cameras.”

Easier said than done, and some will wonder whether this guidance from BMW has really been thought through, or goes far enough to address such a serious security flaw?

Original article at: http://www.autoexpress.co.uk/bmw/60264/bmw-owners-offered-fix-hi-tech-theft

Advertisements

http://www.skipassdefender.co.ukAs you travel to a resort which incorporates RFID in their lift passes, you may not know what information is stored on the RFID chip in your pass or how it is encrypted, nor what type of back office safety systems the resort has in place.

Already there are many instances of ski-passes (using contactless technology) being hacked, cloned and decrypted.  Aspen Ski Company integrated RFID technology into ski season passes in 2008-09.  Industry insiders have suggested that their RFID program will soon extend its reach so that ski passes can be used as credit / debit cards (i.e. store cards)  in any of its retail shops and restaurants.  The expanded use of RFID technologies, will no doubt assist Aspen Ski Company to profile its customers.

But what’s the option for those of us who want to ski the slopes, but not have our every movement – or transaction – tracked, hacked or profiled?

Companies like ID Stronghold in the States – the main supplier / wholesaler for SkiPass Defender – are well worth a visit.  Here in the UK, you might consider trying RFID Protect – particularly should you need a swift turnaround, excellent sales support and aftercare.

RFID Protect can supply 13.56MHz RFID enabled ID card / ski-pass holder designed to protect RFID enabled ID and door entry cards from being skimmed.  (To allow the card to be read you simply press the top of the holder to release the spring mechanism, which temporarily moves the card away from its protective shield.)