Re: VeriChip hack? (Sorry if this posts twice)

["Josh L. Perrymon" <joshuaperrymon () gmail com>]

Exactly,

The RFID push is coming faster than security can be implemented or
tested. The verisign chips authenticate using a unique UID burned by
the manuf. . Same theory as basic perimeter access control used in
most proximity access control applications. You have an RFID card with
a UID burned in. It's passive and transmits the UID once it's within
the magnetic field ( powered ).

The basic cards do not use encryption ( most Prominity RFID, animal
tags, verisign chips ) so it's a simple session-replay attack. We can
do this with something like RFID dump without the need for a spectrum
analyzer becuase we know what freq. they will use.. Not to mention
this will be MUCH easier once everyone is GEN2.

So to me.. Verisigns mention of security in these chips are a joke.
It's trivial to bypass. This can be better protected with Encryption
and will be done in the next release I'm sure. So then we will analyze
the crypto and attacks the algorithm or the keys depending on how this
is done.

Ideas..

I didn't see anyone mention the fact that you could destroy these
imiplants with a EMP attack ( RFID ZAPPER ) .. how would this affect
the human with the implant.. if this chip resonates to the point of
exploision then surely it will contaminate the human body??

J. Perrymon
Packetfocus.com


On 7/28/06, Jared DeMott <demottja () msu edu> wrote:
> dan () geer org wrote:
>
> > Jared DeMott writes:
> > -+------------------
> > |
> > | Is anyone else just a little wary of "implantable microchips"?
> > | I'm into technology and all, but that smells funny...
> > |
> >
> > For your information, the "implantable microchips" will
> > be in huge production soon.  By next summer, US Govt is
> What's the reason we (US citizens) desire this?  I can only assume our
> elected officials are acting in our best interest?
> I also have relatives that farm on a small scale -- one of my uncles has
> already sold his farm because of this.
>
> > requiring all livestock of any sort to have them and much
> > more stuff that I find irrelevant and offensive.  I farm on
> > a small scale on the side and this is murder on small
> > farm economics but the privacy, etc., implications are,
> > in my not so humble opinion, worse.
> >
> > official version
> >  http://animalid.aphis.usda.gov/nais/index.shtml
> >
> > more like my view
> >  http://www.libertyark.net
> >
> > --dan
>
> _______________________________________________
> Dailydave mailing list
> Dailydave () lists immunitysec com
> http://lists.immunitysec.com/mailman/listinfo/dailydave
_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave