RE: RFID Tags

[James Hester <jay.hester () mci com>]

Tim,
        That depends on what tag you are going to use. The Class I tag has 96 bits
of memory that can be programmed. There are some types of tags that have the
ability to password protect the memory, but when you do things like that it
drives the price up. The tags can be written, but I doubt you will be able
to pull the original data off once it's erased since it's stored on the
tag's chip.

Jay

-----Original Message-----
From: Timothy Marshall [mailto:tim () labmonkey me uk]
Sent: Monday, May 10, 2004 6:05 AM
To: pen-test () securityfocus com
Subject: RFID Tags


Hi,

Does anyone have information / experience on how secure these tags are? Can
the data they store be changed in anyway? Can they be copied / faked? If
they are changed can the original information still be read?

Cheers

Tim



----------------------------------------------------------------------------
--
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off
any course! All of our class sizes are guaranteed to be 10 students or less
to facilitate one-on-one interaction with one of our expert instructors.
Attend a course taught by an expert instructor with years of in-the-field
pen testing experience in our state of the art hacking lab. Master the
skills
of an Ethical Hacker to better assess the security of your organization.
Visit us at:
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------
---



------------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off
any course! All of our class sizes are guaranteed to be 10 students or less
to facilitate one-on-one interaction with one of our expert instructors.
Attend a course taught by an expert instructor with years of in-the-field
pen testing experience in our state of the art hacking lab. Master the skills
of an Ethical Hacker to better assess the security of your organization.
Visit us at:
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
-------------------------------------------------------------------------------