Say pampili na dugan frequency parad RFID Keyfobs

Say pampili na dugan frequency parad RFID Keyfobs

 

Nen Marso 2024, sakey a grupo na saray managsukimat ed seguridad so angipelag na bomba ed industriya na hotel. Si Lennert Wouters manlapud KU Leuven tan Ian Carroll so angipalapag na tatawagen dan Unsaflok-sakey a kadena na saray vulnerabilities ed saray kandado na Dormakaba Saflok ya mangiiter ed sikara na pankanawnawan mangilukas na antokaman a puerta ed sakey a hotel ya walay duaran palson keycard. Masulok ya 3 milyon ya lock. 131 bansa. 13,000 ya kayarian.

 

Say managsipa? Saraman ya kandado et inlako la manlapu nen 1988.

 

Say WIRED so nansakbong ed satan. Ontan met so ginawa na BleepingComputer, The Hacker News, tan SecurityWeek. Nansagpot so Dormakaba pian na-patch iray sistema, balet nen Marso 2024 ya impaamta ra, 36% labat na saray apektadon kandado so naapiger. Saray arum et wala ni ed paway.

 

Antoy nanggawa ed panangataki? Saray kandado et angusar na MIFARE Classic chips ya manguusar na Crypto-1 encryption-sakey a sistema ya ipapasakbay na saray cryptographers ed loob na masulok ya sakey dekada. In-crack itan na saray researcher panamegley na Flipper Zero. Presyo na kagawaan: pigaran lasus a dolyar.

 

Saya so kabaliksan na frequency selection parad access control.

 

 

Say 125 kHz ya situasyon

 

Nia so agmakapaliket a parte.

 

Say Low-frequency RFID ed 125 kHz so sankadaanan ya teknolohiya ya anggad natan et malaknab ya uusaren. EM4100, TK4100, HID ProxCard-ngaran ya ompatnag ed saray spec sheet ed inerman a pasen manlapud saray apartment building anggad saray campus na korporasyon.

 

Sakey so gagawaen na sarayan chips: mangipapasabi na pihon numero no asingger ira ed sakey a manbabasa. Anggapoy pankakasakey na lima. Anggapoy angat-ebat. Anggapoy encryption.

 

Say ICT, sakey a kompanyan mankontrol na access ed New Zealand, so angi-post na demonstrasyon nen 2023 ya ipapanengneng na grupo ra ya makapan-clone na 125 kHz card ed loob na limaran segundo ya uusaren so $30 ya device. Si Kisi, sakey nin managlako na seguridad, so angipalapag na dokumentasyon ya mangipapanengneng ya sarag na Flipper Zero ya kopyaen iray kredensyal panamegley na saray pitaka tan bulsa ed loob na sakey segundo. Say TikTok et napno na saray video. Aliwan teorya iya.

 

Kanian akin et wala ni so mangiiter na 125 kHz? Maslak et daan lan imprastraktura. Say sakey a bilding ya walay 500 ya manbabasa tan 10,000 ya kredensyal et agto sarag ya deralen so amin ed loob na sanlabi. Say presyo met na karaklan na EM4100 keyfobs et nayarin onabot ed $0.15 kada yunit odino abeba ni. Parad sakey a gym odino sakey a panagsimpenan ya say modelo na peligro et "nayarin walay onlusob," makatunongan itan ya matematika.

 

Parad antokaman ya walay aktual ya kakaukolanen ed seguridad, andi.

 

Say 13.56 MHz et aliwan automatikon kaligenan

 

Say inkagawa na Unsaflok so mangipapanengneng no akin ya say "upgrade to high frequency" et aliwan kompleton ebat.

 

Say MIFARE Classic et manpapaandar ed 13.56 MHz diad silong na ISO 14443. Walay encryption to. Walay authentication to. Tan na-crack itan anggan panon, lapud say Crypto-1 et kayarian tan makapuy. Saray researcher ya nan-break ed saray kandado nen Dormakaba et anggapoy adiskobre dan balon vulnerability-inaprobetsaan da so sakey ya amta na security community manlapu nen 2008.

Say pattern dia: 13.56 MHz so mangiter ed sika na imprastraktura pian nagawaan so suston encryption, balet say chip ed loob et mas importante nen say frequency ya akaimprinta ed label.

 

Say MIFARE DESFire ya walay AES-128 et mansiansian ligtas sumpad saray kabkabat ya panangataki. NTAG series chips parad mas simplin aplikasyon. Saraya so nansiansia. Say MIFARE Classic et anggapo.

 

 

Basaen so distansya tan pakaabalaan

 

No maminsan et tetepetan na totoo no kasin say 13.56 MHz keyfobs et onkikiwas ed kawes a singa met ed 125 kHz.

 

Antikey ya ebat: on. Parehon manguusar na inductive coupling iray frequency ed kaslakan ya distansya na access control. Say kaarawi et manga 1-10 cm parad maslak ya keyfob form factors. Saray metal ya asingger ed -telepono, tombok, belt buckle-so nayarin mamatunda ed antenna tan kaukolan so komaduan pan-tap. Anggapoy dramatiko.

 

Say UHF ed 860-960 MHz et duman pisika. Electromagnetic backscatter imbes ya inductive coupling. Manbasa na pigaran metro. Mausar parad saray parking gate odino imbentaryo na bodega, problema parad access ed puerta ya labay mon na-authenticate so credential no labay labat na user.

 

Say panangiter na frequency ed rehyon et mangibibiig met ed saray UHF band ya mandumaan ed baetan na North America tan Europe, ya mamapairap ed saray internasyonal ya deployment.

 

Say iyalis ya anggapoy gulo

 

Saray dual-frequency keyfobs et wala parad saray phased transitions. Say sakey a abung et walaan na 125 kHz tan 13.56 MHz ya chips. Saray legacy readers et nanengneng da so sakey, saray upgraded readers et nanengneng da so sananey. Saray kredensyal et mansiansia ed saray manguusar legan na pansasalat.

 

Say limitasyon et say desinyo na antenna. Parehon kaukolan ya nabasa na duaran chip ya anggapoy makaamper. Aliwan amin ya pabrika na keyfob et makagawa ed saya. I-verify so performance antis ya man-commit na volume orders.

 

Say mismon tepet

 

Say pampili na frequency et sakey a proxy parad sananey a desisyon: panon karakel so pibabali yo no walay mankopya na kredensyal?

 

• 125 kHz et anggapoy depensa to. Siopaman ya walay $30 tan samploran minuton pan-YouTube et nayarin man-clone na keyfob.
• 13.56 MHz ya walay MIFARE Classic et singa ligtas balet aliwan ontan. Saray hotel et siansia nin mangaarap ed inkagba.
• 13.56 MHz ya walay DESFire odino mipara ed satan et mansiansia natan.

- Saray managsukimat na Unsaflok

 

Talomplo tan anem a taon na mainomay ya naderal iran kandado. Saya so gastos ed pakawalaan na lingo ed panagpili na frequency tan chip.