Hacker tries to read a radio identification tag from 29 floors up (video)

Radio frequency identification (RFID) tags are becoming pervasive as the barcodes of the 21st century. They are being used in everything from Wal-Mart merchandise to U.S. passport cards.

But the problem, as demonstrated by hacker Chris Paget at the Defcon security conference today, is that they have no security and can be read from a great distance. Paget has already shown he can read a tag from 217 feet. (See our roundup of all Black Hat and Defcon stories).

Paget tried to break the world record for long-distance reading of an RFID tag today on the 29th floor of the Riviera Hotel in Las Vegas, or more than 1,000 feet from a tag. He showed that his reading system and two large antennae could detect tags belonging to someone on the ground parking lot of the hotel (the little guy in black on the right), but his equipment couldn’t read the serial numbers on the tags because he didn’t quite have a powerful enough amplifier. The Las Vegas heat may have brought his experiment down, he said. He’s going to work on it and try again. But his point was a good one.

“These are pervasive technologies, but they absolutely should not be used in identification cards,” Paget (right and top) said during the live demonstration.

He used a Ham radio license to establish a legal wireless connection for his experiment. He used his contraption to read an EPCglobal generation 2 tag, which has been widely adopted by industry. Paget calls himself an “ethical hacker” and said he simply wanted to demonstrate that RFID tags are not safe for storing private information.

It took Paget several tries to be able to detect the RFID tags (pictured), as he had to increase the power of the antennae in each attempt.

Both industry and government officials say the RFID tags are more efficient and useful than barcodes. But since they carry serial numbers that (unless used in high-cost tags) have no encryption, they can be read by anybody. If, for instance, you bought a bunch of RFID-tagged groceries at the store, somebody with a reader could find out what you bought, from a distance. Most tags can be read from a few inches to a few feet away. But Paget says the new EPCglobal generation 2 tags are radar-like and can be read with radar technology, which has a longer range.

Next Story:
Previous Story:

Tags:

Photo of Dean Takahashi

About the Author,

Dean is lead writer for GamesBeat at VentureBeat. He covers video games, security, chips and a variety of other subjects. Dean previously worked at the San Jose Mercury News, the Wall Street Journal, the Red Herring, the Los Angeles Times, the Orange County Register and the Dallas Times Herald. He is the author of two books, Opening the Xbox and the Xbox 360 Uncloaked. Follow him on Twitter at @deantak, and follow VentureBeat on Twitter at @venturebeat.

  • http://pulse.yahoo.com/_NZHBLP4FIKHIQQIKM3JHN53M5M MarkN

    A bunch of ham equipment and line of sight doesn't compromise security. Most passive RFID tags use by businesses do not contain personal information but a serial number which ties back to a protected database. I am not sure what good a serial number would do someone without the cooresponding data.

  • http://www.marblecleaningmiami.com Marble Clean West Palm Beach

    Good article!

  • http://www.colonialstoneandfloorcare.com Marble Polishing

    Paget calls himself an “ethical hacker”

  • http://thetruthaboutguns.com/2011/07/ryan-finn/mks-disses-gun-rights-supporters-confirms-chiappa-rifd-chip/ MKS Disses Gun Rights Supporters, Confirms Chiappa RIFD Chip | The Truth About Guns

    [...] bullshit. As The Firearm Blog points out, a hacker at the DEFCON security conference in Las Vegas was able to boost the signal of his RIFD reader and read a RFID chip on someone 217 [...]

  • http://therightofthepeople.org/chiappa-adding-rfid-chips-to-their-guns-mks-suggests-concerned-consumers-%e2%80%9cwrap-the-revolver-and-their-head-in-aluminum-foil%e2%80%9d.html Chiappa adding RFID Chips to their guns. MKS suggests concerned consumers “wrap the revolver and their head in aluminum foil”

    [...] RFID systems is always popular at the big hacker conventions. Last year a hacker at DEFCON was able to detect if an individual standing on the ground floor parking lot of the Las Vegas Riviera Hotel was carrying a certain [...]

  • http://guncounter.bob-owens.com/2011/07/how-to-fail-in-the-firearms-business/ How to fail in the firearms business – Bob's Gun Counter

    [...] only arrogant and dismissive, but wrong. Passive RFID can be read from hundreds of feet–or even as far as 1000 feet–not just 2-3 inches as they [...]

  • http://www.shootingillustrated.com/index.php/12972/rfid-in-firearms-debate-heats-up/ RFID in Firearms Debate Heats Up | Shooting Illustrated

    [...] he was on a mission of mercy, because although he was unable to read the RFID on her fridge during his experiment, he had reason to be there’s moldy cottage cheese on the bottom shelf that could get her [...]

  • http://pistol-training.com/archives/5055 pistol-training.com » Blog Archive » Chiappa vs. The Internet

    [...] Recently, there has been discussion across the ‘net about Chiappa Firearms‘s decision to use RFID (radio frequency identification) chips in the manufacture of its Rhino revolvers. While the use of such technology is nothing revolutionary, quite a few people have pointed out that fairly common technology can be used to locate (“ping”) an RFID chip. Heck, you can even buy a scanner from Amazon that goes in the Compact Flash slot of many mobile device. And hackers have proven that they can easily detect the small chips from hundreds of feet away. [...]

blog comments powered by Disqus