...stuff I do and things I like...

I just received an email with a free sample of Smart Insights (some smart card news letter) with a story on my attacks on nfc phones. The funny part is a small box (only in the PDF version) next to the article stating Attacks are proof of success for NFC technology. This is hilarious! Please send me more stuff like this :-)

Over the last week several articles have discussed my presentation on NFC attacks. These four are quite good, have fun.

Hackers start poking holes in NFC The Register

Security.nl

Zero Day blog ZDNet Attacks on NFC mobile phones demonstrated

Digital Identity Forum: NFC, privacy and identity infrastructure a blog post.

on my way home from ph-neutral I had the chance to take a brief look at the Touch-and-Travel NFC tags. Using my BtNfcAdapter on my Nokia 6131 NFC I took a copy of the tag data home with me, you can get it here (you need bahn.py to read it).

It turns out that the tag actually doesn't contain any data besides showing a custom type record. TNF: 4 and Type: db.de:tandt. It only took me a couple of seconds :-) to realize that the custom type is only used to launch the touch-and-travel application on the phone. The touch-and-travel tags are NOT just simple Mifare Classic tags but some other ISO14443 card so I guess there is more data stored on the card and you just need to know how to read it :-)

I'm really looking forward to the day this system is being opened to the public. Until then this is as good as it gets.

Touch-and-Travel
Touch blog about Touch-and-Travel

some fotos of NFC tags I made. Also check the fotos made by geri-m.