Re:Backdoor discovered in several brands of RFID cards [pdf]
by jeffbee on Friday August 16, 2024 @03:37PM
(#41269609)
Sorry if I was being unclear with my compound snark, but using a MIFARE Classic of any provenance would be a firing offense for the CISO of my daydream company.
[ Parent
| on HN ]
Re:Backdoor discovered in several brands of RFID cards [pdf]
by dave_universetf on Friday August 16, 2024 @03:47PM
(#41269702)
Indeed. Alas (or fortunately depending which colour team you work on), fully broken Mifare Classic is still all over the place, and likewise the "hardened" variant broken in this paper :(
Re:Backdoor discovered in several brands of RFID cards [pdf]
by nine_k on Friday August 16, 2024 @03:45PM
(#41269685)
What's a good alternative? How more expensive is it?
Re:Backdoor discovered in several brands of RFID cards [pdf]
by Aiolo on Friday August 16, 2024 @05:16PM
(#41270486)
MIFARE DESFire is an option. In a genral public reseller, I found 100 DESFire cards sold for 146€ (tax excluded), while 100 of the equivalent versions as MIFARE Classic are sold for 109€ (tax excluded). This is a differnce of 37 cents by card, MIFARE Classic are about 25% less expensive than MIFARE DESFire. I guess the difference increase with the quantity you buy at once.