News for hackers. Stuff that matters.

A comment on Hacker Implants NFC Chip in His Hand to Bypass Security Scans and Exploit Android.

Re:Hacker Implants NFC Chip in His Hand to Bypass Security S... by _ikke_ on Wednesday April 29, 2015 @05:26AM (#9457174)
NFC in Android is not active while the device is locked [0]

> Android-powered devices are usually looking for NFC tags when the screen is unlocked, unless NFC is disabled in the device's Settings menu.

So to use this, the hacker already needs an unlocked device, in which case it's just as easy to download the payload directly.

Usually, the range for NFC to work is quite close, 4 cm or less [1], and I don't think these chips have the capability to increase the range.

[0]: http://developer.android.com/guide/topics/connectivity/nfc/n...

[1]: https://developer.android.com/guide/topics/connectivity/nfc/...

[ Parent | on HN ]
Re:Hacker Implants NFC Chip in His Hand to Bypass Security S... by ge0rg on Wednesday April 29, 2015 @05:37AM (#9457201)
You are right. The exploit is further complicated by the fact that Android will refuse to install apps outside of Google Play by default.

The same effect could probably be reached with an NFC tag in a ring or hidden in your wear, without the pain.

[ Parent | on HN ]
Re:Hacker Implants NFC Chip in His Hand to Bypass Security S... by jackweirdy on Wednesday April 29, 2015 @07:04AM (#9457433)
Or an actual NFC ring (probably disguised a bit) http://nfcring.com/
[ Parent | on HN ]
Re:Hacker Implants NFC Chip in His Hand to Bypass Security S... by flintchip on Wednesday April 29, 2015 @05:35AM (#9457198)
"Just as easily" is not the same as "surreptitiously".
[ Parent | on HN ]
Re:Hacker Implants NFC Chip in His Hand to Bypass Security S... by _ikke_ on Wednesday April 29, 2015 @05:38AM (#9457204)
Not withstanding exploits, the user still has to accept the offered link, so it's not really stealthy in that case.
[ Parent | on HN ]
Re:Hacker Implants NFC Chip in His Hand to Bypass Security S... by sschueller on Wednesday April 29, 2015 @05:40AM (#9457210)
I am able to pay with NFC on my note 3 without waking up the phone or unlocking it. [0]

[0] https://www.tapit.ch/en

[ Parent | on HN ]
Re:Hacker Implants NFC Chip in His Hand to Bypass Security S... by rstuder on Wednesday April 29, 2015 @07:20AM (#9457480)
In the case of Tapit NFC does not communicate with the OS or the apps of the phone. NFCcommunicates directly with the SIM card and the applets installed on there. You can actually have your phone turned off and Tapit will still work. (Source: I support the Tapit team)
[ Parent | on HN ]
Re:Hacker Implants NFC Chip in His Hand to Bypass Security S... by mike-cardwell on Wednesday April 29, 2015 @06:07AM (#9457273)
I can unlock my OnePlus One using my NFC ring. The screen has to be turned on first though.
[ Parent | on HN ]