Hacking RFID Billing Schemes for Fun and Free Rides - Marcio Almeida Macedo - Ekoparty Security Conference - 2014
Explore the world of RFID hacking in this conference talk from Ekoparty 2014. Dive into the vulnerabilities of MIFARE Classic contactless cards, widely used in access control systems and public transportation. Learn about the card's features, major attack types, and potential security measures. Witness a practical demonstration of dumping and cloning old SUBE cards still in use in Buenos Aires' subway and bus services. Gain insights into the CRYPTO-1 cipher, its weaknesses, and various attack methods including Nested and Curtois Dark-Side attacks. Discover the tools and techniques used in RFID hacking, such as Proxmark3 and active sniffing. Analyze the PuntoBIP! application and understand potential countermeasures against these vulnerabilities. This comprehensive presentation covers the history, security features, and structure of MIFARE Classic cards, providing valuable knowledge for both security professionals and enthusiasts interested in RFID technology and its potential exploits.