Friday, February 24, 2012
Revealing RFID Myths
If you were ever hoping to see an episode of Mythbusters busting the myths behind RFID security, you might be saddened to hear it looks like that will never happen, and not due to a lack of interest either.
Adam Savage of Mythbusters, when speaking to the audience of The Last HOPE hacker conference, revealed why RFID has become a bit of a taboo topic at Discovery Channel. In response to an audience question about revisiting RFID as an episode, Adam responds, "Dude, the RFID thing. I'm sorry. It just is not going to happen. ... Here's what happened. I'm not sure how much of this story I'm allowed to tell, but I'll tell you what I know." Mythbusters did cover RFID in an episode last January, but did not focus on RFID security concerns.
After some cheers from the audience, Adam says, "We were going to do RFID and on several levels, you know, how hackable, how reliable, how trackable, etc., etc., and one of our researchers called up Texas Instruments and they arranged a conference call between, I think, Tory and the head producer over there for the other team, Linda Wolkovitch, and one of the technicians at Texas Instruments. We were supposed to have a conference call to talk about the technology on like Tuesday at 10 am and Tuesday at 10 am, Linda and Tori get on the phone and they.. uh.. Texas Instruments comes on, along with the chief legal council for American Express, Visa, Discover, and everybody else."
Adam continues, "I got chills just as I described it. They were way way out-gunned and they absolutely made it clear to Discovery they were not going to air this episode talking about how hackable this stuff was and Discovery backed way down, being a large corporation who depends upon the revenue of the advertisers. Uh, and now it's on Discovery's radar and they won't let us go near it. So I'm sorry. It's just one of those things, but man, that was.. Tory still gets a little white when he describes that phone conversation."
On one episode of Mythbusters, biometric security is visited and attempts are made to see if fingerprint scanners, for example, could be bypassed easily. Sure enough, the Mythbusters were able to beat the fingerprint scanners, several ways. It is not surprising that such a popular show, attempting to publicize possible faults in RFID technology, would garner the attention of certain companies. With RFID chips finding their way into our credit cards, passports, and many other aspects of our lives, trusting the technology with our security and privacy is becoming an everyday scenario.
As Adam stated, some of the aspects of RFID that would be covered by Mythbusters, if they had their way, would include how hackable they are, how reliable they are, and how easy they are to track. Some security experts fear information stored on RFID chips could be read remotely by strangers, such as the personal information stored on credit cards or passports that use vulnerable RFID chips. While typically an RFID chip used in a credit card, for example, is designed to be read from only a short distance away, some believe as far as 40-feet away is possible. There are also concerns that the data encryption and other means of added security given to some RFID chips may be vulnerable.
Read more here