IoT Security Blog

Articles and Posts on IoT Security, Embedded Systems, and the Internet of Things

RFID Hack: Is That Your Credit Card Number on the Screen?

Contributed by Joanne Kelleher At this year’s Black Hat security conference there was another hack on RFID from security researcher Adam Laurie. He was able to pull up the American Express credit card account data, including name, account number and expiration date, from the wallet of a volunteer and display it on the big screen…
Read More

Washington House Follows California in Bill to Outlaw RFID Skimming

Contributed by Joanne Kelleher The Washington State House of Representatives passed a bill on February 12, 2008 that would make it a felony to steal information from RFID cards. Bill HB 1031 – Changing provisions concerning electronic devices – would make it a class C felony to intentionally skim information from RFID-enabled identity cards for…
Read More

California Senate Approves Bill To Outlaw Skimming RFID Tags

Contributed by Joanne Kelleher California Senate Bill 31, which misdemeanors for non-consensual remote reading RFID and for improper disclosure of the keys to RFID systems, is part of a package of bills concerning privacy and RFID technology introduced by CA Senator Simitian. After several amendments, SB 31 was passed by the California Senate on 1/30/08…
Read More

With a Squirt of Electrons

Contributed by Joanne Kelleher My local newspaper, which usually does not cover technology issues, carried an article on Sunday (January 27, 2008) called Microchips Everywhere: a Future Vision by Todd Lewan from the Associated Press. It appears this was first published on Saturday by the Washington Post – http://www.washingtonpost.com/wp-dyn/content/article/2008/01/26/AR2008012601126.html. The article had a good history…
Read More

The Response to the Response

Contributed by Joanne Kelleher In response to the negative press about the U.S. Passport Cards there has been some feedback from those people involved with the program. It seems highly unusual for current and prior Government officials to write an opinion piece or a letter to the editor. Kathy Kraninger, Director of the Screening and…
Read More

Response to the U.S. Passport Card

Contributed by Joanne Kelleher The US Department of State recently announced that U.S. citizens may begin applying in advance for the new U.S. Passport Card beginning February 1, 2008. They expect the cards will be available and mailed to applicants in spring 2008. The cards will have a bar code and RFID tag that can…
Read More

Hi-Tech Heist

Contributed by Joanne C. Kelleher Consumers often feel safer using their credit cards in stores than online, where hackers are notorious for stealing personal information. But is it really safer? Lesley Stahl reports. This 60 Minutes report, which aired on November 26, 2007, covers security used by retail stores when processing credit cards. This report…
Read More

An understanding of security doesn't hurt, regardless of position

Contributed by Joanne Kelleher CIO Magazine recently named RFID Systems Engineer a Hot Job because RFID adoption is spurring demand for these hires. See http://www.cio.com/article/161750/Hot_Jobs_RFID_Systems_Engineer/1. Under the list of desired skills, CIO Magazine includes: An electrical engineering degree from a major technical institution. Industry experience using RFID is a definite plus. In a retail environment,…
Read More

Catchy Headline Is Not Enough

Contributed by Joanne C. Kelleher The article titled My life as a dog: Adventures in RFID research caught my eye because I liked the headline and was curious to see how these two concepts fit together. It tells how security researcher Adam Laurie cloned his dog’s RFID tag and carried the new tag around in his…
Read More

P-Words: Privacy and Process

Contributed by Joanne C. Kelleher  Are we in danger about talking too much about RFID privacy – and not enough about managing the data? Or business processes? asked David Bicknell in his RFID blog, Tune into RFID. His recent post called Remember the other P-Word: Process, is on the Computer Weekly website at  http://www.computerweekly.com/blogs/RFID-blog/2007/11/remember-the-other-pword-proce.html. Bicknell…
Read More

Archives