Live data from Hacker News

Please scan my towel

jerrygamblin.com

41–50 of 113 posts

Re: Please scan my towel

#41
This story doesn't quite make sense. I believe that his RSA pass was clonable and that his towel also had an RFID chip embedded in it. What I find hard to believe is that the towel had a writable RFID tag.

My main experience with RFID is cloning tags onto T5557 chips, and I don't think I've ever come across a writable tag in the wild. It doesn't seem to make economic sense to spend an extra penny or two on every towel to put in a tag you are never going to change.

Re: Please scan my towel

#42
post #41

This story doesn't quite make sense. I believe that his RSA pass was clonable and that his towel also had an RFID chip embedded in it. What I find hard to believe is that the towel had a writable RFID tag. My main experience with RFID is cloning tags onto T5557 chips, and I don't think I've ever come across a writable tag in the wild. It doesn't seem to make economic sense to spend an extra penny or two on every towe…

The tags have to be writable at the factory to set the serial number. Presumably it's supposed to be write-once but is actually a small EEPROM, and he has an exploit that lets him overwrite it (see the "details withheld").

Re: Please scan my towel

#43
post #12

RFID is one of those things that seem cool until you start playing with it and then it turns out that the only uses for it are really boring. Like, you can't use it to locate stuff because the range is too short; you can't rely on stuff to have chips (food, or clothes or whatever) and it's a major time sink if you'd have to start tagging stuff yourself; it's cumbersome to install readers everywhere and not being able…

I would probably hold off on the butt chip. Why not get an optical viewer and train it to understand when you need help with the door?

Re: Please scan my towel

#45

Earlier quoted context omitted.

One interesting use: https://vimeo.com/157990864 This library lets visitors rearrange the books organically (if you pull out multiple books on a topic, you're encouraged to put them back on the shelf together instead of finding their old homes). The books are tracked with RFID so that they remain easy to find individually.

I'm a frequent library user, and this may be fine for certain types of collections (where you look for very specific books) but is terrible for general use, as you are removing the ability to search by topic.

I guess the idea is that books naturally fall next to other similar books, a kind of "People who read this also read..." system.

I can understand the experiment, the dewey-decimal system doesn't have to be the ultimate in organisation.

Re: Please scan my towel

#46
post #41

This story doesn't quite make sense. I believe that his RSA pass was clonable and that his towel also had an RFID chip embedded in it. What I find hard to believe is that the towel had a writable RFID tag. My main experience with RFID is cloning tags onto T5557 chips, and I don't think I've ever come across a writable tag in the wild. It doesn't seem to make economic sense to spend an extra penny or two on every towe…

Mifare Ultralight C cards have 3DES-based security, cloning protection and read-only locking [1]. So I don't see how copying the RSA card to the towel would work unless the RSA conference totally messed up their use of RFID or the author has some super-hacker key extraction technique. Am I missing something?

[1] http://www.nxp.com/documents/data_sheet/MF0ICU2.pdf

Re: Please scan my towel

#48
post #19
post #16

Earlier quoted context omitted.

How do they prevent theft, exactly?

No idea - the article says "to help with inventory control" which doesn't help matters much.

Inventory control does not necessarily have anything to do with theft. "Inventory management" would probably be a better term.

Re: Please scan my towel

#49
post #17
post #16

Earlier quoted context omitted.

How do they prevent theft, exactly?

A customer checks in and is given a towel with a customer specific RFID attached. If at the point the customer checks out and the towel is not in the room, it is assumed to be missing or stolen.

This doesn't prevent someone from just taking a pool towel to their room and then putting it in their suitcase.

Re: Please scan my towel

#50
post #12

RFID is one of those things that seem cool until you start playing with it and then it turns out that the only uses for it are really boring. Like, you can't use it to locate stuff because the range is too short; you can't rely on stuff to have chips (food, or clothes or whatever) and it's a major time sink if you'd have to start tagging stuff yourself; it's cumbersome to install readers everywhere and not being able…

I would probably hold off on the butt chip. Why not get an optical viewer and train it to understand when you need help with the door?

A button at floor level that you can press with your foot is probably more practical.
Post reply on HN