Latest in Breaking news

Image credit:

Hackers crash e-passport readers -- stage set for exploits

Share
Tweet
Share
Save

Sponsored Links

Lukas Grunwald -- last seen cloning Germany's RFID passports -- is back with more "white hat" hackery on the world's new e-passport systems. This time, however, he's crashing RFID readers to demonstrate how a hacked passport could conceivably force approval of expired or forged passports. After all, "If you're able to crash something you are most likely able to exploit it," says Grunwald. Lukas was able to crash two passport readers made by different vendors by first cloning a passport's chip and then modding the JPEG2000 image file stored within the chip to create a buffer overflow condition -- the same vulnerabilities which make so many devices (the original Xbox, anyone?) so easily exploitable. Lukas contends that all airport readers are likely vulnerable to such an exploit as they would be using off-the-shelf libraries for decoding JPEG images. Lukas will be demonstrating his latest hack this weekend at DefCon in Vegas. Hmmm, with CES moving to RFID badges this year, we have a funny feeling that attendance is going to be way up.

[Via BoingBoing]

All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.
Share
Tweet
Share
Save

Popular on Engadget

The 2019 Engadget Holiday Gift Guide

The 2019 Engadget Holiday Gift Guide

View
What's on TV this week: 'Shenmue III'

What's on TV this week: 'Shenmue III'

View
This $375 Soleil blow dryer is just $65 today

This $375 Soleil blow dryer is just $65 today

View
iFixit pulls apart the 16-inch MacBook Pro and sees little has changed

iFixit pulls apart the 16-inch MacBook Pro and sees little has changed

View
Apple's latest iOS 13 update fixes Mail, background download glitches

Apple's latest iOS 13 update fixes Mail, background download glitches

View

From around the web

Page 1Page 1ear iconeye iconFill 23text filevr