Otherwise, only the UID can be detected. The real mystery is why Apple refuses to open the low-level read commands. (To read NDEF, or determine that the data is _not_ NDEF, you need to read the card.)

The Chinese SDR-based rigs have more unique interfaces, and there are many to choose from.

It's worth bearing in mind that most "Classic" desktop rigs output 100W, across 1MHz - 50MHz for HF - this needs to be supported by components that take up place.

Devices that operate at 10W are much smaller (and are typically chained with a larger indépendant amp..)

First month, we were debited 3500EU for opted-out profiles that they had auto-pulled, against the consent of customers and us.

Even with the CEO looped in on emails, we had to threaten chargebacks before they refunded.

They also refused to remove data under our official GDPR request.

Australia has an average "top speed" of 100km/h (110km/h in certain states) - whereas many other countries, with varying degrees of better or worse infrastructure, have average "top speed" of 130km/h - and yet have similar traffic fatalities.

Turkey: 130km/h (and fairly poor infrastructure compared to europe): 6.7 fatalities per 100k France: 130km/h (most people drive at ~145 on highways - only 1 point if you hit a radar) - 5 fatalities per 100k Australia: 100km/h - 4.5 fatalities per 100k

It can't just be speed, otherwise other 'similar' countries would be orders of magnitude above Australia.

They are excellent - they're built around the exam questions, but structured in a way that you understand the mechanics behind everything.

I'd attempted my license before, but never managed. After finding HamStudy + those guides, got my technician, general and extra class within 3 weeks.

73!

Almost everything in the community happens here.

With that said, if your badge is in tag/fob format, you could clone it onto a card-format. Larger antenna, better coupling.

There are a few suppliers building these devices. The bad uses outstrip the good uses.

For Mifare Classic: - Nested (Uses one known key to crack others) - darkside (Derives a key with no others. Slower, results are typically handed off to the nested attack to calculate remaining keys..)

For newer versions of the Mifare Classic with better PRNGs - "Hardened" cards: HardNested. Needs one known key.

For cards that provide a static nonce (to try to evade cracking, ie FUDAN) - Static Nested.

For the latest generation FUDAN: Static Encrypted HardNested.

Note, for the nested attacks - if you don't have a known key, these can be sniffed from the access control reader, and then cracked (MFKey32/64).

Flipper supports the MFKey32 attacks, and limited nested. You may bump into limits of your Proxmark clone with hardnested cracking - it's memory intensive, and most of the Proxmark Easy clones have reduced RAM.

There's actually an auto_crack LUA script on proxmark ( Use this fork: https://github.com/RfidResearchGroup/proxmark3 ) which will take most of the hassle out of cracking.

Cracking requires very, very precise timing: In a nutshell, you're trying to predict nonces / PRNG values, by sending very precicesly timed requests, and then later cracking those results.

The Flipper has limited CPU power - its main "attack vector" against MIFARE is a very large keylist / dictionary of common MIFARE keys. It's slow and dumb, but it works for most cases. It can also do limited cracking, depending on the type required.

The Proxmark is built around an FPGA, and can crack much, much more efficiently.

One of the best resources is probably the Discord channels. There is the official channel, and the non-official (for non-official firmware). YMMV, but the non-official seems to be more active.

The Flipper is "somewhat underpowered" in terms of hardware for RFID, or specifically 13.56MHz, but makes up for it in a very active development community.

"Access badges" is a fairly vast blanket term. Anything that's not an exhaustive, lengthy breakdown will be inherently over-generalised, but here we go:

125KHz: Low Frequency: _usually_ cards with "just" an ID or very limited memory. _Usually_ much simpler technology. _Usually_ without security, and much easier to copy.

There are multiple encoding and modulation methods in this family, almost all of which are encompassed in a (fairly amazing) tag that can emulate them all - meaning they can be cloned easily : the T5577 chipset.

There's much more penetration of these chipsets in non-EU markets (US, Canada, etc). Key brands and tags: HID Prox, EM4XXX, Hitag, etc.

The FlipperZero handles most / if not all of these very well (read / save / emulate / write).

High-Frequency tags (13.56MHz) : encompasses multiple ISO Standards : 14443-A/B/C (lots of access cards), also ISO15693 (Slightly Longer read range, more industrial tags, ski-passes, etc), and EMV (Payment Cards) among others.

There are many sub-protocols and implementations of these higher level standards. But these can be generalised as : small memory units / computing units on a chip. As such : larger functionality, and various security.

The most well-known family is probably MIFARE (1K/4K Classic..). Chances are, if you've got one somewhere. Encryption is totally broken.

Ultralight / NTAG: Cheaper, no / not much security (password + signatures on some tags, and counters). Typically used for ticketing etc.

These are handled in Flipper.

Other implementations: DESFIRE: Uncracked. iCLASS (Commercial Access Control - iCLASS SE / ELITE / SEOS ..). Can be cloned, or suffer from downgrade attacks. Not handled by Flipper by default.

The Flipper has a fundamental 'flaw' with high-frequency tags: it can't handle emulation on chip, and its clock isn't evenly divisible by 13.56MHz, so emulation and some functions are always going to be limited. With that said, the 13.56MHz stack is always improving - the community has done amazing things.

Likewise, cracking (typically: MIFARE) is CPU / memory intensive. The Flipper can limp through some implementations, and can team up with a PC for others.

However, more specialised devices (Proxmark, iCopy-X) pick up where the Flipper leaves off.

In summary, it's a very useful tool for RFID (LF + HF) - can handle most LF operations, and quite a few HF operations - before you have to reach for much more expensive hardware (Proxmark : ~300 EU).

Some people to check out on YT: https://www.youtube.com/@TalkingSasquach https://www.youtube.com/watch?v=VF3xlAm_tdo

Feel free to reach out for more questions.

My device broke in warranty (< 1 year). Customer support refused replacements, finally offering a 2nd-hand / refurbished replacement (illegal according to EU law).

Despite my attempts at polite out-reach to individuals at the company, including C-level, everything was ignored until a lawyer friend sent a formal letter - and suddenly everything was magically resolved the next day.

It's such an expensive device, and each press-release makes it more and more cultish - I couldn't recommend buying this - I'll wait for a competitor to do a better job.

Comments URL: https://news.ycombinator.com/item?id=40678637

Points: 3

# Comments: 0