How Secure is Your Security Badge?
Summary: At DefCon 2014, researchers from Lares Consulting showed it remains trivial to read, modify and clone most HID iClass proximity cards, building on 2010 Chaos Communication Congress research that found the master encryption key inside HID card readers. HID removed the external serial interface on newer readers but never changed the master encryption key, so a modified eBay reader in a backpack and under $500 of gear can capture card data from up to three feet away and encode it onto a new card.
What's compelling: Anyone who can walk up to an employee and ask for a light can clone a badge and alter the access level stored on it, reaching areas the card's legitimate owner cannot enter - and HID's market share means SCADA installations, hospitals and airports are running the same compromised technology.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026