Zaɓan Matsakaicin Dama don Maɓallan RFID

Zaɓan Matsakaicin Dama don Maɓallan RFID

 

Maris 2024, gungun masu binciken tsaro sun jefa bam a masana'antar otal. Lennert Wouters daga KU Leuven da Ian Carroll sun buga abin da suka kira Unsaflok{2} sarkar na rauni a cikin makullan Dormakaba Saflok wanda ya basu damar bude kowace kofa a otal mai dauke da jabun maballi guda biyu. Sama da ƙasashe miliyan uku{5}} dukiya{6}},000.

 

Mai harbi? An sayar da waɗancan makullan tun 1988.

 

WIRED ya rufe shi. Haka BleepingComputer, Labaran Dan Dandatsa, da Makon Tsaro suka yi. Dormakaba ya bijiro da tsarin facin, amma har zuwa bayanin su na Maris 2024, kashi 36% na makullan da abin ya shafa aka gyara. Sauran suna nan a can.

 

Me ya sa aka kai harin? Makullan sun yi amfani da MIFARE Classic chips da ke tafiyar da Crypto{1}} 1 rufa-rufa-masu ƙirƙira na tsarin sun yi gargaɗi sama da shekaru goma. Masu binciken sun fasa shi da Flipper Zero. Farashin kayan aiki: 'yan daloli kaɗan.

 

Wannan shine ainihin zaɓin mita a zahiri don sarrafa damar shiga.

 

 

Yanayin 125 kHz

 

Ga bangaren mara dadi.

 

Ƙarƙashin mitar RFID - a 125 kHz ita ce mafi tsufa fasahar har yanzu ana amfani da ita. EM4100, TK4100, HID ProxCard{5}} sunaye da suka bayyana akan takaddun takamammen ko'ina daga gine-ginen gidaje zuwa harabar kamfani.

 

Waɗannan kwakwalwan kwamfuta suna yin abu ɗaya: watsa tsayayyen lamba lokacin da suka isa kusa da mai karatu. Babu musafaha. Babu kalubale{2}}amsa. Babu boye-boye kwata-kwata.

 

ICT, wani kamfanin sarrafa damar shiga New Zealand, ya buga zanga-zanga a cikin 2023 yana nuna ƙungiyar su ta rufe katin 125 kHz a cikin daƙiƙa biyar tare da na'urar $ 30. Kisi, wani mai siyar da tsaro, wanda aka buga takaddun da ke nuna Flipper Zero na iya kwafin takaddun shaida ta wallet da aljihunan cikin ƙasa da daƙiƙa guda. TikTok yana cike da bidiyoyi. Wannan ba ka'ida bane.

 

Don haka me yasa har yanzu wani ke tura 125 kHz? Galibi kayan aikin gado. Ginin da ke da masu karatu 500 da takaddun shaida 10,000 ba zai iya fitar da komai cikin dare ɗaya ba. Hakanan farashi{6}}yawan farashi akan maɓallan maɓalli na EM4100 na iya kaiwa $0.15 kowace raka'a ko ƙasa da haka. Don dakin motsa jiki ko wurin ajiya inda samfurin barazanar shine "wani zai iya latsa ciki," wannan lissafi na iya yin ma'ana.

 

Ga wani abu tare da ainihin buƙatun tsaro, ba ya yi.

 

13.56 MHz ba aminci ta atomatik bane

 

Lamarin da ya faru na Unsaflok yana nuna ainihin dalilin da yasa "haɓakawa zuwa babban mitar" ba cikakkiyar amsa ba ce.

 

MIFARE Classic yana aiki a 13.56 MHz a ƙarƙashin ISO 14443. Yana da ɓoyewa. Yana da tabbaci. Kuma ta fashe ta wata hanya, saboda Crypto{6}}1 ta mallaki ce kuma mai rauni. Masu binciken da suka karya makullan Dormakaba ba su gano wani sabon rauni ba - sun yi amfani da wanda jami'an tsaro suka sani tun 2008.

Tsarin a nan: 13.56 MHz yana ba ku kayan aikin don yin ɓoyewa da kyau, amma guntu a cikin al'amura fiye da mitar da aka buga akan lakabin.

 

MIFARE DESFire tare da AES-128 ya kasance amintacce daga sanannun hare-haren. NTAG jerin kwakwalwan kwamfuta don aikace-aikace masu sauƙi. Waɗannan sun riƙe. MIFARE Classic ba shi da.

 

 

Karanta nisa da tsangwama

 

Wani lokaci mutane suna tambaya ko 13.56 MHz keyfobs suna aiki ta hanyar sutura kamar yadda 125 kHz ke yi.

 

Amsa a takaice: eh. Duk mitoci biyun suna amfani da haɗaɗɗiyar haɗaɗɗiya a daidaitattun nisan sarrafa dama. Kewaye yana kusa da 1{4}} cm 10 don yawancin abubuwan sifofi na maɓalli. Abubuwan ƙarfe kusa da{{5}wayoyi, maɓallai, bel ɗin bel-za su iya gano eriya kuma suna buƙatar taɓawa na biyu. Babu wani abu mai ban mamaki.

 

UHF a 860-960 MHz kimiyyar lissafi ce daban. Electromagnetic backscatter maimakon inductive hada guda biyu. Karanta kewayon mita da yawa. Yana da amfani ga ƙofofin ajiye motoci ko kayan ajiyar kaya, matsala don samun damar ƙofar inda kuke son tantancewa kawai lokacin da mai amfani ya nufa.

 

Rarraba mitar yanki kuma ya raba makada na UHF daban-daban tsakanin Arewacin Amurka da Turai, wanda ke rikitar da jigilar kayayyaki na duniya.

 

Hijira ba tare da hargitsi ba

 

Dual{0}maɓallan madanni na mitoci suna wanzu musamman don sauye-sauyen lokaci. Gida guda ɗaya ya ƙunshi duka kwakwalwan kwamfuta 125 kHz da 13.56 MHz. Legacy readers suna ganin ɗaya, masu karatu masu haɓaka suna ganin ɗayan. Takaddun shaida suna kasancewa tare da masu amfani a duk lokacin musanyawa.

 

Ƙuntatawa shine ƙirar eriya. Duk kwakwalwan kwamfuta biyu suna buƙatar karantawa cikin dogaro ba tare da tsangwama ba. Ba kowane masana'anta keyfob ke samun wannan dama ba. Tabbatar da aiki kafin yin odar girma.

 

Ainihin tambaya

 

Zaɓin maimaitawa wakili ne don yanke shawara daban: nawa kuke kulawa idan wani ya kwafi takardar shaidar?

 

• 125 kHz ba shi da tsaro. Duk wanda ke da $30 da mintuna goma na YouTube zai iya rufe maɓallin maɓalli.
• 13.56 MHz tare da MIFARE Classic sun yi kama da tsaro amma ba. Otal-otal har yanzu suna ta fama da ɓarna.
• 13.56 MHz tare da DESFire ko daidai yana riƙe{1} a yanzu.

- Masu binciken Unsaflok

 

Shekaru talatin - na makullai masu rauni. Wannan shine farashin samun mita da zaɓin guntu ba daidai ba.