FierceCIOFierceCIOTechWatchFierceMobileITFierceContentManagementFierceGovernmentIT   FierceVoIPFierceHealthITFierceFinanceIT

RFID due for an overhaul

Tools
Tags
vulnerability assessment
Virtual PC
SIMtone Corporation
RFID
Massachusetts Bay Transportation Authority


First of all, I would like to offer my apologies for the missing Editor's Corner on Friday. Circumstances beyond my control put a grinding halt to my efforts, midstream. 

One of the topics that I had planned to write about on Friday has to do with RFID. So imagine my interest when I read about a lawsuit filed by the Massachusetts Bay Transportation Authority (MBTA) to halt a Defcon presentation over the weekend on the topic of...you guessed it: hacking transit systems.

Eventually, a restraining order was issued, and the talk was canceled in the end. The irony, however, is that a vulnerability assessment report (pdf) filed as a supporting document appears to be more explicit about the vulnerabilities in the MBTA system than what could be found in the slides that the restraining order sought to suppress. This is especially ironic when you consider that the said slides were already distributed via the conference CD-ROM before the injunction was issued.

Is it me, or does it appears that a major overhaul of current generation RFID technology is needed? The alternative for now though, might just be to get an RFID defeating wallet.

Finally, it appears that the Virtual PC is gaining momentum with the potential to be the next big wave in IT. Speaking of Virtual PCs, I just recalled that Mark Tordik arranged for a trial of a VirtualPC service a while back from a startup named SIMtone Corporation. Admittedly, I have not had a chance to give it a try--though it appears to support all the major platforms: VMware, Hyper-V and Xen. You might want to take a look at it. - Paul

Twitter   Facebook   LinkedIn   StumbleUpon  
Get Your FREE FierceCIO Email Newsletter:
Comments (1) | Post a comment

Comments

An interesting editorial, painting a picture that all RFID is bad. This one specific example of a contactless smartcard (not RFID in general) is supposed to be secure and I agree that the problems need to be fixed. Just like the problems in Microsoft's operating system need to be fixed.

However, RFID in general is not a secure product and has never been presented that way. It use in most cases relies on a unique number that has no value and is not associated with any individual, yet the benefits are enormous.

Simplifying document tracking (perhaps preventing the loss of so much personal data), tracking IT type assets and preventing the theft of such items, making a recall of a problem item simpler, helping to find the source of those tainted tomatoes (or was it peppers) or just saving money in reduced inventory. All of these things are ideal applications of RFID that don't need a "RFID Defeating Wallet".

Take a look at the good side and think about your broad brush statements.

Post new comment

The content of this field is kept private and will not be shown publicly.

More information about formatting options

To combat spam, please enter the code in the image.