2. This presentation was made possible
by the awesome research of
• Charlie Miller (Twitter sec team, Accuvant)
• Verdult & Kooman (Radboud University,
SURFnet)
• Eddie Lee (Blackwing Intelligence)
3. What is NFC?
• Set of communication protocols based on
RFID (Basically all of the RFID standards plus
P2P instructions)
• Runs in the frequency of 13.56Mhz
• Range is usually less than 4cm
• Narrow bandwidth (106, 212, 424 Kbits/s)
4. Active Vs. Passive
• Active, P2P
– Both devices generates their own fields
• Passive (backwards compatible mode)
– Initiating device generates carrier fields
– Target device modulates existing field
9. Android Beam marketing buzz
• This is one of the most admired features of
the android 4.0 ice cream sandwich update!
• The users can now share music, docs, videos,
and photos just in a single tap!
• No need to pair the devices before exchanging
the data, the new ICS had made it absolutely
trouble-free!
16. Nokia N9 Bluetooth pairing
• Absolutely trouble free
• Pair devices without user interaction
• No need for PIN/Pwd
• Does not have “Confirm sharing and
connecting” enabled
• Bluetooth doesn´t even have to be turned on.
It will be switched on for you
17. Eddie Lee’s NFC proxy
• Android app to skim RFID credit cards
• Using the app an attacker can steal CC
number, expiration date and CVV code
• Replay this info to a RFID enabled POS device