Verizon Wins Patent Case Against Vonage; Now... >>
<< Reincarnated MovieBeam Goes Out With A Whimper
 tdicon 

Ramblings

by Joseph Weisenthal

Thu, Mar 8th 2007 1:10pm





Surprise: Attempt To Suppress Security Research Blows Up In Company's Face

from the instant-karma dept

The big story out of last week's Black Hat security conference was that HID Global, a maker of RFID-based door entry cards, managed to prevent a demonstration of how their products were vulnerable to cloning. What made their threats particularly odious was their claim that the presenters were somehow engaging in patent infringement by demonstrating the attack. More broadly, however, this kind of intimidation is almost always a mistake. It only made the company look like bullies with something to hide. It seems that the company may already be paying the consequences for its heavy-handed actions, as the DHS is said to now be examining the vulnerability further. HID Global is now backtracking, saying that it never intended to prevent the presentation from happening, although they don't seem to explain how everybody got that impression. Either way, any hope that the company had in keeping this threat quiet is now totally lost.

9 Comments | Leave a Comment

If you liked this post, you may also be interested in...

Reader Comments (rss)

(Flattened / Threaded)

  •  
    identicon
    dataGuy, Mar 8th, 2007 @ 1:20pm

    Change Icon

    I think it's time you create a "Barbra Streisand" icon to identify these types of stores :-)

     

    [ reply to this | link to this | view in chronology ]

  •  
    identicon
    Geoffrey Kidd, Mar 8th, 2007 @ 1:29pm

    Hmmm...

    If HID Global really wants to convince anybody that a claim of patent infringement and suing IOActive down to their belly-button lint wasn't intended to prevent the demo, they're going to have to take drastic action.

    May I suggest that they take the lawyer who wrote the letter AND the president of HID out, and, in public, string them up by their thumbs and give them fifty scarring lashes?

    Of course, this is NOT intended to advocate any sort of punitive action against HID or anyone associated with it.

     

    [ reply to this | link to this | view in chronology ]

  •  
    identicon
    Witty Nickname, Mar 8th, 2007 @ 2:51pm

    Aren't we due an energy efficent light bulb logo before we get one of Babbs?

     

    [ reply to this | link to this | view in chronology ]

  •  
    identicon
    Dosquatch, Mar 8th, 2007 @ 4:59pm

    DHS? Really?

    I'm not sure on what grounds the DHS is investigating this. I mean, not unless it's personal or something.

    "Hey, Bob, come check this article out."

    "Hmmm. Yeah? So?"

    "Well, aren't those the keycards that WE use?"

    "Ohhhhhh.... shit."

     

    [ reply to this | link to this | view in chronology ]

    •  
      identicon
      Anonymous Coward, Mar 8th, 2007 @ 6:10pm

      Re: DHS? Really?

      Actually, you're pretty close. Aren't something like 300 million cards like this in use around the country? I have two here on my desk: one from my former Unix OS Developer job, and now for my current Government Security Analyst job. Which system would DHS prefer not be hackable by their imaginary nefarious people? the OS which drives the stock market, or the unnamed government office where I may or may not currently work?

      This is one DHS effort which, at last, doesn't make them look bumbling and stupid.

       

      [ reply to this | link to this | view in chronology ]

  •  
    identicon
    Kevin Delaney, Mar 8th, 2007 @ 5:14pm

    Patent Laws Should Stop ID Theft

    Gosh, I think that if people knew that cloning security cards violated a patent, they wouldn't do it. I would imagine that a well run, professional criminal organization would do patent checks on all of the devices that they develop in their criminal career.

     

    [ reply to this | link to this | view in chronology ]

  •  
    identicon
    |333173|3|_||3, Mar 10th, 2007 @ 3:22am

    I've used the RFID cards, and I have seen how little time they take to have a new value written on one. THe machines for writing them are readily avaliable, as are the machines for printing ID cards, so making a fake ID card with key would not be too difficult. Presumably HID sells writers for these cards so they can be re-used.

     

    [ reply to this | link to this | view in chronology ]

  •  
    identicon
    Mr. Big, Mar 28th, 2007 @ 9:36am

    Our evaluation

    We have dropped HID from consideration in our corporate ID card implementation. Since they don't support open discussion of security issues we cannot be assured they provide a secure prouct and more importantly, feel security is important.

     

    [ reply to this | link to this | view in chronology ]


Add Your Comment

Have a Techdirt Account? Sign in now. Want one? Register here
Get Techdirt’s Daily Email
Save me a cookie
  • Note: A CRLF will be replaced by a break tag (<br>), all other allowable HTML will remain intact
  • Allowed HTML Tags: <b> <i> <a> <em> <br> <strong> <blockquote> <hr> <tt>
Verizon Wins Patent Case Against Vonage; Now... >>
<< Reincarnated MovieBeam Goes Out With A Whimper
 tdicon 
Follow Techdirt
Flattr rss rss
A word from our Sponsors...
Sponsored Resource
Essential Reading
Techdirt Reading List
Techdirt Insider Chat

A word from our Sponsors...
Recent Stories

Tuesday

8:02pm: WIPO: Informal Economy Innovates In The Absence Of Intellectual Monopolies (4)
5:00pm: DailyDirt: Augmented Vision (2)
3:50pm: States Attorneys General Want Special Exception To Blame Sites For Actions Of Users (39)
3:02pm: Google, Without Admitting It Gets FISA Orders, Files Lawsuit To Challenge FISA Gag Orders (22)
2:29pm: NYPD Commissioner Blasts NSA Secret Monitoring For Being Secret (19)
1:43pm: It's Come To This: Commentators Arguing That The Press Commits A Crime In Exposing NSA Surveillance (45)
1:00pm: US Chamber Of Commerce: Bollywood Is So Successful Without Strong Copyrights That It Will Fail Unless India Strengthens Its Copyrights (43)
11:58am: Senator Lindsey Graham Defends NSA Surveillance By Arguing About Something Entirely Different (52)
11:15am: NSA Claims Surveillance Programs Aided The Stopping Of 50 Attacks; Details Lacking (71)
10:31am: The NSA's Lockbox Has No Lock (45)
More arrow
A word from our Sponsors...

Close

Email This