Slashdot Mirror

← Back to Stories (view on slashdot.org)

RFID Injection Required for Datacenter Access

Posted by ryuzaki0 on from the one-way-to-make-sure-we're-working dept.

user24 writes "Security focus reports that RFID injections are now required for access to the datacenter of a Cincinnati company. From the article 'In the past, employees accessed the room with an RFID tag which hung from their keychains, however under the new regulations an implantable, glass encapsulated RFID tag from VeriChip must be injected into the bicep to gain access ... although the company does not require the microchips be implanted to maintain employment.'"

1 of 551 comments (clear)

  1. Re:Why? by Beryllium+Sphere(tm) · · Score: 5, Informative

    >What's the security benefit to injected RFID?

    If your threat model is someone walking into the data center with a lost/stolen/borrowed badge then requiring them to be injected does address the threat. But then so would issuing tokens in the form factor of a ring, except for the "borrowed" token problem.

    So, if you don't know that RFID chips can be cloned, if you don't know that they transmit the same number every time they're pinged, if you don't know that they can be read remotely and cloned at leisure, and if you have contempt for your employees and are oblivious to human rights, you might come up with a requirement for injected RFID.

    I sincerely hope that whoever came up with this isn't one of my colleagues in security consulting.