RFID Personal Firewall
JanMark writes "Prof. Andrew Tanenbaum and his student Melanie Rieback (who published
the RFID virus paper
in March) and 3 coauthors have now published a
paper on a personal RFID firewall called the RFID Guardian. This device
protects its owner from hostile RFID tags and scans in his or her
vicinity, while letting friendly ones through. Their work has won the
Best Paper award at the
USENIX LISA Conference."
Oh, great. I can just imagine walking through the mall and then being bombarded by all these popups. "Would you like Macy's to be able to access your RFID tags? [Ok] [Cancel] [X] Always Allow"
My blog
I guess whit officially makes them white-hats, however, I'd still be worried about the ability to spoof a legitimate rfid or steal one and deactivate this firewall. Things that are considered by many to be foolproof make things that much worse when they fall through...
Video of The Guardian in action: http://www.rfidguardian.org/videos/rfid-guardian-0 250.mov
This is either old news, or there is some other reason the website looks like it's from 1996.
If people are worried about others reading RFID tags at will, why not add a mechanical switch to the tag that must be pressed for the tag to power up? Just insist on it. If it doesn't have it, it goes in the microwave. Sheesh, add a cheap membrane switch, not a firewall.
This reminds me of the anime Ghost in the Shell wherein people use sophisticated attack barriers to defend their cyberbrains from unwanted intrusions. It seems that we are approaching the need for personal firewalls much faster than anticipated driven by the desire of world governments to more closely monitor their citizens as well as consumer desire for more personal electronics. I'd say we probably have only a year or two before implantable cell phones/accessories start making an appearance. Soon thereafter the first viruses targeting those systems will show up. So the personal firewall business should be pretty good.
To the making of books there is no end, so let's get started
For those that want more detail than the videos provide:
/ acisp.05.pdf
http://www.cs.vu.nl/~melanie/rfid_guardian/papers
biopowered.co.uk - catalytically cracking triglycerides for home automotive use since 2008. Just say no to big oil!
Makes sense, since that's a common strategy for dealing with spam: Block anything except emails from a known source. ...in the future, will we look back at spam gratefully, for all the practice it's given us in blocking unwanted intrusions into our systems in a (realtively) benign way? Or does it just demonstrate how easily the majority of people will ignore privacy and real security and make life hell for the rest of us?
That comment just triggered an odd thought in my head...
[ cruise / casual-tempest.net / xenogamous.com / transference.org / quantam sufficit ]
Yeah, yeah, RFID, mark of the beast, firewall, virus, buzzword... whatever! This is Slashdot, and the important question is whether or not this Melanie Rieback chick is hot. 'Cause everyone knows that hot geek girls are the wet dream of every red-blooded male Slashdotter. And thanks to the magic that is Google, the answer appears to be, "Not bad... not bad at all!"