Hello,

We noticed you're browsing in private or incognito mode.

To continue reading this article, please exit incognito mode or log in.

Not an Insider? Subscribe now for unlimited access to online articles.

A View from Erika Jonietz

Hacking RFID

Radio-frequency identification tags are supposed to make life easier for retailers–improving supply chain management, simplifying inventory tracking, and reducing theft. But RFID could actually make life easier for in-store thieves, says a German information security consultant. Forbes.com reports on Lukas…

  • August 2, 2004

Radio-frequency identification tags are supposed to make life easier for retailers–improving supply chain management, simplifying inventory tracking, and reducing theft. But RFID could actually make life easier for in-store thieves, says a German information security consultant.

Forbes.com reports on Lukas Grunwald’s claims, which he made last week at the Black Hat Security Briefings conference in Las Vegas. Grunwald created software that allows him to change the information stored on the RFID tag and proposes the following scenario: a thief could go into a store where all the products have RFID tags on them. He thinks $7 is too much for a bottle of shampoo; he’d rather pay $3. So he uses a PDA equipped with an RFID reader to scan the tag on the shampoo, and he uses software like Grunwald’s to replace that information with data from the tag on a $3 carton of milk. When he reaches the checkout stand–which is automated, of course, saving money on labor–he’s charged $3 instead of $7, with the store’s computer systems none the wiser.

Grunwald is releasing his program, called RFDump, for free to prove his point and let others learn about RFID security.

Want more award-winning journalism? Subscribe to Insider Basic.
  • Insider Basic {! insider.prices.basic !}*

    {! insider.display.menuOptionsLabel !}

    Six issues of our award winning print magazine, unlimited online access plus The Download with the top tech stories delivered daily to your inbox.

    See details+

    What's Included

    Unlimited 24/7 access to MIT Technology Review’s website

    The Download: our daily newsletter of what's important in technology and innovation

    Bimonthly print magazine (6 issues per year)

/3
You've read of three free articles this month. for unlimited online access. You've read of three free articles this month. for unlimited online access. This is your last free article this month. for unlimited online access. You've read all your free articles this month. for unlimited online access. You've read of three free articles this month. for more, or for unlimited online access. for two more free articles, or for unlimited online access.