{"guid":"d7dec1ff-5d76-50ae-ac2b-bad196e0badf","title":"Digital Skeleton Keys - We’ve got a bone to pick with offline Access Control Systems","subtitle":null,"slug":"emf2024-80-digital-skeleton-keys-we-ve-got-a-bone-to-pick","link":"https://www.emfcamp.org/schedule/2024/80-digital-skeleton-keys-we-ve-got-a-bone-to-pick","description":"Offline RFID systems rely on data stored within the key to control access and configuration. But what if a key lies? What if we can make the system trust those lies? Well then we can do some real spooky things…\n\nThis is the story of how a strange repeating data pattern turned into a skeleton key that can open an entire range of RFID access control products in seconds.\n\nIt’s a scrappy but scary hack that spawned from something we noticed whilst trying to duplicate an access card onto a subdermal RFID implant. This covers the discovery of the flaw, how we investigated it, and how significant the flaws ended up being.","original_language":"eng","persons":["Miana"],"view_count":137,"promoted":false,"date":"2024-06-01T13:00:00.000+02:00","release_date":"2024-08-31T00:00:00.000+02:00","updated_at":"2026-04-02T22:15:05.015+02:00","tags":["80","emf2024","talk","Stage A","2024","Day 3"],"length":1613,"duration":1613,"thumb_url":"https://static.media.ccc.de/media/events/emf/2024/80-d7dec1ff-5d76-50ae-ac2b-bad196e0badf.jpg","poster_url":"https://static.media.ccc.de/media/events/emf/2024/80-d7dec1ff-5d76-50ae-ac2b-bad196e0badf_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/emf/2024/80-d7dec1ff-5d76-50ae-ac2b-bad196e0badf.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/emf/2024/80-d7dec1ff-5d76-50ae-ac2b-bad196e0badf.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/emf2024-80-digital-skeleton-keys-we-ve-got-a-bone-to-pick","url":"https://api.media.ccc.de/public/events/d7dec1ff-5d76-50ae-ac2b-bad196e0badf","conference_title":"Electromagnetic Field 2024","conference_url":"https://api.media.ccc.de/public/conferences/emf2024","related":[],"recordings":[{"size":442,"length":1613,"mime_type":"video/webm","language":"eng","filename":"emf2024-80-eng-Digital_Skeleton_Keys_-_Weve_got_a_bone_to_pick_with_offline_Access_Control_Systems_webm-hd.webm","state":"new","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2024-09-01T08:46:04.971+02:00","recording_url":"https://cdn.media.ccc.de/events/emf/2024/webm-hd/emf2024-80-eng-Digital_Skeleton_Keys_-_Weve_got_a_bone_to_pick_with_offline_Access_Control_Systems_webm-hd.webm","url":"https://api.media.ccc.de/public/recordings/79812","event_url":"https://api.media.ccc.de/public/events/d7dec1ff-5d76-50ae-ac2b-bad196e0badf","conference_url":"https://api.media.ccc.de/public/conferences/emf2024"},{"size":116,"length":1613,"mime_type":"video/webm","language":"eng","filename":"emf2024-80-eng-Digital_Skeleton_Keys_-_Weve_got_a_bone_to_pick_with_offline_Access_Control_Systems_webm-sd.webm","state":"new","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2024-09-01T01:34:47.773+02:00","recording_url":"https://cdn.media.ccc.de/events/emf/2024/webm-sd/emf2024-80-eng-Digital_Skeleton_Keys_-_Weve_got_a_bone_to_pick_with_offline_Access_Control_Systems_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/79765","event_url":"https://api.media.ccc.de/public/events/d7dec1ff-5d76-50ae-ac2b-bad196e0badf","conference_url":"https://api.media.ccc.de/public/conferences/emf2024"},{"size":87,"length":1613,"mime_type":"video/mp4","language":"eng","filename":"emf2024-80-eng-Digital_Skeleton_Keys_-_Weve_got_a_bone_to_pick_with_offline_Access_Control_Systems_sd.mp4","state":"new","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2024-08-31T18:05:56.782+02:00","recording_url":"https://cdn.media.ccc.de/events/emf/2024/h264-sd/emf2024-80-eng-Digital_Skeleton_Keys_-_Weve_got_a_bone_to_pick_with_offline_Access_Control_Systems_sd.mp4","url":"https://api.media.ccc.de/public/recordings/79638","event_url":"https://api.media.ccc.de/public/events/d7dec1ff-5d76-50ae-ac2b-bad196e0badf","conference_url":"https://api.media.ccc.de/public/conferences/emf2024"},{"size":24,"length":1602,"mime_type":"audio/mpeg","language":"eng","filename":"emf2024-80-eng-Digital_Skeleton_Keys_-_Weve_got_a_bone_to_pick_with_offline_Access_Control_Systems_mp3.mp3","state":"new","folder":"mp3","high_quality":false,"width":0,"height":0,"updated_at":"2024-08-31T15:34:55.638+02:00","recording_url":"https://cdn.media.ccc.de/events/emf/2024/mp3/emf2024-80-eng-Digital_Skeleton_Keys_-_Weve_got_a_bone_to_pick_with_offline_Access_Control_Systems_mp3.mp3","url":"https://api.media.ccc.de/public/recordings/79576","event_url":"https://api.media.ccc.de/public/events/d7dec1ff-5d76-50ae-ac2b-bad196e0badf","conference_url":"https://api.media.ccc.de/public/conferences/emf2024"},{"size":16,"length":1602,"mime_type":"audio/opus","language":"eng","filename":"emf2024-80-eng-Digital_Skeleton_Keys_-_Weve_got_a_bone_to_pick_with_offline_Access_Control_Systems_opus.opus","state":"new","folder":"opus","high_quality":false,"width":0,"height":0,"updated_at":"2024-08-31T15:34:34.278+02:00","recording_url":"https://cdn.media.ccc.de/events/emf/2024/opus/emf2024-80-eng-Digital_Skeleton_Keys_-_Weve_got_a_bone_to_pick_with_offline_Access_Control_Systems_opus.opus","url":"https://api.media.ccc.de/public/recordings/79575","event_url":"https://api.media.ccc.de/public/events/d7dec1ff-5d76-50ae-ac2b-bad196e0badf","conference_url":"https://api.media.ccc.de/public/conferences/emf2024"},{"size":469,"length":1613,"mime_type":"video/mp4","language":"eng","filename":"emf2024-80-eng-Digital_Skeleton_Keys_-_Weve_got_a_bone_to_pick_with_offline_Access_Control_Systems_hd.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2024-08-31T15:32:55.249+02:00","recording_url":"https://cdn.media.ccc.de/events/emf/2024/h264-hd/emf2024-80-eng-Digital_Skeleton_Keys_-_Weve_got_a_bone_to_pick_with_offline_Access_Control_Systems_hd.mp4","url":"https://api.media.ccc.de/public/recordings/79572","event_url":"https://api.media.ccc.de/public/events/d7dec1ff-5d76-50ae-ac2b-bad196e0badf","conference_url":"https://api.media.ccc.de/public/conferences/emf2024"}]}