Re: [Full-disclosure] RFID used at Olympics in Germany

2006-06-01 Thread Chris
In order to get a ticket you were engaged to give the following information to the FIFA: - complete name and surename - adress - date of birth - nationality - number of passport or Reisepass (travel passport) - telephone number - fan of what club (!) - email-address - number of bank-

Re: [Full-disclosure] RFID used at Olympics in Germany

2006-06-01 Thread Adam Laurie
Josh L. Perrymon wrote: Yeah.. I suppose their would be limitations on the amount of data that would be on the chip.. Maybe the will just use an ID number that refrences the user info in the DB Has anyone successfully performed SQL injections usinf RFID tags? I looked at a few papers

Re: [Full-disclosure] RFID used at Olympics in Germany

2006-06-01 Thread gboyce
On Thu, 1 Jun 2006, Josh L. Perrymon wrote: Has anyone successfully performed SQL injections usinf RFID tags? I looked at a few papers but know it's not widespread. I'm thinking about getting an IPAQ and an RFID reader/writer to play around w/ this stuff.

[Full-disclosure] RFID used at Olympics in Germany

2006-05-31 Thread Josh L. Perrymon
http://www.csoonline.com.au/index.php?id=1926576695eid=-302 So every ticket used at the olympics has an embedded RFID and is scanned as users enter the stadium ( over 64 events ). snip---Organizers have asked everyone requesting tickets to provide a wealth of personal data, including name,

Re: [Full-disclosure] RFID used at Olympics in Germany

2006-05-31 Thread Jim Popovitch
Josh L. Perrymon wrote: So everyone is going to have this RFID embedded ticket with name, address, passport or driver license number? From the article: an embedded RFID chip containing identification information that will be checked against a database To me that doesn't imply that the

Re: [Full-disclosure] RFID used at Olympics in Germany

2006-05-31 Thread Josh L. Perrymon
Yeah.. I suppose their would be limitations on the amount of data that would be on the chip..Maybe the will just use an ID number that refrences the user info in the DBHas anyone successfully performed SQL injections usinf RFID tags? I looked at a few papers but know it's not widespread. I'm