210 Comments

You're are still making a lot of assumptions that are false. I don't carry a phone, and I don't have a car. And I'm not the only one.

Expand full comment

Just retired from Amazon Physical Security, after 16 years in the physical security field. Those were examples that came to mind because those are what I mostly worked with. If you watch Spectrum (spectrum.ieee.org), the journal of the IEEE, you'll see plenty of different oddities combining all sorts of technologies into self-contained packages of various sizes. Watch SlashDot and you'll see others.

My example of the sewer monitor selects a code from a table, and updates the field that the RFID spits out (IIRC also tags a value on the end). I was being lazy writing.

Expand full comment

That's speciest :P That's not a problem until we meet aliens though.

Expand full comment

Either they're actively avoiding us, think we're beneath notice entirely, or they'll decide one day to toss a giant asteroid our way and just colonize the planet once the dust settles.

Expand full comment

If you're shopping somewhere and don't want to sign up for a shopper card use the phone number (321) 123-4567. Works pretty much everywhere, and there are hundreds of us using it so I'm sure it fouls their database in some minor way. Most amusing is the number of cashiers who will actually believe that's your number.

Trivia alert: Area code 321 is Cape Canaveral area, they changed it during the Apollo program.

Expand full comment

Not everything needs the additional expense of multifactor authorization. Your building's MDF room? Sure. Access to the copy room? Probably not. If you've ever used a prox card to open a door then you've used security provided by an RFID, it's essentially the same tech with a different package.

Expand full comment

Different frequencies in use, and the card size is HID's standard. It can be shrunk down smaller than a dime and still function perfectly well, and in fact they sell access fobs that size. An implantable RFID chip uses a different frequency than a standard prox card, but HID sells prox readers that include that frequency so this company's chip could certainly be used for access as well. They're more expensive than a standard prox reader, which is why they're not common.

Actually you have it backwards. In almost all of the hundreds (thousands maybe?) of sites that I've helped secure the main entry was the lowest security of a site. Normally you're just entering a lobby/vestibule and have additional access points between there and any higher security location. Other exterior doors might have higher security, such as utility rooms and EEO (emergency exit only) doors.

What cheap POS cards are you using that you can see though them?

Expand full comment

Oh, by all the gods, you have no clue what you're talking about while I've been in the physical security industry for 16 years and until I retired in October was known as one of the leading security engineers in the Puget Sound area. Read up on 'defense in depth' and 'security zones'. if you're actually interested. Security is a fun and challenging career, I've had a great time.

You stop the basic unauthorized person at the front door, generally anyone in the company can get into the lobby/vestibule. Beyond there you start adding layers of security, who can get past the lobby, who can get into the corridor where the server room is, who can access the server room, who can unlock server rack doors, etc. It's not uncommon for cardholders in Microsoft or Amazon or Facebook to have 30+ access levels assigned, granting access as wide as all building lobbies in North America or as fine as a single server rack door. Access modes will vary from PIN only (almost never used) to Card Only (the most common) to Card & PIN (normally used on server and MDF rooms) to Card & Bioreader (fingerprint, iris, palm geometry, etc.) for the highest security sites. Steal a card and it might get you into a building (if you know which buildings they have access to), but it won't get you into any secure areas. Your face better match the photo on the card though, since the larger enterprises require you to carry it exposed to view.

A standard RFID can be read from over 500 feet away with a reader built from off-the-shelf components costing under $1000, by the way. The DefCon black hat hacker convention used to have competitions to do it. (Bluetooth was worse, a connection can be made from over 2000 feet.)

Expand full comment

Depends on the quality of your security staff and their dedication to implementing the rules. Admittedly most places never check, but several of my customers were extremely strict about reviewing the badge of every person entering (mostly financial institutions and AWS). You are not getting past their security desk if you don't show your badge.

An eighth of an inch of skin isn't going to make much difference in how far an RFID can be read from. Maybe now it can only be read from 480 feet instead of 500, big deal.

I didn't "run security", I designed, configured and maintained the systems for 4 of the 5 largest integrated access control/video/alarm systems on the planet, am certified in half a dozen access systems and eight video management systems, have set up the security for the executive suites of multibillion dollar companies, and tested cutting edge equipment for international manufacturers. So yeah, I know what the frack I'm talking about.

Expand full comment

Not able to admit you're wrong? OK, so be it.

Expand full comment

The worry is "Oh, no, they got the CEO!" That's why they have safe rooms hard wired into the security system and one-way escape hatches. They don't let commoners set that shit up.

Expand full comment

Not quite OT, but endearingly nerdy-- I always wondered why the Federation didn't just implant subcutaneous communications devices, since those people were always getting into so much trouble losing their little communicator pins. I mean, they have faster-than-light travel and they can't figure out unlosable comms tech?

Expand full comment

I can never remember if I used a capital letter or not in “Password123.”

Expand full comment

I still think junior high school hackers are going to have a field day.

Expand full comment

I foresee companies bombarding people with advertisements for items they have already bought.

Expand full comment

did you hear? a couple of Belgian hippos were diagnosed with COVID recently

Expand full comment