There is even a saying that furries run the internet.

Is there some study to explain why? Do they feel more safer pretending to be human sized...furry animal?

Not OP, but I think furries are weird. You can do whatever you want, but I’ve never met a furry I liked. They also insert their weird fetish into everything they touch.

Was just reading something along those lines:

https://infosec.exchange/@millie/115719943870742405

> We need to normalize declaring software as finished. Not everything needs continuous updates to function. In fact, a minority of software needs this. Most software works as it is written. The code does not run out of date. I want more projects that are actually just finished, without the need to be continuously mutated and complexified ad infinitum.

Its one thing to have a skid come in going "I wanna hack the RFID on the gubbmints's doors how can i do that?"

Versus "we forked the firmware to include a wide range of pentesting tools"

And then get banned for even saying the alternate firmware.

And seriously, this little thing is a wonderful hacker multitool. You can seriously fuck shit up with the hardware they included. For fucks sake, thats WHY they created it.

I'm currently using https://momentum-fw.dev/

Works well, and compiling modules like the epaper hacker tool is easy.

https://github.com/i12bp8/TagTinker

Nyet.

This. Many legit, but questionable features blown out of proportion already caused many issues with regulators who just don't want to get into details, but just delist from sales/ban the device.

And once you start talking about "jamming" and other 1337 h4x0r stuff - which is straight up illegal and can get you into trouble - on official platforms, don't get offended when that gets removed.

Keyfobs absolutely should use a secure challenge-response protocol in order to prevent cloning. Unfortunately, it's extremely common for RFID devices to simply use the tag ID which is trivially cloneable. Many of the systems that make some attempt at security still fail by using a broken protocol or a flawed implementation.

Some cards don't have any form of security. For example Konami "e-amusement" cards are just an ID number, which is also written on the back of the card. It is a username so to speak, the password is the PIN you enter when you start the game.

Some cards use some kind of challenge-response but are weak and are easily crackable.

Some cards have an anti-copy protection based on rolling codes, be careful with these. The idea is that when you use it to, say, open a door, the card sends a code to the reader and if correct, that code is burned and the reader replies with the next code, which is stored in the card for the next time, making every other copy (possibly including the original) unusable. If the card emulator doesn't store the rolling code, you are completely locked out.

Some cards have a proper challenge-response mechanism that works and can't be easily copied.

Oh yeah that’s how you’re supposed to do it. But it’s entirely possible to set up a system that uses RFID key fobs that uh, doesn’t.

In the case where it was most useful to make copies they did eventually replace the system with one where the keys weren’t copy able. Which was better!

I don’t know a whole lot about RFID, but some of the most basic cards can be copied very easily. When scanned, the reader always reads the same bits.

I believe there are some more secure cards, like Mifare DESFire EV3 that do provide some security. You’d be shocked how insecure most RFID readers for security cards are.

RFID keys vary from utterly dumb ID-based, to hackable challenge-response, to actual NFC smartcard (very rare).

Some of that can be trivially cloned.

Most dont :)

Depends on where you are. Newer systems are resistant to attack, but not everywhere has upgraded to newer systems.

> I don't think I would use it enough to justify the investment

This is not a rational purchase - most of the rule breaking done with the zero is for fun or convenience, rather than being truly illegal.

It used to be more fun before the hotels started handing out NFC unlocks with your phone.

Still, being able to send each other a key for a hotel room on Signal is a nice trick if you are traveling with a sufficiently tech savvy group of people.

You can't even clone you garage door opener key anyway.

Flipper Zero and its clones have always been pseudohacker nonsense. Fun little party trick I suppose.

Nope! Only occasionally. But it’s handy on those occasions.