I got an nfc chip in my hand, now what

More and more early adopters of technology are getting NFC implants (into their hands) these days. But what are these chips good for?

This talk will look briefly into the implant technology, its practical applications and also evaluate some of the risks associated with getting an electronic item embedded in your body.

Transcript

1. I got an NFC chip in my hand, now what Shahzada Hatim Eberry (Nordic Choice Hotels) Devoxx Belgium 2019
4. About me • Shahzada Hatim (@geoaxis) from Stockholm Sweden. • Software Engineer at Eberry (Nordic Choice Hotels). • Hardware hacker by hobby • I like to learn and share info about new technologies. • Opinions are my own.*
5. https://nordicchoicehotels.com https://eberry.info
6. Why am I here. • This is not an in depth talk but we will discuss in brief • Technology • Applications • Risks
7. Radio Transponders https://howtomechatronics.com/tutorials/arduino/rfid-works-make-arduino-based-rfid-door- lock/
8. Microchip Implants • Transponders encased in silicate glass • Sub-dermal • Glass casing is bio-compatible (body just ignores it) • 1998 - First experimental use • 2005 - Long term use • 2009 - First virus https://en.wikipedia.org/wiki/Microchip_implant_(human)
9. NFC vs RFID • Technically NFC is a subset of RFID technologies , but in common language there is a distinction • RFID invented in 1980s and NFC in 2002 • RFID stores simple data. NFC bit more complex data • RFID can work at distance of many feets. NFC is in centimetres.
10. NXP Ntag216 • 13.56MHz ISO14443A & NFC Type 2 • 7 byte UID and 886 bytes of user read/write memory • 10 year data retention. Rated for 100k writes per memory block. • Encased in 2.1mm by 12mm bioglass with non-toxic epoxy • Pre-tested and pre-loaded into sterile injection assembly • No “anti-migration” coating means easy removal/replacement https://dangerousthings.com/product/xnt/
11. Applications • Transportation • SJ / SAS (experiments) • Payment /Vending Machine • Epicenter Stockholm • Access Control • Epicenter Stockholm
12. Usability Problems • NFC readers not good for cylinders underneath skin. • NFC antennas on phones vary alot • Better with new phones (and support for read/write in both iOS and Android) • You can put one type of data. • I can show you how it works later. It has never worked on the first try when I want to show people.
13. Privacy Risks • NFC is not easy track from range (RFID can be tracked).* • It is NOT a GPS transponder or has 5G. • You are free to write data that you want. But there is a fixed UID present. • How your data is used by others is important consideration. • Legislations against forceful or coerced implantations. • EU think tank tank document on “The use of chip implants for workers. http://www.europarl.europa.eu/thinktank/en/document.html?reference=IPOL_STU(2018)614209
14. Security Risks • Make sure to secure your key with password (RickRoll) • Make sure to remember the password • Most examples of data store I have seen is plain text (SJ Prio code) • New Desfire chips (with 3DES hardware cryptographic engine) will offer more security
15. Health Risks • Cancer? • Infection! • Breaking bio-glass?
16. https://forum.dangerousthings.com/t/tests-weve-performed-on-our-x-series-tags/474
17. Why NFC chips are a bad idea https://www.sogeti.se/utforska/bloggposter/why-nfc-chip-implants-are-a-bad-idea/
18. Look at me, I am so cool https://www.youtube.com/watch?v=NqHpxzXhOyk https://dangerousthings.com/product/xled/
19. Summary • Implant technology (for humans) is still in its early phases. • There are not many novel applications. • Get new version of NFC implant if you really want one (8kb Desfire for example). Upgrade will have down time. • Get professional help to inject it. • Don’t do it to look cool. Have a mind set of experiment. Experiments can fail. Be prepared. • Understand the information that you share with the world. You are being track all the time.
20. Bedankt/Merci/Tack/ہیرکش • Slides https://speakerdeck.com/geoaxis • I will be around • Eberry is hiring https://eberyy.info
21. Resources • 5 NFC tag types: https://www.dummies.com/consumer-electronics/5-nfc- tag-types/ • Hannes Sjoblad : How a chip implant can improve your daily life https:// www.youtube.com/watch?v=zjA6aKRhsjE • Should you get an RFID implant: https://www.youtube.com/watch? v=Gs0bVs8QuWE&t=54s • SAINTCON 2019 - Jason Gale - NFC & RFID Bio-Implants: For Fun and Profit : https://www.youtube.com/watch?v=CaYK-tNvG5o