24C3 Toying with barcodes


[FX] from Phenoelit gave an entertaining talk about barcode security. He covered both how the systems are implemented and how they've been exploited. The first example was a parking garage in Dresden that issues non unique barcodes for the unlimited passes that hotels give out. Anyone code print out an image of that particular code and park for free. German grocery stores have automated machines that refund you for your empty beer bottles. The barcode generated just states the refund amount (5 digits) that you'll get at the register. Just stick the barcode under something like a six pack and it'll scan even without the cashier seeing it.

Check out the video to find out more silliness involving DVD rentals, boarding passes, asset management, and SQL injection via the scanner. You can even find higher res versions in the 24C3 media archives.

Recent Posts

Reader Comments

(Page 1)

Add your comments

Please keep your comments relevant to this blog entry: inappropriate or purely promotional comments may be removed. Email addresses are never displayed, but they are required to confirm your comments. To create a live link, simply type the URL (including http://) or email address and we will make it a live link for you. You can put up to 3 URLs in your comments. Line breaks and paragraphs are automatically converted — no need to use <p> or <br> tags.

Your name (required):

Your email address (required, will not be shown to the public):

Your site’s URL (optional):

Do you want us to remember your personal information for next time?
   
Add your comments:

hack a day serves up a fresh hack each day, every day from around the web and a special how-to hack each week.

send us your hacks

have a hack you'd like to see here? tell us about it

Hacks
aibo hacks (1)
cellphones hacks (43)
cons (30)
contests (18)
digital cameras hacks (48)
downloads hacks (8)
gameboy hacks (28)
google hacks (5)
gps hacks (28)
HackIt (13)
handhelds hacks (49)
home entertainment hacks (106)
home hacks (8)
how-to (8)
ipod hacks (73)
laptops hacks (37)
laser hacks (27)
macs hacks (34)
misc hacks (600)
news (12)
pcs hacks (126)
peripherals hacks (128)
playstation hacks (44)
podcasts (8)
portable audio hacks (41)
portable video hacks (24)
robots hacks (71)
tablet pcs hacks (3)
tivo hacks (6)
tool-hacks (4)
transportation hacks (66)
wii hacks (12)
wireless hacks (74)
xbox hacks (45)

resources

rss newsfeeds

Powered by Blogsmith