Tuesday, March 3, 2009

Geek Oceans 11

I have been reading up on card counting in Blackjack for fun. It turns out that you don't need to be a genius, you just have to memorize lots and lots of tables. The math theory behind it is pretty interesting. I will want to test my counting skills on my friends soon. Anyway, it turns out that some casinos now are embedding RFID in their chips. This got me thinking. RFID is not nearly as secure as some people think it is. What if you took some RFID chips in your room and read them with your laptop. The RFID radio will be forced to puke up its ID. Then all you need to do it get a bunch of RFID cards and spoof chip values. They probably assign each chip an individual ID number and encode its value in it. This lets the house know how much you have in chips and your betting rate, etc. This is also a way that they can tell whether or not you are counting cards. I am interested to know that if the system they use keeps track of anomalies like 2 chips reporting identical IDs. If it ignored this, then there is no way a human would know that several chips are in 2 places when there are hundreds of thousands of chips. If this is the case, then someone with several RFID cards spoofing chips in their pocket would essentially hide your betting from the house. You could also perform a DOS attack by flooding the reader with IDs. This would draw attention, but the security guys would think it was a hardware failure and ignore data from that reader. By selectively allowing and denying access to RFID IDs that represent different chip values, you could make it appear that you were betting much more or less than you actually were.

No comments:

Post a Comment