this episode of the mountain road
brought to you by our friends over at
ring head on over to ring.com slash home
pick up the welcome kit including the
video doorbell - in the chime Pro and
start building your own custom security
solution for your home alright we're
back with red team Alliant ml buck and
Eve nice oh my gosh this has been like a
crash course first we learned all about
magnetic stripes and about how
essentially they're barcodes we learned
that RFID chips are a little more
complicated
because they're more like a person
speaking a number because there's back
and forth we learned about how they draw
power from the antenna when it gets
close to whatever these two I did a
thing and we learned that you could
either put a bug in this to capture the
number or the old credentials and print
out a new one of these write a copy yeah
that's right here's where things get
really scary you guys were talking about
what you called a drive by the idea that
out on the street yeah deep shot a guy
took his card as I understood it is
somebody on the street with the card in
the pocket or the badge on the side you
just walk past them and capture their
info yup yeah so these readers right we
talked about how they work when they're
attached to a full system but the reader
doesn't care what it's attached to if
you take a car motor out of the car it's
still a motor it's gonna generate power
even if there's no drivetrain if it's
just on a work test bench you can take
the reader off the wall as long as it
has power
it'll fart card data out the back end no
matter what it's connected to
it's a very technical term do you guys
ever put like little sounds where
instead of a beep it makes a fart noise
for people that would be amazing is the
disappointment so with these readers it
seems like you have to get awfully close
you just to activate it yeah would you
be like rubbing up against someone or if
you use one of these readers then yes
you would but we have a different method
and we kind of use some of their own
stuff against them so we've taken this
now this is a reader you might have seen
something that looks like this when you
go to like a parking garage or an
airport or something anything with a
gate arm oh and and of course you know
if you're in a car if you're in a truck
and there's some and like take your card
and like like lean halfway out the
window you got to have a little bit more
range right so this is what this is made
for that purpose as you can see it's
physically much larger than the standard
reader and that's because inside is a
huge antenna so as you can see here this
entire green thing around the outside
that's the antenna oh wow yeah okay so
that along with a lot of other you know
fancy circuitry is able to extend that
range to be much longer range now with
long range we're not talking about like
you know a 10 15 feet but it's gonna be
much longer than this and we're gonna
show you exactly how yeah okay so so
what are the different parts here we we
got I recognize a battery those are
factory you've added see so few I have
yes good I so all the original stuff is
everything in this kind of l-shaped part
of the circuit board there now we've
added a couple of very very basic things
we have some lithium-ion batteries and
then a boost converter to bring up that
voltage to 12 volts that this uses and
then we have a little Arduino to record
that card number information so this is
the equivalent of the ESP chip yes it
just stays right all in itself continue
it saves it to an SD card and I got a
little Bluetooth transmitter in there
nice so we're gonna be able to see on my
phone as soon as we get a critic oh man
this is the best slash worst of all
world it really is this thing as a
mobile unit you just walk around and you
could just grab everybody's card info no
I do like the idea of a mad deep we're
in a bandit mask we've had a job once
where somebody literally had like a nice
company shirt and they said do you
qualify for free coffee today and it was
like a whole like a booth and they said
here try it they were just touching
people's badges and we occasionally say
yes and then give them a coupon that did
nothing at the local business oh that's
I want to see what this looks like in
action let's do it let's go ahead and
close her back up it looks like a scale
I thought it was a weighing scale when
you brought it in it's the new Wii Fit
balance
it has some rubber gaskets that have to
seal to well that's smart so you don't
have to actually scroll anything in yeah
and these are weather rated right so
that's why they have that oh yeah now
normally there's not a screen on there
we've added that just so you can see
more plainly all the cool stuff that's
happening with so we're gonna go ahead
and turn it on and again this is not all
factory we've added our own power switch
and our own charging circuits got room
charge it whatever you like hold on it
just hit me is this a commercially
available product the reader itself is
but this whole thing all together is not
notification is a aftermarket bill it is
guys hid would get mad if they started
appearing on redtube tools we're gonna
go ahead and turn this on and it's gonna
take a few seconds you hear that
clicking yeah yeah so this was some
internal relays that are being used to
tune the antenna and now it's set so if
you'd like go ahead and grab this car
sure and slowly bring it to the reader
alright so I'm imagining walking around
on being in a subway and I'm trying to
figure out where it would be kidding
that's it got card it said Scott card
I've got card it says hunting wabbits
yes Jayson you want to be the nefarious
bad guy this is a normal laptop
interesting principle yeah Illustrated
oh yeah look at the angles yeah those
inductive antennas want to work in a
field with each other then being
parallel helps a lot more ah so it
matters that he had it kind of tilted up
let's make this a little more room all
right here we go we're gonna go ahead
and hide this guy put that in there
billion credentials if you're like in an
elevator that's what I was thinking will
it just start grabbing yes all of them
in the vicinity one after the other
yes and of course we're hearing a beep
that I would imagine that you oh I can I
can turn that off yeah yeah so so now
this is a normal bag but inside of it
is a cloner right I'm gonna start
monitoring on my phone for for
credentials and this way even if the
beep is off or we can't hear it I can
tell you when I ask credentials just
stand by I'm gonna connect to it hang on
a second I'm gonna get my wallet I just
realized this is right next to my wall
all right we're getting onto an elevator
together we're at a convention or
whatever we're gonna get coffee I just
kind of get next that was shockingly
easy there's no way I would have any
idea cuz it wouldn't make that beeping
press point it's nothing to print on to
an RFID card or as of now because you're
now more robot than man on your chip how
amazing is that might be could you bend
it it's making Pikachu thanks all right
how do we protect against that yeah 3d
actually I didn't even think about that
I just assumed well screwed is there a
way to protect against yes just like
with anything related to technology and
security the key is to always understand
the current limitations of old
technology and take a look at what
they've done with the new platforms to
mitigate those crazy wallets that are
like Faraday cages there's really not a
true Faraday cage because there's not a
true earth ground but yes they would
attenuate the signal and they help
remember when the car to help the wrong
angle to help yeah it's going to be that
multiplied so you'd have to really it's
a ladder's in walls game we could make
and more powerful antenna and then you
could make a better blocker honestly
that is the simplest and most achievable
solution but for companies that have you
know big budget the idea of using modern
credentials modern credentials that
support private keys so that readers
won't interact with credential that's
good as long as that implementation
isn't broken and then one day it will be
and then you do the next best thing you
know how like any new service that you
grab or a new software that comes out
like when it first comes out it's like
secure and then eventually like it gets
hacked same thing with credentials and
when new credentials come out for like
the first 5 or 10 years however many
years they're good
and then someone finds a vulnerability
and then like it's the game continued
ongoing arms race arms races yeah he
continues for everybody at home who
wants to learn more about all of this
stuff where should they go
Red Team Alliance calm happy to have you
in the class man you guys do live class
I bomb beeping again I'm gonna run away
I'm gonna abscond with this that guy
right jong-il it has been over a year
since i lured you away from Hollywood to
become one of our producer editors here
at the modern rogue first thing I tasked
you with was how to protect all of our
equipment when none of us are here I was
convinced you would come up with some
kind of highfalutin super expensive dude
with a utility belt yeah but you came
back with one word ring and the more I
asked I was like yeah but what about all
the intelligent smart locks that I have
ring works with them and then I was like
wait what about the ability to scale and
just give me your smart phone let me
show you the ring it's literally what it
was now we're at the point where we have
dozens and dozens of ring connected
devices all across the seven acres would
here at modern rogue world headquarters
it is awesome because even when I'm not
here when I know things are supposed to
happen
I filled my pocket buzz I'm able to open
up if I need to I could talk to people
who are delivering stuff and if my
pocket ever buzzes at a time I don't
like like at 3:00 in the morning when I
know nobody's supposed to be around I'm
able to open it right up and see oh
don't worry about that that's just one
of the foxes or the raccoon they all
take the poops that's there's a lot of
poops well that's a nice thing about
ring you feel like you're always there
you feel like you can keep a constant
sort of presence and know that it's fine
yeah I'll go back and I'll track the
history of stuff and I'll say like well
I don't remember that being there and
I'll be able to see from the motion
trackers and all that stuff I was like
oh it looks like John closed up and he
put this over here and I bet this is yep
here it is right here it's that virtual
presence that makes it so easy and the
amazing thing about ring is how modular
it is we started with just three cameras
and now we got a bazillion d of them
yeah and if you want to support the show
you can go to ring comm slash home and
you get their welcome kit which is
what's got the video doorbell - and the
chime Crow and the chime pro not only is
a Bing bong to let you know when people
are
but also it's a Wi-Fi extender and it's
an awesome way to get started with the
modular expansion of your own home
security network you're gonna feel like
you're home all the time all you got to
do is go to ring comm slash home Thank
You ring tick got cards I've got card
that guy okay and which is hunting
wabbits
yes which technology yeah where's car
did you grab so it'll read this one
it'll read this one too here