RFID Injection Required for Datacenter Access 551
user24 writes "Security focus reports that RFID injections are now required for access to the datacenter of a Cincinnati company. From the article 'In the past, employees accessed the room with an RFID tag which hung from their keychains, however under the new regulations an implantable, glass encapsulated RFID tag from VeriChip must be injected into the bicep to gain access ... although the company does not require the microchips be implanted to maintain employment.'"
Comrades... (Score:5, Insightful)
...and the Comrades marched rank and file into their working facility, while the Big Brother telescreen carefully scanned each implanted chip...
Big Brother (Score:4, Insightful)
It's a video surveillance company. You work in the data center, you become Big Brother.
Re:Big Brother (Score:3, Insightful)
Remember what our hero did for a living in Nineteen Eighty-Four? He worked at the Ministry of Truth, editing old news articles and throwing inconvenient facts about the past down the memory hole.
Biceps? (Score:3, Funny)
Re:Biceps? (Score:3, Insightful)
13:17 And that no man might buy or sell, save he that had the mark, or the name of the beast, or the number of his name.
The bicep is close enough to this to give me pause. I would *never* consent to anything like that. I am not necessarily a believer, but I'm not going to take any chances.
Besides, I don't believe in recreational surgery.
Re:Comrades... (Score:3, Informative)
I saw a representative from this company on Fox News yesterday (he was the IT manager) and he explicitly stated that participation was voluntary. Two employees had the implant, one of those was the CEO. The fellow being interviewed carried his RFID on his keychain.
A milestone (Score:5, Interesting)
Re:A milestone (Score:4, Insightful)
Lots of stuff has been done to monitor civilian employees: Drug testing, email snooping, time card punching, video monitoring, background/credit checks, etc.
Comment removed (Score:5, Insightful)
Re:A milestone (Score:5, Insightful)
--
Evan
Re:A milestone (Score:3, Insightful)
http://www.ralphmag.org/slave2.html [ralphmag.org]
http://en.wikipedia.org/wiki/Branding_(law) [wikipedia.org]
Re:A milestone (Score:3, Insightful)
Wrong. TFA specifically states:
Re:A milestone (Score:3, Insightful)
Ma
Re:A milestone (Score:4, Insightful)
These things could be negated by RFID chips with rolling codes or read/write ability but these are not commonly available in the glass capsule RFID chips. I'd give good odds that this company is not pushing the boudaries either and has the standard one-id versions.
Bear in mind that RFID devices are operating on the limits of what power can be obtained from a fairly weak power source in the first place. Any extra complexity has a real impact on the operational range.
Rich
Comment removed (Score:4, Funny)
Maybe not such a milestone (Score:5, Interesting)
This may not be exactly the same thing, but it's somewhat of a precedent: A few years ago, after a mammogram, my wife had a biopsy to check out something "suspicious". It turned out to be nothing important, though.
Some time later, she had another x-ray at a different place, and she saw that the image had a visible object at the site of the biopsy. She was told that it was a small piece of plastic left behind during the biopsy procedure, and that this was a fairly common thing. Sort of a "We were here" tag.
Whether it's an RFID chip we don't know. But at least some medical people are already implanting small "innocuous" things without mentioning it to the patient. And there have been stories of medical uses of RFID chips to help avoid the common problem of misidentifying a patient.
It's easy to put such things together. If you've had any "penetrative" medical work done in the past few years, there's a good chance that you're carrying an RFID chip now.
Re:Maybe not such a milestone (Score:4, Insightful)
I almost didn't read it when I noticed the -1.
Maybe the meta-mods will catch it, or maybe not.
Actually, using a second breast as a control for the other may not be all that great an idea. Usually they are slightly different in size and shape, as are most men's testes. And both breasts get exposed to anything in the blood stream.
What you obviously want is a second woman who is a match for the first in as many ways as possible. Then you compare all four breasts.
Lessee what sort of mod this gets
Yeah that was ironical. (Score:4, Funny)
And then there is the whole magic marker circumvention method that is soon to be discovered (possibly within this thread).
Oh wait...
FTA: Ironically, the extra security sought may be offset by a recent discovery of Jonathan Westhues, where the security researcher showed the VeriChip can be skimmed and cloned, duplicating an implant's authentication.
Yeah... I can't wait for the Diebold spin on this story.
Typo (Score:5, Funny)
Seriously, which genius thought putting a remotely readable barcode in an employees arm was ever going to be secure? Must the IT world really repeat the mistakes of the 80's garage door opener industry??
Re:Yeah that was ironical. (Score:5, Funny)
Hey, doesn't anyone remember... (Score:2, Insightful)
I think I'll prestate the sentiments of Slashdot. (Score:5, Funny)
Re:I think I'll prestate the sentiments of Slashdo (Score:3, Funny)
I think most slashdotters will have a problem there.
Re:What about the transhumanists? (Score:3, Funny)
And you think so 3-dimensional. I'll take a hypercube...
You gotta be careful with those. You think refolding a roadmap is tricky...
I refolded my hypercube in the wrong order and ended up in Poughkeepsie in 1878. That was embarrassing.
I especially like... (Score:4, Insightful)
At least, it doesn't need to be cut out to be used by a sufficiently motivated attacker.
Re:I especially like... (Score:2)
Re:I especially like... (Score:4, Interesting)
Paranoid? Yeah, a bit. But then I've never had to worry much about someone intercepting my phone calls or passwords over the air.
On the main topic, if no one is going to be fired for refusing, but part of their job is working on equipment in the datacenter, what happens?
Re:I especially like... (Score:5, Funny)
Paranoid? (Score:5, Funny)
Paranoid? Not until you do all of your computing inside a Faraday cage. Until then, you're just a TEMPEST in a teapot.
Re:I especially like... (Score:3, Insightful)
Regardless of manufacturer's claims of "short ranges", hackers have successfully read RFID tags at distances of up to 69 feet. That means a van stopped near the office building's door could pick up a card being energized by the door's reader.
Smartcards are definitel
this is interesting... (Score:2)
hahaha! Now implanting RFID tags is somewhat scary. How do you get it out without taking out a chunk of your biceps?
Re:this is interesting... (Score:2)
Re:this is interesting... (Score:2, Funny)
Re:this is interesting... (Score:2)
In any case, this sounds like fake-security. What reason would having an RFID tag attached to a person would make this more secure than just carrying a card. It's probably more an attempt to watch where employees go or something.
does not require the microchips be implanted (Score:5, Interesting)
They won't require you to implant the chip to keep your job. But how long can you keep your job if you can't access the datacenter?
Re: does not require the microchips be implanted (Score:3, Funny)
Depends on how good you are at hacking the datacenters firewall so you can get in to do your work.
Re: does not require the microchips be implanted (Score:3, Interesting)
Re: does not require the microchips be implanted (Score:3, Informative)
uh, no. (Score:2, Interesting)
At the same time, where does this take us? More importantly, what new kinds of abuse will this bring about? I'm a bit spooked.
Resistence is futile (Score:2)
What is next? Embedded computers that control and monitor where we go and what we do?
This may sound like paranoia but the problem with these type of changes is that they are so gradual that we don't realize what we have lost till its too late.
Re:uh, no. (Score:3, Insightful)
Re:uh, no. (Score:5, Funny)
Re:uh, no. (Score:5, Insightful)
Maybe they're right (Score:5, Insightful)
Re:Maybe they're right (Score:3, Insightful)
Re:Maybe they're right (Score:5, Funny)
Re:Maybe they're right (Score:3, Interesting)
What's the difference, really? A government is a corporation of a sort: there to make money and power while giving the perception (as much as possible) of viable services. If the shit hits the fan on a global or national scale, there will be many corporations with resources which the government doesn't have. Really, the main distinction is that the government has guns - and there are many
Re:"The Mark"... (Score:3, Insightful)
Everyone should know so that they can act appropriately. For instance, what's the point in voting when Diebold will just hand the election to the highest bidder?
The monitoring should go both ways. Elected officials sh
Well, it's Slashdot (Score:5, Funny)
Re:Well, it's Slashdot (Score:2)
Damn, that's got to be some tiny implant!
Don't panic (Score:2)
Re:Don't panic (Score:2)
I mean seriously... If you work for the CIA, you're not allowed to tell anyone where you really work. You think they wouldn't implement something like this and then tell everyone to STFU about it?
Re:Don't panic (Score:5, Insightful)
I'm sorry... (Score:2)
Unless and until the pointy hair managers can guarantee that the RFID tag that they force me to implant in my body will never be used for purposes other than those which I agree to, I will refuse to succumb to their idioitic desires for control of my body.
Before you ask, any company those does this to its employees, is a company I would never even consider working for.
I always knew Management worked us like dogs... (Score:3, Insightful)
What's next, kibble in the break room vending machines?
Why? (Score:5, Insightful)
What's the security benefit to injected RFID?
BTW, this [spychips.com] is the original article.
Re:Why? (Score:5, Insightful)
So in the end, the RFID makes things worse by imcreasing the level of access to the device itself.
Re:Why? (Score:3, Informative)
Who says you need to clone it? Just have (say) a babe in a bar next to the chipped person with a hidden device imitating the door reader, and someone at the door with a device
Re:Why? (Score:3, Informative)
That wouldn't work with the passive ones. They burst, then listen. There is a small guardband, but if your induced delay is more than 40 ms or so, the system I worked with wouldn't hear the response. It is not correct to say that they are transmitting all the time. They are pulsing constantly. If the system is des
Re:Why? (Score:3, Insightful)
It probably gets the CIO a bonus. That's the way these things work in corporations. It has nothing to do with whether it's effective or not. It benefits the ruling class and you have no need to know why or how. Do it or hit the road.
Re:Why? (Score:4, Funny)
angle entirely.
Re:Why? (Score:5, Informative)
If your threat model is someone walking into the data center with a lost/stolen/borrowed badge then requiring them to be injected does address the threat. But then so would issuing tokens in the form factor of a ring, except for the "borrowed" token problem.
So, if you don't know that RFID chips can be cloned, if you don't know that they transmit the same number every time they're pinged, if you don't know that they can be read remotely and cloned at leisure, and if you have contempt for your employees and are oblivious to human rights, you might come up with a requirement for injected RFID.
I sincerely hope that whoever came up with this isn't one of my colleagues in security consulting.
Interresting Question (Score:4, Interesting)
Veri Chip [verichipcorp.com]
Veri Guard Brochure [verichipcorp.com]
What is quite frightening is that they purport on site tracking up to 15 foot (5 meter!). This is WAAAY beyond the distance the RFID-CHip-are-ok-sleep-safely-it-won't-be-abused-
Religious Objection (Score:5, Insightful)
Re:Religious Objection (Score:5, Interesting)
I would imagine it would be just like the article stated: They can't/won't force you, but if you refuse, you don't get acccess to the datacenter. Just like the Mark of the Beast "... no one may buy or sell except one who has the mark or name of the beast, or the number of his name."
Re:Religious Objection (Score:4, Informative)
It seems to me that it would be a little hard to claim that this, or a good many of the other things that people have pointed too, constitutes the mark of the beast.
13:16 He causes all, the small and the great, the rich and the poor, and the free and the slave, to be given marks on their right hands, or on their foreheads;
13:17 and that no one would be able to buy or to sell, unless he has that mark, the name of the beast or the number of his name.
I'm not sure what edition the above is from but it is plain English and close enough for this discussion.
13:18 Here is wisdom. He who has understanding, let him calculate the number of the beast, for it is the number of a man. His number is six hundred sixty-six.
On a side note: always wondered about making a program to compute all the possible combinations of the Jewish alphabet that adds up to 666 (filtering out all the nonsense ones of course). Someone must have done this somewhere already.
Merlin.
Re:Religious Objection (Score:3, Interesting)
Since the book of Revelation is in the New Testament not the Old Testament, it doesn't make sense to think 666 is as a hebrew number. Instead, you should picture it as a roman numeral, in which case it is the roman equivalent if 54321 (500+100+50+10+5+1) or DCLXVI.
Re:Religious Objection (Score:3, Interesting)
Re:Religious Objection (Score:3, Funny)
Re:Religious Objection (Score:3, Insightful)
This isn't the same as the mark of the beast, however it DOES prove that indeed there is no new idea under the sun
Anyway, I don't think the mark of the beast is something physical (i mean how could they control your thoughts right)... Instead I believe it means that it is in their minds (what they think) and in their hands (what they do, their actions)...
So the world will think and do a certain way, after the beast... my input lol
Still, this is an interesting thing for
Escalation (Score:5, Funny)
Seriously, if he wants in that bad I'd rather he just beat me up and take my keys.
Re:Escalation (Score:5, Insightful)
Honestly .... (Score:5, Funny)
Many years ago I found myself in a turf war with the 'operators' who looked after our mainframe .... in their view system programmers weren't allowed to touch the hardware ... anyway as a response we instituted a physical penetration analysis of the machine room .... the number of different ways in we found was in the mid teens - some involved children (or small adults) climbing thru ducts or thru the windows we gave people their printouts through, others involved finding ways in under the false floor (there were several) - but the one that took the cake was when we noticed that all the hinges on each and every door to the room was on the outside ... anyone could show up at any time and steal the doors
Chipped by your boss ?= chipped for life (Score:3, Interesting)
If not, you're likely to be tracked not just by your employer but by anyone else with an RFID scanner. There really ought to be an activator button or device that needs to be pressed or broadcasting to make such a device safe for the implanted.
This will only last about as long as (Score:5, Insightful)
For less than they paid for the RFID system, they could have hired someone to log people in and out of the data center. Additionally, I question the validity of a system that restricts access to only those with an implant during disaster situations (fire, flood, and worse) where access rights and needs are rather different than in normal situations.
Good security costs a lot of money, and you cannot replace the human element in the security chain. The RFID schemes won't prevent anyone following an authorized person into the data center, unless there is physical restrictions that would make working in the data center dangerous during emergencies. In this case, the $10/hour guard is more flexible and cheaper than the high-tech answer, and more respectful of humans in general... or at least I think so
I'm probably going to get modded as a troll, but.. (Score:3, Interesting)
I don't think we can call this public attention. Seriously, if our attention actually mattered in changing any policy, don't you think Microsoft would have been extinct by now and that DRM and other things like [insert what Slashdot users think is evil here] would be under public scrutiny? The cliched Joe Sixpack will probably never hear of this; heck, I don't think Joe Sixpack knows what RFID is.
Re:This will only last about as long as (Score:3, Insightful)
Many datacenters have mantraps installed that permit only one person in at a time to prevent drafting. For emergencies there are doors that will open allowing rapid egress of the facility bypassing the man traps normally used to leave and enter the facility.
The security team that thought implanting an rfid tag into the employees provided an increased level of security should be fired. About t
Just a marketing gimmick (Score:5, Insightful)
IANA American, but I hope that the goverment would do something if this was forced on the employees working in the datacenter. After all, what can this achieve which cannot be done with a retinal scan, RFID tag combo? If the criminal can pass the retinal scan, can't he also pluck the RFID from the employee and stick into his arm?
Huh..... I would hate it if someone said they are gonna put a chip inside my body. Wait till someone gets hurt and the company gets sued for a million dollars.
Heh. (Score:5, Funny)
How to get yourself targeted by hackers. (Score:2)
Step 2: Require Step 1.
Sounds like a publicity ploy (Score:5, Insightful)
Its harmless except for Joe and Jane Datacenter who have to go in for some minor surgery on the weekend to keep their jobs. I hope this "Golden Casino" mentality stops right here after these people get exposed for the dumbasses that they are. Hell, even in the article they did not know the weaknesses of RFID authentication.
I woulndt doubt if this was 100% publicity stunt. I wonder how many people even have to access the datacenter. Depending on the company size it could just be one or two people. Of course all the executives, security, etc will have the old keycards that will work just fine.
Wait, isn't this worse security? (Score:5, Insightful)
So before I needed to get close to an object (whatever had the rfid tag) which under normal circumstances an employee would not be carried around (say they were going home or something) or could have it in a reader blocking case. Now, I simply need to get close to an employ anywhere at any time to copy their data.
Fucking brilliant, now I can steal their tag without anyone ever knowing, whereas before they'd know it was gone in a reasonable amount of time (I'd have to steal the physical object most likely).
Frog in boiling water (Score:3, Insightful)
Re:Frog in boiling water (Score:3, Insightful)
Re:Frog in boiling water (Score:3, Interesting)
It seems that a reliable method of establishing someone's identity is indeed necessary for a modern society to function. The problem is how to achieve this goal while limiting the probabilit
I remember when Asbestos was just good insulation (Score:4, Insightful)
Now we know asbestos kills.
What will be said of placing RFID tags into our bodies 50 years from now.
Some risks are worth taking, there is no question. For me, this is not one of them.
Re:I remember when Asbestos was just good insulati (Score:3, Informative)
My reference to asbestos, once used as insulation in homes/buildings, was to note the now well known effects of cancer caused by asbestos.
Perhaps in light of this information, my previous post will seem more complete.
Did you read the story? (Score:3, Informative)
The story reads that it's not required to maintain employment. But, then again, most jobs in the US are "at will" anyway...
Re:The solution... (Score:2, Insightful)
Re:The solution... (Score:2)
Me too. Those cables are way overpriced. :-)
Re:From TFA (Score:5, Insightful)
And anyone who requires access to the datacenter to do their job, such as operators and sysadmins, cannot DO their job unless they get the implant. And if they cannot do the job, how are they expected to maintain employment?
I suppose the official reason for termination would be "uncooperative attitude." Certainly not "he refused to get chipped." Or maybe the company will concentrate on ways to make the employee so miserable, he just quits. Problem solved.
Re:From TFA (Score:5, Funny)
They have no problem to do their job without physical access, they installed telnet on all the servers.
Re:From TFA (Score:3, Interesting)
And anyone who requires access to the datacenter to do their job, such as operators and sysadmins, cannot DO their job unless they get the implant. And if they cannot do the job, how are they expected to maintain employment?
I'm sure the company has other jobs which the people are qualified for and do not involve access to the datacenter. Only two employees got the chip, so surely there are available job positions which don't involve getting chipped.
I suppose the official reason for termination would b
Re:From TFA (Score:3, Interesting)
Sorry, but most of the images from those tapes run through time-lapse vcrs don't stand up in court. Heck, they aren't even useful enough to identify the SEX
Re:From TFA (Score:5, Funny)
To say nothing of employee's arms being taken and used to gain access. Just need to have a large plastic bags to put the body part in to keep it from leaking all over the hacker. Gives a whole new meaning to the term hacker.
I wonder if these are the same implants they use on dogs. If they are it's no wonder they are insecure. And I don't see how this improves security much if any. It would be better to have a two man rule enforced by the access system, using two factor authentication, and have cameras monitoring the access into the cages. Securing a data center is not that difficult. It can be costly.
One last thought, what does the company do if those implanted leave or are fired? Pay out the insurance premium for dismemberment when they remove the arm of the employee? I guess you know you are being fired when the security guard shows up at your desk with a box for your stuff and a hacksaw to revoke your access.
Re:From TFA (Score:3, Insightful)
Maybe revoke the authorization for that particular RFID device?
Re:increased risk to employees (Score:3, Insightful)
The whole idea is about as silly as it can be. While it sounds hi-tech and probably would impress most managers it does nothing NOTHING to improve security.
Although it might be good to use as a method to tag point haired bosses so we can track their movement throu
Re: (Score:2)
Re:Spell Check? (Score:5, Interesting)
Re: (Score:3, Interesting)