# Why wouldn't Mythbusters be able to do a show on RFID?

**URL:** <https://boards.straightdope.com/t/why-wouldnt-mythbusters-be-able-to-do-a-show-on-rfid/488705>\
**Category:** Factual Questions\
**Created:** [March 8, 2009, 3:47am UTC](https://boards.straightdope.com/t/why-wouldnt-mythbusters-be-able-to-do-a-show-on-rfid/488705 "2009-03-08T03:47:08Z")\
**Posts on this page:** 6\
**Page:** 3

<div class="post-metadata">

**Author:** ![Grumman](https://avatars.discourse-cdn.com/v4/letter/g/43a26b/32.png) [@Grumman](https://boards.straightdope.com/u/Grumman)\
**Post date:** [April 25, 2009, 12:07pm UTC](https://boards.straightdope.com/t/why-wouldnt-mythbusters-be-able-to-do-a-show-on-rfid/488705/41 "2009-04-25T12:07:33Z")

</div>

> [@HorseloverFat](#):
>
> Considering a determined party could take my password by just punching me in the face, well, whats more encryption going to do then?

It stops them taking your password without your knowledge. If you know they know, you can do something about it, like changing your password. Plus, it’s a lot harder to capture and interrogate someone than just waving a sensor near their backpocket.

---

<div class="post-metadata">

**Author:** ![HorseloverFat](https://avatars.discourse-cdn.com/v4/letter/h/8e8cbc/32.png) [@HorseloverFat](https://boards.straightdope.com/u/HorseloverFat)\
**Post date:** [April 26, 2009, 1:18am UTC](https://boards.straightdope.com/t/why-wouldnt-mythbusters-be-able-to-do-a-show-on-rfid/488705/42 "2009-04-26T01:18:17Z")

</div>

Sorry, I meant passport not password. The idea is that you can beat me and take my passport. Lets say you carefully extract the printed photo from it and insert your photo. Perfect plan? You’d be right if it didnt have an RFID. Now when you go to the border they scan the passport and the picture that comes up from the RFID data doesnt match the picture in the passport.

The idea is that these things have always been incredible insecure and poorly designed. The worldwide passport system is a mess. These are the first baby steps into securing it, and as usual, sadly, the neo-luddites and “perfect security or none at all” crowd are controlling the discourse. Perfect is the enemy of good.

---

<div class="post-metadata">

**Author:** ![Captain\_Carrot](https://avatars.discourse-cdn.com/v4/letter/c/f0a364/32.png) [@Captain\_Carrot](https://boards.straightdope.com/u/Captain_Carrot)\
**Post date:** [April 26, 2009, 1:35am UTC](https://boards.straightdope.com/t/why-wouldnt-mythbusters-be-able-to-do-a-show-on-rfid/488705/43 "2009-04-26T01:35:15Z")

</div>

> [@HorseloverFat](#):
>
> Considering a determined party could take my password by just punching me in the face, well, whats more encryption going to do then?

There’s an [xkcd](http://xkcd.com/538/) for everything.

---

<div class="post-metadata">

**Author:** ![gotpasswords](https://avatars.discourse-cdn.com/v4/letter/g/c57346/32.png) [@gotpasswords](https://boards.straightdope.com/u/gotpasswords)\
**Post date:** [April 30, 2009, 6:55pm UTC](https://boards.straightdope.com/t/why-wouldnt-mythbusters-be-able-to-do-a-show-on-rfid/488705/44 "2009-04-30T18:55:10Z")

</div>

[QUOTE=gotpasswords]  
The host handed him a packet of “initial research” that RSA had done on RFID. (Probably nothing that can’t be found at [RSA’s website](http://www.rsa.com/rsalabs/node.asp?id=2115).) He then warned Adam about the mind-damaging cryptography described in the reports and said something like “Don’t try this at home. These people (points out at us) are experts.”

I’ll keep an eye out to see if anyone puts this up on YouTube.  
[/QUOTE]

Not on YouTube, but online nonetheless…

Go [here](http://media.omediaweb.com/rsa2009/keynote_catalog.htm), select “View Interactive Webcast” under “Jamie Hyneman & Adam Savage” (Under Friday) wait for it to load and scroll out to about 28:10.

---

<div class="post-metadata">

**Author:** ![Cerowyn](https://avatars.discourse-cdn.com/v4/letter/c/82dd89/32.png) [@Cerowyn](https://boards.straightdope.com/u/Cerowyn)\
**Post date:** [April 30, 2009, 7:34pm UTC](https://boards.straightdope.com/t/why-wouldnt-mythbusters-be-able-to-do-a-show-on-rfid/488705/45 "2009-04-30T19:34:47Z")

</div>

Any exploration of security problems with RFID is waaaay beyond the scope of Mythbusters. How exciting television is it going to be watching a hacker work? Okay, for _most_ people, then?

When I worked on an electronic currency project back in the '90’s, one of the most fundamental gripes from consumers was that it wasn’t contactless; you had to insert your card into the reader before you could conduct the transaction. IIRC, even AMEX’s smartcard product died a quick and ugly death. Similarly, one major transit system we talked to wasn’t interested because of the lack of contactless operation. (Ironically, that same system has a mag-stripe based monthly pass, now.)

I’ve worked on several RFID projects since then, but in those cases the RFIDs were simply inventory management or product identification systems, not related to a person’s identity in any way. And, I agree with Sage Rat that anyone who puts anything other than a key to a database on an RFID is professionally challenged, and probably shouldn’t be trusted with developing anything more complex than basic HTML pages.

---

<div class="post-metadata">

**Author:** ![ftg](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ftg/32/2801_2.png) [@ftg](https://boards.straightdope.com/u/ftg)\
**Post date:** [May 1, 2009, 12:18pm UTC](https://boards.straightdope.com/t/why-wouldnt-mythbusters-be-able-to-do-a-show-on-rfid/488705/46 "2009-05-01T12:18:25Z")

</div>

> [@gotpasswords](#):
>
> Go [here](http://media.omediaweb.com/rsa2009/keynote_catalog.htm), select “View Interactive Webcast” under “Jamie Hyneman & Adam Savage” (Under Friday) wait for it to load and scroll out to about 28:10.

Great link, thanks. Confirms what what many have been talking about upthread.

One little thing to notice, Adam is dismissive of security through obscurity but of course RSA, Inc. is in fact well known for having several such systems such as [RC4](http://en.wikipedia.org/wiki/RC4_(cipher)) (which thankfully is obscure no more).

I think a _Mythbusters_ episode on RFID security is quite doable. They could show how to read a card from 30 feet away without the holder knowing. Get some cheap gear off the Net to clone a card. Etc.

[Previous page](https://boards.straightdope.com/t/why-wouldnt-mythbusters-be-able-to-do-a-show-on-rfid/488705.md?page=2)
