Yeah.. I suppose their would be limitations on the amount of data that would be on the chip..<br><br>Maybe the will just use an ID number that refrences the user info in the DB....<br><br>Has anyone successfully performed SQL injections usinf RFID tags? I looked at a few papers but know it's not widespread.
<br>I'm thinking about getting an IPAQ and an RFID reader/writer to play around w/ this stuff.<br><br>JP<br><a href="http://packetfocus.blogspot.com">packetfocus.blogspot.com</a><br><a href="http://www.packetfocus.com">www.packetfocus.com
</a><br><br><br><br><br><br><div><span class="gmail_quote">On 6/1/06, <b class="gmail_sendername">Jim Popovitch</b> <<a href="mailto:jimpop@yahoo.com">jimpop@yahoo.com</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Josh L. Perrymon wrote:<br>> So everyone is going to have this RFID embedded ticket with name,<br>> address, passport or driver license number?<br><br> From the article:<br> "an embedded RFID chip containing identification information
<br> that will be checked against a database"<br><br>To me that doesn't imply that the chip will contain the items in your<br>list. It could be a checksum of the data in the DB, and security<br>officials just validate, against the DB, the full name on a physical
<br>passport and the checksum on the RFID.<br><br>Now, the security of the DB could be a whole other thread of discussion. ;-)<br><br>-Jim P.<br><br><br></blockquote></div><br>