Coming soon to a phone and bank account near you: it's NFC! Near Field Communication (NFC) is a short range radio standard gaining popularity in payment and identification applications. Obviously as security folk, forensicators and people who want to know how things that transmit sensitive information work, it behooves us to keep abrest of technology such as this to know its capabilities and possible holes. This talk covers the hardware basics behind NFC, the tools you'll want in order to start testing, an overview of the NFC Data Exchange Format (NDEF). We'll then a look at previous NFC attacks, how they relate to the Android based Nexus S phone, and then a discussion how upcoming mobile payments may work. Come see how to write data to Mifare Ultralight and Classic tags and what some manual fuzzing can do when the tags are read. This version will also contain updates from the NFC talk at Google IO.

Join us on May, 25th, 7:00pm at John Jay College of Criminal Justice, 899 Tenth Avenue (59th St. and 10th Ave.) in Room 630T for this exciting meet-up.

Speaker Bio: Corey Benninger is a principal consultant with the Intrepidus Group, specializing in mobile application security. He has performed code reviews and conducted mobile application penetration tests for numerous Fortune 500 clients on a multitude of platforms, such as Android, BREW, RIM, and iOS. He recently convinced his bosses to drop a few hundred dollars on NFC equipment, which he wrapped in tin foil and carries with him.
Corey Benninger - Principal Consultant