DEF CON 32 - Psychic Paper: Making eink access badges accessible for anyone - Joshua Herman
Source: YouTube · DEFCONConference · published Oct 16, 2024 · 26:52
The talk demonstrates how to clone employee ID badges using eInk or eAper displays, focusing on low-cost, real-time replication for physical red teaming and social engineering attacks. 0:48
Key Takeaways:
• Three-color eInk displays can be sourced cheaply and reprogrammed to replicate ID badges, with image degradation being negligible over time 2:50.
• The eAper display’s mechanical nature (electro-mechanical) allows for three-color output (white, red, black) rather than RGB, improving fidelity and reducing visibility of replication 3:18.
• A prototype five-color eAper display with ESP32 and Raspberry Pi integration offers higher resolution and better realism, though programming via Wi-Fi is finicky and requires static IP configuration 10:00.
• RFID/NFC components can be removed or masked using aluminum tape or stickers, minimizing detection and enabling seamless badge replication 12:00.
This method enables attackers to create highly realistic, real-time replicas of employee badges using accessible components and existing tools. 18:40
Sources:
- 0:48 Discussion of badge cloning via eInk and eAper displays.
- 2:50 Comparison of eInk vs. traditional displays and durability.
- 3:18 Explanation of eAper’s three-color output and contrast with RGB.
- 10:00 Prototype design with ESP32 and Raspberry Pi for improved fidelity.
- 12:00 Methods to conceal RFID/NFC co
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
hi uh sorry for the setup issues um this is my talk about psychic paper it's how to use e in displays and also eaper displays to fake the front of identification Badges and also discussion about the two or three eink systems that are pre-made from suppliers and how they have lacked security and unusual sign up uh my hand is z gong I'm a frequent of the Defcon Discord about more about who I am I have 11 years of experience in the software IND industry this is a hobby project and this is not related to my employer I've actually had to add that to my presentations CU people think that they're too advanced to actually not be related to my hobby so what does this talk about this talk is about the application of two to three color in displays and also a design prototype of a five-color in displa…