Help/advice - approaching systems admin to enrol/roster implant UID

As per title, I was hoping to get some feedback from community members wrt how to make a successful approach/request to have one of my implant UIDs updated on an access system.

A search of the forum didn’t reveal much beyond ‘contact the systems admin’, but I just opened up a new email to my gym and then sat there flummoxed because I realised just how uncommon and unfortunately weird/disturbing some people might find the idea and I don’t quite know how to best articulate such a request to avoid a negative reaction and with the best chance of a good outcome?

A scan of my gym access card - ISO14443-3A NXP Mifare Ultralight. I’m installed with the xEM, xM1, xNT, and NExT so I’m assuming the UIDs from either of the two NTAG216 chips could be used, or is it more complicated than that? What does the ATR have to do with things?

So yeah anyway, how does one ask? What information do I give? Should I be upfront about the full picture or would it be better to obscure the implant/body-mod angle?

If anyone has any positive/negative experiences that might help guide me then I’d love to hear.

Any help is greatly appreciated, thanks :slight_smile:

1 Like

There are two main problems or difficulties here;

  • the admin doesn’t actually understand how RFID systems work

  • the bosses of admins (the ones who set policy) don’t understand how RFID systems work

In both cases, the problem is that these access control people treat RFID access systems like old physical key based security systems… where they focus on control of the physical card or badge or fob, instead of understanding that the unique serial number in the card is the real control point.

  • Key based systems place control into the physical keys being distributed. It’s terrible.

  • RFID systems keep control of the system with the admins.

Check this out - https://dangerousthings.com/chip-implants-101/keys-vs-rfid/ and watch the videos

Now… to answer your question… when you go to approach whoever controls these things… you have to engage in a bit of social engineering. You have to use your wit and charm to win the day… and you cannot do that over email or the phone. In fact, read this guide for approaching professionals first to see why this matters.

Since you are talking to someone who operates a gym and not a secure facility, it should be easier… and you don’t necessarily have to educate them on how these systems work, you just need to speak their language… meet with them in person… talk to the front desk person a bit about your implants… try to get them on your side… show them why it’s cool… say things like “I have my own gym card!” - speak their language… use whatever term they use to describe their cards… but don’t expect that front desk person to actually be able to add you… maybe you’ll get lucky and they’ll say “yeah let’s try it” and you can try to get them to do it… but expect to speak to the manager… try to get the front desk person (who is now on your side) to introduce you to the manager… they might say “hey check this out… it’s really cool…” and try to get off on a good foot.

In any case, you have to navigate those waters as you swim them… maybe the manager will think “hey we can get the media here and get publicity!” or maybe the manager will think “this is the devil’s work” and rip up your contract. Who knows.

Now, when it comes to adding your implant to the system… that’s another case of having to go with the flow… but before you even get to the point of talking about implants, research the hell out of your card… does it have anything in user memory? Are parts of the memory secured? If not, maybe it is just the UID… but then you need to know how new cards are added to their system… is there a reader that does enrollment or do they type numbers that are printed on the cards? Are there any numbers printed on your card? You basically have to be able to do all the reconnaissance and try to understand exactly how this can work or could work before attempting to get them to add your implant to the system… because their incentive is very low, and even small hurdles can easily derail the whole thing… like when someone you don’t like is asking you to do something you don’t want to do… you’re going to look for any reason big or small to say “well we tried” and give up… so do everything you can to not let that happen.

  • Post your gym card’s full scan info from TagInfo (dngr.us/taginfo) including memory etc.

  • Post photos of the fob or card, making sure any numbers printed on it are clear.

4 Likes

Amal nailed it!
Another thought to get them onboard if you still need to, “sell it to them” maybe you could suggest it as an advertising :bulb: “gimmick”.
:muscle: BIG MUSCLES GYM :muscle:
The only gym in town that can also transform you into a cyborg :mechanical_arm:

small print
*a free “cyber implant” with every annual subscription. (never forget your gym card again)

You might even get a free subscription for your advertising hook…
Would only cost them (implant dependent, assuming xNT? ) ?? bulk order $$ ?? per implant :man_shrugging:

just a thought :bulb:

1 Like