here are the files i extracted.
I had to rename the JSON and XML files to upload them.
DB-86-58-2A_25-Sep-25 12-37-47_taginfo_scan.txt (7.3 KB)
DB-86-58-2A_25-Sep-25 12-37-47_taginfo_scan.xml.txt (12.0 KB)
1 Like
are these files for the hotel card or the transit card?
1 Like
Hotel card.
After confirming the transit card was an EV1, from TSMC55, I have given up on that. Haha. But was just playing and tinkering with the hotel card.
I’m trying to understand using the MCT tool, as I couldn’t find any solid usage demo’s to learn my way through it.
3 Likes
Yeah mct is quite esoteric
2 Likes
Somewhat related to this, but another tag i was planning on was my Work access control tag. When i scan it, it is also a “Mifare Classic EV1” in tag info.
What implants a compatible with that? my research indicates possibly any of the DESfire EV1 units are, however i would need to get the building control people to enroll the chip into their system for it. Would something like the xDF of the flexDF suit this application? I dont have my tag currently, so had a workmate scan theirs, and am awaiting the UID to determine if its 4 or 7 bytes, as from what I have read, this also factors in if the implants are compatible with doing this.
I will chat to them before going ahead to see if we can, but my understanding is that this chip is unique and locked to me so to speak (akin to a passkey), so from an access control perspective, if they are onboard, when i leave they just remove the token from their system and access is rejected. Is that correct?
Could i look at using something more feature rich like one of the Vivokey units which support more things (like the APEX)? I haven’t found much in the way of ‘demo’s of what the Vivokey can do and there is not a lot that i could find in relation to YouTube videos of the app and programming it etc. and showing off all its features and some use cases. I see that the APEX is compatible with Tesla’s
So im all ears on if this would be a better option.
Most access control systems which allow enrollment of 3rd party transponders are also open enough to allow different types of transponders to be registered / enrolled. Check with your access control people for best results.
On the other hand, if the access system is closed and leverage the security features of chips like Mifare Classic EV1 to trap their customers into only being able to buy compatible transponders from them, then even having a Mifare Classic EV1 implant would not help you.
Best to start by checking with your people, then we can work to a solution.
2 Likes
Will do. thanks.
Is my understanding of the enrollment being locked to my transponder correct? and to remove my access if i leave the company, they can just remove my token from the access control system?
If my understanding is correct, I’ll chat to my boss and see if we can get everyone onboard.
Cheers
Generally yes because pretty much every RFID application out there just assumes you are using the transponder only with that one application.. so things like securing the transponder with keys etc. generally leave it useless for other applications. Only access applications that use the completely insecure method of leveraging the transponder UID only would leave the rest of the memory unsecured for your personal use.
Absolutely yes, but I guarantee only 0.00481% of any actual management level personnel or c-suite jagoffs responsible for overseeing security have any concept of this, and instead think “security” means taking back your physical transponder when you leave. It’s depressing how unintelligent these people are about such things.
2 Likes
I just scanned my work tag, its a 4 byte uuid. So that’s a win.
2 Likes
Another Brisbanite here, assuming by Translink card you mean a gocard, it might actually be able to be cloned 
, but there’s several potential caveats and I switched jobs before I finished process of cloning / testing / implantation.
If you really want to give it a go anyway, send me a DM 
2 Likes
Yeah bud. A go card. But based on it been an EV1 card it doesn’t look possible. But happy for you to share details here of you have anything. I’m keen.
I wouldn’t be so sure about that 