How MIFARE Uses Cookies

[Luukvdo]

That fixed it, thanks!

---

+ 0  |  - 0

[Luukvdo]

Same error message here. From what I understand of the error a request is sent to https://licence.nxp.com but it replies with a certificate for https://www.keys.nxp.com.
If you go to https://licence.nxp.com in a browser it also gives a warning the certificate is not valid.
It's not a huge problem since scanning cards is still working but it would be nice if it got fixed.

---

+ 0  |  - 0

[Luukvdo]

But why, exactly, is it necessary? As fsurleau said, from a security point of view it's unacceptable to have a connection to the internet if you don't know exactly what it's used for and what's being sent.
I can understand you want to monitor the usage of the Mifare SDK but a connection to the internet of which it's not known what data is being send is not acceptable in some usages.

---

+ 1  |  - 0

[Luukvdo]

The lite API actually doesn't have the limitation, you just need to approach the card in a different way.

In your manifest, add an intent-filter with action android.nfc.action.TAG_DISCOVERED for the activity

In the Activity class:
import com.nxp.nfclib.classic.MFClassic;
import com.nxp.nfcliblite.Interface.NxpNfcLibLite;

/**
* NXP NFC Library instance
*/
private NxpNfcLibLite nfcLibrary = null;

@Override
protected void onCreate(Bundle savedInstanceState)
{
super.onCreate(savedInstanceState);

// Register the NXP NFC library; this is used to detect and read the cards
this.nfcLibrary = NxpNfcLibLite.getInstance();
this.nfcLibrary.registerActivity(this);
}

@Override
protected void onResume()
{
super.onResume();

this.nfcLibrary.startForeGroundDispatch();
}

@Override
protected void onPause()
{
super.onPause();

this.nfcLibrary.stopForeGroundDispatch();
}

@Override
protected void onNewIntent(Intent intent)
{
// Check if the received Intent action is an ACTION_TAG_DISCOVERED action
if(intent.getAction().equals(NfcAdapter.ACTION_TAG_DISCOVERED))
{
try
{
// Retrieve the Tag from the Intent
Tag tag = intent.getParcelableExtra(NfcAdapter.EXTRA_TAG);

// Check if the tag is a MFClassic tag
if(MFClassic.isClassic(tag))
{
// Convert the tag to a MFClassic object
MFClassic card = MFClassic.get(tag);

// Open a connection to the card
card.connect();

// Authenticate for a sector
card.authenticateSectorWithKeyA(sectorNumber, key);

// Read block
byte[] blockOutput = card.readBlock(blockNumber);

// Close connection to the card
card.close();
}
}
catch(ClassicException | IOException e)
{
e.printStackTrace();
}
}
}

Good luck!

---

+ 0  |  - 0

[Author]

Posts