Interesting that you should mention this, because I just worked with someone who put a system like this in.
From what I could tell, the 5 digit number on the card is the only identifier, although I think it's pretty difficult to replicate these cards. I've wondered about collisions, but I guess until you got upwards of 5-10 thousand employees, the chances of a collision/birthday effect are low. It would be interesting to see if you could request a certain number from a distributor. Some further interesting info form the northern site (http://www.nciaccessworld.com): "The default login and password are: Log In = Admin Password = (leave blank) no password If the default login and password are no longer in the software please contact Northern Computers technical support so a technician can instruct you how to send the database to Northern Computers so we can reset it to default for you. " and.... "The defualt passwords for WIN-PAK are: login = SYSTEM password = startup These passwords are case sensitive. " There are also manuals there if you need them. The product is based of an access database, so I can't imagine that snagging the password would be that difficult if it's not a default password. If the workstation is accessible from the network, or it's physically insecure, there may be some leverage there too. -Mike At 11:22 AM 1/11/2002 -0600, Magnus Ullberg wrote: >Anybody have information about Win-Pac 2.0? >It is the system used to control doors and manage proximity cards. >Each card has a 5 digit number on it. Anybody know if that number is the >only thing that identifies the card or if there >is some additional info on the card. > >Thanks, >Magnus Ullberg >Network Coordinator > > >---------------------------------------------------------------------------- >This list is provided by the SecurityFocus Security Intelligence Alert (SIA) >Service. For more information on SecurityFocus' SIA service which >automatically alerts you to the latest security vulnerabilities please see: >https://alerts.securityfocus.com/ ---------------------------------------------------------------------------- This list is provided by the SecurityFocus Security Intelligence Alert (SIA) Service. For more information on SecurityFocus' SIA service which automatically alerts you to the latest security vulnerabilities please see: https://alerts.securityfocus.com/
