last day (15 days later) » 

6:34 PM
1
A: Default applets on a fresh javacard

owlsteadThe first 5 bytes are the RID of the creator of the Applet. They are used as an identifier, as specified in ISO/IEC 7816-5. So I guess your card is a card was generated for a specific payment service (RID: A0 00 00 XX XX). Unsurprisingly it has some payment related applets on it from VISA (RID: ...

 
Thank you dear Owlstead. About the last three lines : I can delete these applets, This mean that they didn't mask in ROM,Right? And why they must Some applets in ROM while it is very expensive?
 
First of all, if they are in ROM then 1) you are just looking at the load file - i.e. the code of the Applets, it won't take any memory other than ROM and 2) they cannot be fully removed. You would still need to instantiate them (through INSTALL for INSTALL) to make the Applets in there SELECTABLE. If you delete them you just remove them from Global Platform index (same as delete on Windows or Linux does). The reason why in ROM is in the last sentence.
 
So when I delete a masked in ROM applet, I can install it again, because the codes are still in the ROM. Is this true?
 
Probably a good idea, I can change my answer and comments if you like, comment below if you want this. Note that the changes will remain visible to (some) users, even after edits. Flag a mod if you want to have info removed permanently. No, as far as I know applets that have been removed completely from GP cannot be resurrected (even if the code is in ROM).
@TheGoodUser Anonymized it a bit, probably best to remove the related comments as well (about running etc.).
 
Comments Deleted :) Excuse me mr owlstead, Why did you anonymized just one of the AIDs? how did you understand which one is most important?!
 
6:42 PM
Hmm, maybe I should also anonymize the proprietary ones (starting with 0x80 or higher). No need to anonymize the VISA and MASTERCARD ones. Those are probably present on most banking cards.
 
7:14 PM
Hello Mr Owlstead
I appreciate your time and consideration :)
I have two another questions! :D
Why we anonymized the AIDs?! If the attacker didn't know the APDU commands for each applet those AID are useless, right?
(He can use a bruteforce on APDU commands, and knowing the AIDs just make it easy to gain commands, right?)
regards :)
 
8:19 PM
Oh, no, I just anonymized them to remove the link to the Chinese bank. Nothing to do with an attack or anything.
Sorry, had to do some shopping.
 

last day (15 days later) »