Announcements

Welcome to Forma for Construction Ideas! View the Forma for Construction Product Roadmap here. Top-voted ideas may be considered for future development. Learn more about the feedback process here.

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Critical Security Risk: Exposed Asset "B3F IDs" Make NFC Tags Easy to Clone!

Critical Security Risk: Exposed Asset "B3F IDs" Make NFC Tags Easy to Clone!

While testing NFC integration for asset tracking, it became clear that exposed Asset "B3F IDs" can be effortlessly cloned. This loophole compromises data integrity and security, allowing unauthorized access or replication of asset information.

 

Why this matters:
If Asset "B3F IDs" remain visible or unencrypted, anyone can duplicate tags—undermining reliability and trust in the entire asset management process.

 

Suggested improvement/Proposed enhancement:
 Introduce a “View only” permission option for Assets, alongside the current “View + export” level, so project admins can let users see assets in ACC without allowing CSV/Excel exports that expose sensitive "B3F IDs" used in NFC implementations

 

@tushar_nath @ameerul.rafei @farid_anuar @irham.hameeda @MAfiq_Yusoff 

 

 

Can't find what you're looking for? Ask the community or share your knowledge.

Submit Idea