mirror of
https://github.com/RfidResearchGroup/proxmark3.git
synced 2026-11-04 09:07:53 +00:00
Matthew CarrollandClaude Opus 5
8917c48cde
`lf t55xx detect -p <pwd>` reached for the password whenever detection failed without one, and sent it across every downlink mode and again after a wake. On a tag that is not password protected those frames can be taken for a write: the PWD bit gets set and the tag's data is destroyed, leaving it locked behind whatever block 7 already held. `lf t55xx read` and `lf t55xx dump` already guard against this. They verify the PWD bit in the configuration block before using a password, and expose -o/--override to bypass the check deliberately. detect had neither, and T55xxReadBlockEx() treats a live `detect -p` as proof the bit is set. detect cannot run the same check -- reading the configuration is what it is for, and the password is only reached for once that has failed -- so the risk has to be the user's to accept. Gate it behind -o/--override to match read and dump, and carry read's warning banner into the help. No change in behaviour for anyone not passing -p. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>