How to block create application in unauthorize state (EV3 DESFire)

[tanpouch]

I first change the PICC master key on the first tap. Then I disconnect the card.

On the second tap to the nfc reader, I'm able to create an application without authenticating with the new PICC master key.

I want to block the application creation in an unauthorized state.
How can I do that?

[KaiLi]

Hello @tanpouch 

The creation of applications is only limited by the number, and there is no way to limit permissions.

[tanpouch]

Oh, I see an option of chaging key settings, the default settings doesn't require authentication with PICC master key

[KaiLi]

Hello @tanpouch 

I think you can use the ChangeKey command to change the value of the key to your own, so that even if someone creates an application, it will not be able to access it.

[tanpouch]

Thanks, does it mean that anyone can use the tag to create an application and then change its master key and Read/Write key to operate on it without knowing the PICC master key?