Can you imagine if they'd spent this much time and money on getting the buses and trains to actually run on time? Or on actually releasing a secure transaction system?
Wow, that's BS. They're not telling people to go do it, they're telling people they can. MBTA should be front row center, and hiring those kids to make it more secure if they're so concerned.
Good freaking gods, John Adams ghost must be howling in torment.
The friggin mifare classic cards (http://en.wikipedia.org/wiki/MIFARE) that mbta uses has been publically insecure since december when the chaos congress (european defcon) gave a presentation on how to break them.
The mifare classics aren't even true smart cards, they are memory cards.
My favorite part is that squelching the speech at defcon they triggered the MIT student paper to publish the paper. So where they had a hundred or two people watching a presentation on relatively old news that no serious hacker would waste their time on (bus passes? come on) you have THOUSANDS of technically competent people with access to the cards and motive who are irritated at you.
That's pulling your dick out of a fire and sticking it in a meatgrinder.
![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png){kind=small}
![[identity profile]](https://www.dreamwidth.org/img/silk/identity/openid.png){kind=small}
(no subject)
Date: 2008-08-10 12:34 pm (UTC)(no subject)
Date: 2008-08-10 05:34 pm (UTC)I think it's ironic that they're called Charlie Cards, but that's just me...
(no subject)
Date: 2008-08-10 04:35 pm (UTC)The friggin mifare classic cards (http://en.wikipedia.org/wiki/MIFARE) that mbta uses has been publically insecure since december when the chaos congress (european defcon) gave a presentation on how to break them.
The mifare classics aren't even true smart cards, they are memory cards.
My favorite part is that squelching the speech at defcon they triggered the MIT student paper to publish the paper. So where they had a hundred or two people watching a presentation on relatively old news that no serious hacker would waste their time on (bus passes? come on) you have THOUSANDS of technically competent people with access to the cards and motive who are irritated at you.
That's pulling your dick out of a fire and sticking it in a meatgrinder.
(no subject)
Date: 2008-08-12 04:01 am (UTC)