View Single Post
  #2   Report Post  
Old May 29th 07, 03:08 PM posted to uk.transport.london
Frobinrobin Frobinrobin is offline
external usenet poster
 
First recorded activity at LondonBanter: May 2007
Posts: 2
Default Have Oyster cards been hacked yet?

On 29 May, 15:43, Boltar wrote:
I'm not sure how hard or not it would be to do. I'm presuming it uses
some form of encryption though given any reader can show you how much
you have left and where you've been then theres either some basic
system wide common key encryption going on or none at all which makes
me wonder how easy it would be to extract the details if you had a
suitable reader yourself or even up the amount of cash on a pre-pay.
Apparently the MIFARE system can work at much greater ranges than the
one TfL uses so I'm also wondering if it would be possible to grab
details from travellers as they walk past an office building and so
forth. Anyone heard any rumours of anything like this happening?

B2003



I've not heard of any rumours about this and I doubt anyone of
knowledge would share it but I'm fairly confident that TfL has
factored in the insecurity of Oyster.
I read some interesting things about RFID and my opinion is that its
just not safe, I would not put sensitive data
Oyster Card uses RFID technology (Radio Frequency IDentification) so
the signal can be `easily` read, decrypting the signal may be
significantly harder but let's be honest even the most secure since
when has that stopped hackers.