NFC glitch allows free commutes for life in NY subway

Security researchers in the US have discovered security holes that can allow commuters paying with NFC-enabled Android devices to have unlimited free rides on public transport.

Matteo Collura, 18, and Matteo Beccaro, 19, presented their findings before the hacking conference DefCon last weekend, tech site Mashable reported.

"You can get free rides for your life," Beccaro said at the hacking conference Saturday.

The report said the security holes allow attackers to time-stamp tickets with an NFC-enabled Android phone and turn a limited-ride ticket into an unlimited one.

Collura and Beccaro, who studied ticket security after Turin started using NFC-enabled cards in January, added the hacks are fairly easy to reproduce.

Becarro also noted they learned how the chips worked via advertisements on websites.

The two stamped several tickets and used a NFC reader costing less than $50 to see what happened inside the chip - whose data was not encrypted.

Both saw part of the ticket that allowed them to turn the OTP sector in read-only mode, meaning the data can't be modified.

This means the stamping machine can no longer change anything on it.

"After you lock the OTP sector, you do not have to do anything else to the ticket, ever. So, do it once and you get an unlimited-rides ticket," Beccaro told Mashable.

Also, Collura and Beccaro noticed the timestamp, which is used to determine whether the ticket must be stamped again, was stored in a part of the chip set in read and write mode, meaning anyone could read and write to it.

This meant that even after the 90-minute time frame for the ticket, one simply needed to scan the ticket with an NFC-enabled device and change the date.

"It's like stamping the ticket by yourself," he said.

The two offered a firmware update on the stamping machines so they would refuse to validate a locked ticket.

Mashable said the two also notified Turin's transportation agency, which said they fixed the first bug on streetcars and the buses — but not yet on the subway. — TJD, GMA News

Editor’s note:Yahoo Philippines encourages responsible comments that add dimension to the discussion. No bashing or hate speech, please. You can express your opinion without slamming others or making derogatory remarks.

  • What can void a new car warranty? James Deakin - Wheel Power
    What can void a new car warranty?

    "I was denied warranty once for changing my horn!" One very annoyed reader wrote. "I was told that placing a backup camera will void my warranty" said another. The others are best left in my private inbox as Yahoo! have a swear jar in the office that I do not feel like donating this week's pay to. Continue reading → …

  • Docu exposes destruction of PH marine resources VERA Files - The Inbox
    Docu exposes destruction of PH marine resources

    By Kiersnerr Gerwin B. Tacadena, VERA Files “Gutom (hunger),” Sen. Loren Legarda said is what’s in store for the Filipino people if destruction of the country's marine resources is not stopped. Legarda, chair of the Senate committee on Environment and Natural … Continue reading → …

  • ‘Yolanda’ fiberglass boats modern-day Noah’s ark VERA Files - The Inbox
    ‘Yolanda’ fiberglass boats modern-day Noah’s ark

    By Jane Dasal, VERA Files If you want to save the earth, build a boat. That's what a group of environmentalists is saying, especially if you want to save both the forests and fishermen affected by supertyphoon “Yolanda” (Haiyan). “Haiyan … Continue reading → …

POLL
Loading...
Poll Choice Options