NFC glitch allows free commutes for life in NY subway

Security researchers in the US have discovered security holes that can allow commuters paying with NFC-enabled Android devices to have unlimited free rides on public transport.

Matteo Collura, 18, and Matteo Beccaro, 19, presented their findings before the hacking conference DefCon last weekend, tech site Mashable reported.

"You can get free rides for your life," Beccaro said at the hacking conference Saturday.

The report said the security holes allow attackers to time-stamp tickets with an NFC-enabled Android phone and turn a limited-ride ticket into an unlimited one.

Collura and Beccaro, who studied ticket security after Turin started using NFC-enabled cards in January, added the hacks are fairly easy to reproduce.

Becarro also noted they learned how the chips worked via advertisements on websites.

The two stamped several tickets and used a NFC reader costing less than $50 to see what happened inside the chip - whose data was not encrypted.

Both saw part of the ticket that allowed them to turn the OTP sector in read-only mode, meaning the data can't be modified.

This means the stamping machine can no longer change anything on it.

"After you lock the OTP sector, you do not have to do anything else to the ticket, ever. So, do it once and you get an unlimited-rides ticket," Beccaro told Mashable.

Also, Collura and Beccaro noticed the timestamp, which is used to determine whether the ticket must be stamped again, was stored in a part of the chip set in read and write mode, meaning anyone could read and write to it.

This meant that even after the 90-minute time frame for the ticket, one simply needed to scan the ticket with an NFC-enabled device and change the date.

"It's like stamping the ticket by yourself," he said.

The two offered a firmware update on the stamping machines so they would refuse to validate a locked ticket.

Mashable said the two also notified Turin's transportation agency, which said they fixed the first bug on streetcars and the buses — but not yet on the subway. — TJD, GMA News

Loading...

Editor’s note:Yahoo Philippines encourages responsible comments that add dimension to the discussion. No bashing or hate speech, please. You can express your opinion without slamming others or making derogatory remarks.

  • ToyotaPH continues it’s strong sales in February
    ToyotaPH continues it’s strong sales in February

    Toyota Motor Philippines (TMP) sustains its strong sales in its February performance. Toyota’s strong performance last month was due to the  high demand of the Vios, with sales of 2,012 units and of course the rest of Toyota’s line up such as the Fortuner, Innova, Wigo, Hilux, Avanza and Corolla Altis. Toyota’s luxury brand, Lexus, recorded 60 units last month. …

  • No apology, but Noy seeks understanding
    No apology, but Noy seeks understanding

    There was no apology, but President Aquino yesterday expressed regret, took “full responsibility” and appealed to the nation for “deepest understanding” for the Jan. 25 Mamasapano raid in which dozens died, including 44 police Special Action Force (SAF) commandos. “To every Filipino who has felt failure or has been hurt because of the events related to this operation, it is with abiding humility that I ask for your deepest understanding,” Aquino said in a speech before the 246 new graduates of …

  • MVP on endorsement: Thanks, I’m no politician
    MVP on endorsement: Thanks, I’m no politician

    Businessman Manuel V. Pangilinan is grateful for Sen. Miriam Defensor-Santiago’s praise and presidential endorsement, but says he is not a politician. In an interview on the sidelines of the launch of the search for The Outstanding Young Men (TOYM) of the Philippines 2015 Wednesday night, Pangilinan dismissed the idea of running for president in the 2016 elections. “I’m not a politician, I’m just an ordinary business person,” he added. Santiago endorsed Pangilinan as a presidential candidate …

  • No Lenten break in operations vs lawless groups – AFP
    No Lenten break in operations vs lawless groups – AFP

    The Armed Forces of the Philippines (AFP) is not suspending its offensive against the Abu Sayyaf, New People’s Army (NPA) and other lawless groups during the Holy Week, an official said yesterday. Lt. Col. Harold Cabunoc, AFP public affairs office chief, said the AFP leadership is leaving it up to area and division commanders whether to raise the alert status in preparation for the Holy Week. Those deployed in areas where there are ongoing law enforcement operations against terrorist groups …

  • Probe harassment vs human rights lawyer, CA orders AFP
    Probe harassment vs human rights lawyer, CA orders AFP

    The Court of Appeals (CA) has ordered the Armed Forces of the Philippines (AFP) to investigate a human rights lawyer’s claim of harassment, including surveillance, by several military officers. In a 22-page decision, the former Special Sixth Division of the appellate court granted the petition for writ of amparo and habeas data of Maria Catherine Dannug-Salucon. The CA ordered the AFP to identify the officers behind the surveillance and file charges against them. The CA ruling said …

  • Noy vows to dismantle bata-bata system in PNP
    Noy vows to dismantle bata-bata system in PNP

    President Aquino vowed yesterday to dismantle the culture of factionalism or the bata-bata system within the Philippine National Police as he continued the search for the next PNP chief. Speaking at the Philippine National Police Academy (PNPA) commencement exercises here, the President said the country needed solidarity among leaders and members of the police force so that the policemen would be effective protectors of Filipinos. “Our challenge to the next chief of our national police force: …

  • Envoy to expats: Retire, invest in Phl
    Envoy to expats: Retire, invest in Phl

    Retire and invest in real estate in the Philippines, especially now that the country has made it to the top 10 retirement destinations in the world. This is the message being spread by the Philippine embassy in Washington, with Ambassador Jose Cuisia Jr. leading the refrain in meetings with various Filipino-American communities in the US. In his talks, Cuisia said that an affordable cost of living as well as warm climate and people are just some of the things that make the Philippines a top …

  • PNPA spotlight falls on Ampatuan grandson
    PNPA spotlight falls on Ampatuan grandson

    The stigma of being a namesake of the principal suspect in the 2009 Maguindanao massacre did not prevent Cadet First Class Andal Ampatuan III from entering and graduating from the Philippine National Police Academy (PNPA). Ampatuan III, now with a rank of police inspector, is a grandson of former Maguindanao governor Andal Ampatuan Sr. The younger Ampatuan was among the 246 graduates of the PNPA “Lakandula” Class of 2015. Ampatuan III’s mother is Bai Rebecca Ampatuan, a daughter of the …

POLL

Should Aquino be held accountable over the Mamasapano operations?

Loading...
Poll Choice Options