NFC glitch allows free commutes for life in NY subway

Security researchers in the US have discovered security holes that can allow commuters paying with NFC-enabled Android devices to have unlimited free rides on public transport.

Matteo Collura, 18, and Matteo Beccaro, 19, presented their findings before the hacking conference DefCon last weekend, tech site Mashable reported.

"You can get free rides for your life," Beccaro said at the hacking conference Saturday.

The report said the security holes allow attackers to time-stamp tickets with an NFC-enabled Android phone and turn a limited-ride ticket into an unlimited one.

Collura and Beccaro, who studied ticket security after Turin started using NFC-enabled cards in January, added the hacks are fairly easy to reproduce.

Becarro also noted they learned how the chips worked via advertisements on websites.

The two stamped several tickets and used a NFC reader costing less than $50 to see what happened inside the chip - whose data was not encrypted.

Both saw part of the ticket that allowed them to turn the OTP sector in read-only mode, meaning the data can't be modified.

This means the stamping machine can no longer change anything on it.

"After you lock the OTP sector, you do not have to do anything else to the ticket, ever. So, do it once and you get an unlimited-rides ticket," Beccaro told Mashable.

Also, Collura and Beccaro noticed the timestamp, which is used to determine whether the ticket must be stamped again, was stored in a part of the chip set in read and write mode, meaning anyone could read and write to it.

This meant that even after the 90-minute time frame for the ticket, one simply needed to scan the ticket with an NFC-enabled device and change the date.

"It's like stamping the ticket by yourself," he said.

The two offered a firmware update on the stamping machines so they would refuse to validate a locked ticket.

Mashable said the two also notified Turin's transportation agency, which said they fixed the first bug on streetcars and the buses — but not yet on the subway. — TJD, GMA News

Loading...

Editor’s note:Yahoo Philippines encourages responsible comments that add dimension to the discussion. No bashing or hate speech, please. You can express your opinion without slamming others or making derogatory remarks.

  • Catholics organize to promote pope's climate change message

    NEW YORK (AP) — There will be prayer vigils and pilgrimages, policy briefings and seminars, and sermons in parishes from the U.S. to the Philippines. …

  • Forgotten for decades, fallen NY soldier finally honored
    Forgotten for decades, fallen NY soldier finally honored

    ALBANY, N.Y. (AP) — Carroll Heath didn't have it easy growing up in the Great Depression. His father wasn't around, his mother was a patient in a mental hospital and he kept largely to himself. Soon after graduating high school, he enlisted in the Army and wound up in the Philippines, where he's believed to have died sometime in 1942. …

  • APEC ministers to endorse Boracay Action Agenda
    APEC ministers to endorse Boracay Action Agenda

    Trade ministers at the Asia-Pacific Economic Cooperation (APEC) meeting in Boracay, Aklan agreed yesterday to endorse the proposed Boracay Action Agenda to the member countries’ leaders, presenting opportunities for global trade for micro, small and medium enterprises (MSMEs). In a press conference following the conclusion of the APEC Ministers Responsible for Trade Meeting, Trade Secretary Gregory Domingo, who also served as chairman, said ministers agreed to recommend the adoption of the …

  • Talks with China over sea row urged
    Talks with China over sea row urged

    The Philippines should engage China in bilateral talks in its efforts to maintain peace and order at the disputed West Philippine Sea, Sen. Francis Escudero said yesterday. Escudero supports the government’s move to bring the issue before international arbitration but also stressed the need for the Philippines to pursue talks with China. Escudero made the statement after UN Secretary General Ban Ki-moon on Friday called for a peaceful solution to territorial disputes in the South China Sea. …

  • House panel tackles bill on regular disaster drills
    House panel tackles bill on regular disaster drills

    The House committee on national defense is deliberating on a measure mandating the regular conduct of disaster risk reduction drills in educational institutions nationwide. Authored by Camarines Sur Rep. Rolando Andaya Jr., the bill mandates that risk reduction drills be held annually in all educational institutions throughout the country in coordination with the schools’ respective local government units. “The Philippines’ location along the Pacific Ring of Fire and close to the equator …

  • PCSO running out of funds
    PCSO running out of funds

    Philippine Charity Sweepstakes Office (PCSO) chairman Ireneo Maliksi has admitted that the revenue-generating agency is running out of funds as it continues with its mandate to provide financial assistance to indigent Filipinos. Aside from providing financial help to individual recipients, Maliksi cited at least 13 laws that mandates the PCSO to provide mandatory contribution to different government agencies. Just last week, PCSO released P100 million to the Commission on Higher Education as …

  • Cops receive mid-year bonus
    Cops receive mid-year bonus

    Active duty uniformed and non-uniformed personnel of the Philippine National Police (PNP)have received their mid-year bonuses. The PNP has released P1.9 billion for the mid-year bonus of the 155,000 active duty uniformed and non-uniformed personnel. The Directorate for Comptrollership released P1,933,664,893.50 through the Finance Service and subsequently credited to the individual ATM payroll accounts of active duty uniformed and non-uniformed personnel. …

  • APEC trade chiefs vow to speed up work in WTO

    MANILA, Philippines (AP) — Trade ministers from 21 Asia-Pacific countries on Sunday issued strong support to the World Trade Organization's efforts to boost global trade amid a flurry of regional free trade agreements. …

POLL

Should Aquino be held accountable over the Mamasapano operations?

Loading...
Poll Choice Options