Monday, 13 October 2008

Details on how to hack oyster cards revealed online


The world's most popular smartcards have been hacked, details have been published online, the cards are used in building entry systems and are used on londons travel network.

Sensitive data stored on the Mifare Classic chip is protected by a unique number that acts as a key. When the chip, or a card bearing it, is placed near a reader it transmits and receives information based on its key. The security of the system depends on the key remaining secret.

In March Prof Jacobs and his colleagues discovered a flaw in the chip's design which makes those keys easy to calculate and copy.

No comments: