Welcome to the Slashdot Beta site -- learn more here. Use the link in the footer or click here to return to the Classic version of Slashdot.

Thank you!

Before you choose to head back to the Classic look of the site, we'd appreciate it if you share your thoughts on the Beta; your feedback is what drives our ongoing development.

Beta is different and we value you taking the time to try it out. Please take a look at the changes we've made in Beta and  learn more about it. Thanks for reading, and for making the site better!

Cracking Atlanta Subway's poorly-encrypted RFID Smart Cards is a Breeze

McGruber (1417641) writes | about 4 months ago


McGruber (1417641) writes "Seven metro Atlanta residents are facing theft, fraud, and racketeering charges for allegedly selling counterfeit MARTA Breeze cards (http://clatl.com/freshloaf/archives/2013/12/27/marta-breeze-card-hackers-arrested-and-charged-with-racketeering). Breeze cards (http://www.breezecard.com/) are stored value smart cards that passengers use as part of an automated fare collection system which the Metropolitan Atlanta Rapid Transit Authority (MARTA, http://www.itsmarta.com/) introduced to the general public in October 2006. Breeze cards are supplied by Cubic Transportation Systems (http://cts.cubic.com/), an American company that provides automated fare collection equipment and services to the mass transit industry.

At the time of this slashdot submission, the Wikipedia page for the Breeze Card (http://en.wikipedia.org/wiki/Breeze_Card, last modified on 2 August 2013 at 14:52) says:

The Breeze Card uses the MIFARE smart-card system from Dutch company NXP Semiconductors, a spin-off from Philips. The disposable, single-use, cards are using on the MIFARE Ultralight while the multiple-use plastic cards are the MIFARE Classic cards. There have been many concerns about the security of the system, mainly caused by the poor encryption method used for the cards. See Security of MIFARE Classic (http://en.wikipedia.org/wiki/MIFARE#Security_of_MIFARE_Classic) for details.

Link to Original Source

0 comment

Check for New Comments
Slashdot Account

Need an Account?

Forgot your password?

Don't worry, we never post anything without your permission.

Submission Text Formatting Tips

We support a small subset of HTML, namely these tags:

  • b
  • i
  • p
  • br
  • a
  • ol
  • ul
  • li
  • dl
  • dt
  • dd
  • em
  • strong
  • tt
  • blockquote
  • div
  • quote
  • ecode

"ecode" can be used for code snippets, for example:

<ecode>    while(1) { do_something(); } </ecode>
Sign up for Slashdot Newsletters
Create a Slashdot Account