Transist System Vulnerable Because of Encyrption Flaws
Remember the MIT students that hacked the Boston mass transit's passenger access system last summer? Looks like Boston isn't the only mass transit provider with a security problem.
CBC News in Canada reports that transit systems across Canada are at risk:
Computer-security researchers at the Radboud University Nijmegen in the Netherlands revealed how the smart-card technology, called Mifare, can be hacked to let anyone with a computer and $100 worth of parts create counterfeit transit and building-access passes.
The root cause: the system vendor used a proprietary encryption scheme that wasn't evaluated the way public algorithms are. Security by obscurity does not work. Period. End of discussion.



Email This!
Digg it!
Del.icio.us
Reddit!
Newsvine
