2013-08-07
Yet another flawed mifare in public tran ...
Yet another flawed mifare in public transport implementation: Hackers Expose Security Holes That Allow 'Free Rides for Life' - mashable.com. This time the city of Turin in Italy implemented a ticket system based on Mifare Ultralights. Original Mifare Ultralight tags are not very secure (there is no crypto involved at all) and the spread of NFC enabled systems (such as smartphones) can turn simple vulnerabilities into widespread system failures. Interesting to me is that the earlier vulnerabilities in Mifare systems in the Netherlands and England aren't mentioned in this article.