Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie
Hi there,
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest

German experts crack smartcard code

  • 14-10-2011 2:54am
    #1
    CIE
    Closed Accounts Posts: 1,463 ✭✭✭


    The Local

    Specifically, it's the DESFire MF3ICD40 RFID type of card. That one is apparently being discontinued...even so, there's probably no totally hack-proof smartcard out there.


Comments

  • #2
    Victor
    Registered Users, Registered Users 2 Posts: 78,576 ✭✭✭✭Victor


    Not hack-proof, but there are things you can do (and have been done) to make such systems hack-resistent enough to make it not really worth someone's time and effort.

    Lets face it, if someone is trying to log on to your system a few million times in the one week, you knwo something is up.


  • #3
    robfitz
    Registered Users, Registered Users 2 Posts: 441 ✭✭robfitz


    CIE wrote: »
    Specifically, it's the DESFire MF3ICD40 RFID type of card.

    This exact crack isn't really a problem for Irish transport systems (Dart, Dublin Bus and Luas) because they are all using the MIFARE Classic based cards.

    But these cards can be trivially broken now with some cheap hardware and a laptop. The cracks have been known about since 2007.

    I believe the new Leap card is also going to be based on the MIFARE Classic card.


  • #4
    AngryLips
    Registered Users, Registered Users 2 Posts: 2,790 ✭✭✭AngryLips


    More importantly, why would anyone bother hacking a transport smartcard? For what gain?


  • #5
    Overature
    Registered Users, Registered Users 2 Posts: 908 ✭✭✭Overature


    AngryLips wrote: »
    More importantly, why would anyone bother hacking a transport smartcard? For what gain?

    to get free travel


  • #6
    Victor
    Registered Users, Registered Users 2 Posts: 78,576 ✭✭✭✭Victor


    To sell them.

    Unfortunately for such fraudsters, Leap has a relatilvey low cash limit.


  • Advertisement
  • #7
    AngryLips
    Registered Users, Registered Users 2 Posts: 2,790 ✭✭✭AngryLips


    But that's my point - neither of these reasons are worth the time or hassle.


  • #8
    mydiscworld
    Registered Users, Registered Users 2 Posts: 814 ✭✭✭mydiscworld


    AngryLips wrote: »
    But that's my point - neither of these reasons are worth the time or hassle.

    An annual Dublin Bus card is now €1,000 before tax savings. If you cracked it you could sell dozens to friends, etc for a few hundred a pop.


  • #9
    Victor
    Registered Users, Registered Users 2 Posts: 78,576 ✭✭✭✭Victor


    mydiscworld wrote: »
    An annual Dublin Bus card is now €1,000 before tax savings. If you cracked it you could sell dozens to friends, etc for a few hundred a pop.
    And they would come back the next day and break your legs. :)


  • #10
    Overature
    Registered Users, Registered Users 2 Posts: 908 ✭✭✭Overature


    Victor wrote: »
    And they would come back the next day and break your legs. :)

    well how are is it to do?


  • #11
    Victor
    Registered Users, Registered Users 2 Posts: 78,576 ✭✭✭✭Victor


    Overature wrote: »
    well how are is it to do?
    ???

    The problem with smart cards is tha the system can recognise that they aren't legitimate and ban then. It may take a few hours for the ban to propagate through the system, but by the next day, you can expect some angry people contacting you.


  • Advertisement
Advertisement