
Researchers from Radboud University in the Netherlands have successfully cracked the security of the Oyster card used for fare payments on buses and tubes in London.
The researchers travelled on the tube on a cloned card, reset its credit level from a laptop and caused gates to jam closed.
Transport for London (TfL) said that its Oyster cards are secure, that personal information is kept separate from journey information and that anyone caught using a cloned card would be prosecuted.
The system is checked every 24 hours and the best any Oyster criminal could get is a day’s free travel, the company claimed.
Radboud researcher Wouter Teepe presented evidence on the crack to the Dutch parliament, which has already delayed installation of a 1bn automated payment transport system based on the same core technology.
At the heart of an Oyster card is the Mifare chip, made by Philips spin-off NXP.
Designed in the 1990s before processors of that size could handle strong encryption, Mifare has suffered at least three published cracks, according to security experts who have urged TfL to upgrade the system.
Since Boris has banned booze on the Underground the last ever Circle Line party will be coming to an end. A group calling itself Last Orders on the Underground (http://www.lastordersontheunderground.com) are holding a final party on May 31st.
Now TheTicketCollector.co.uk does agree with the booze ban as it will stop those crazy superbrew drinkers from sitting next to you on the tube or causing problems on the station. But it brings an end to social drinking. Drinking is not wrong as long as you don’t cause alarm or overdo it.

Have Facebook? Add yourself to the event list. Cocktail Party and Normal Party
The RMT and TSSA unions have announced a 72 hour strike from 6.30pm Sunday 6 April, until 6.30pm Wednesday 9 April 2008 after voting by five to one and four to one respectively for action.
Widespread tube chaos is expected and many lines will be closed due to no staff.
Both unions have told LUL that its plans for ticket-office closures, de-staffing, lone working, introduction of ‘mobile supervisors’, use of agency and security staff and other disputed policies amount to an unacceptable attack on safety standards and the casualisation of safety-critical work.
Have you seen this person?
He is wanted by police for assaulting an amateur photographer. This picture of his attacker was taken by the amateur photographer.
PC Ben Dawson said the incident occurred on the escalators leading to the main concourse at Waterloo mainline station at around 10.17pm on Wednesday 12 December.
“It would appear the victim, an amateur photographer, who enjoys taking snaps of London street scenes, was taking shots on the escalators when a member of the public took exception to having his photo taken and asked him to delete the photo.
“The photographer told him he could not delete the shot as it was not a digital camera. The man then attempted to grab the camera and punched the victim in the face. The victim suffered cuts and bruising to his face as a result of the incident.
“We have released this photo today, which was taken by the victim prior to the incident and we are appealing to members of the public to assist us in identifying the man pictured.
“The man is described as white, 34-38 years-old and about 5 ft 9 in tall. He was wearing a dark jacket and carrying a dark rucksack.
“Anyone who may be able to assist us with our inquiries is urged to call the BTP on 0800 40 50 40 or the Witness Appeal Line on 020 7391 5275 quoting background reference B5 of 15/02/08.”
The Transport Salaried Staffs Association union said its 2,500 members will vote on whether to strike in a row over safety and staffing levels.
RMT and TSSA have told LUL that ticket-office closures, de-staffing, lone working, introduction of ‘mobile supervisors’, use of agency and security staff and other disputed policies amount to an unacceptable attack on safety standards and the casualisation of safety-critical work.
“Each of these issues is serious in its own right, but together they amount to a fundamental and unacceptable attack on staffing across the network which strikes at the very heart of its safe operation,” RMT general secretary Bob Crow said today.
“Our joint campaign against 40 ticket-office closures and massive cuts in opening times last year gave us a breathing space, but they are now back on the table, along with a raft of other plans and problems that combine to put our members’ and passengers’ safety at serious risk.”
“When LUL imposed driver-only tube trains it assured the public and its own drivers that good station staffing levels would keep the system safe, but those assurances are now being undermined.”
“The systematic denial of driving jobs and promotion to experienced Tube workers in favour of external recruitment is another serious problem that is undermining the safety culture” Bob Crow said.
“LUL has insisted on changes to its emergency plan that water down the staff required on duty and which our safety reps believe will undermine the ability to respond to emergencies and undertake safe evacuations” said TSSA general secretary Gerry Doherty.
“We now have agency staff in LUL uniforms and station staff left to work alone at night, and they have even got agency staff carrying ticket-machine cash around on trains.”
“LUL has also sought to change its policy on when and how staff can refuse to work on safety grounds, in a way that is unworkable and in breach of legislation.”
“Tube users should be as appalled as our members at the range of safety issues outstanding and I hope they will understand that LUL’s refusal to discuss these issues in the round left us with no choice but to tell the company that we are now in dispute” Gerry Doherty said.
Any opinions expressed are that of The Ticket Collector and do not necessarily reflect the opinions of any of the Train Companies mentioned, and/or other companies.
Programs and data held on TheTicketCollector.co.uk and systems are PRIVATE PROPERTY and are not to be copied except under our terms. Unauthorised access is prohibited and is contrary to the Computer Misuse Act 1990, which may result in criminal offences and a claim for damages.
To Top of Page
Entries feed.
Valid XHTML and CSS.
15 queries. 0.257 seconds.
Powered by WordPress with Pool theme design by Borja Fernandez.