Oyster, Mifare hack, and something stronger

Peter Tomlinson ukcrypto at chiark.greenend.org.uk
Thu, 14 Aug 2008 15:43:31 +0100


If you missed last night's (Wednesday) Ch4 News re Oyster and the Mifare 
hack, you can watch it by going to
http://www.channel4.com/news/watchlisten/video/. Click on "Watch again" 
and the player window that opens up allows you to choose Part 3 of the 
programme.

What they didn't say was that the national spec (ITSO, but they didn't 
use the name) mandates that, out of the box, all the terminal equipment 
and systems have to be able to handle a number of card technologies, 
with different security functions. As I now know after talking to Ch4, 
they didn't say that because the people they consulted didn't tell them 
that although they ought to have done. There are other things that they 
got arse backwards as well (again they were misled), so this one will 
run and run.

Peter