Oyster, Mifare hack, and something stronger
Peter Tomlinson
ukcrypto at chiark.greenend.org.uk
Thu, 14 Aug 2008 15:43:31 +0100
If you missed last night's (Wednesday) Ch4 News re Oyster and the Mifare
hack, you can watch it by going to
http://www.channel4.com/news/watchlisten/video/. Click on "Watch again"
and the player window that opens up allows you to choose Part 3 of the
programme.
What they didn't say was that the national spec (ITSO, but they didn't
use the name) mandates that, out of the box, all the terminal equipment
and systems have to be able to handle a number of card technologies,
with different security functions. As I now know after talking to Ch4,
they didn't say that because the people they consulted didn't tell them
that although they ought to have done. There are other things that they
got arse backwards as well (again they were misled), so this one will
run and run.
Peter