What are the security risks in Barclaycard OnePulse?

Clive D.W. Feather clive at davros.org
Wed Jun 17 17:56:59 BST 2009


David Hansen said:
> Why would they use those oyster contraptions when cheaper magnetic 
> stripe tickets are available (at least at the moment)? It seems a no-
> brainer to me. 
> 
> <http://www.tfl.gov.uk/tickets/faresandtickets/oneand3daytickets/2911.as
> px>

Oysters have operational advantages.

> Can one of these oyster contraptions be loaded with money by using 
> cash, as one can do with a mobile telephone [1]? If so then it is less 
> objectionable.

Yes, they can.

Touch card to pad on machine.
Press "add cash" button.
Insert coins.
Press "continue" button.
Touch card to pad on machine.

(Text of buttons is from memory; they're virtual buttons on the touch
screen).

-- 
Clive D.W. Feather          | If you lie to the compiler,
Email: clive at davros.org     | it will get its revenge.
Web: http://www.davros.org  |   - Henry Spencer
Mobile: +44 7973 377646



More information about the ukcrypto mailing list