http://www.itworld.com/security/59666/lawsuit-settled-hackers-now-working-mbta By Robert McMillan ITworld December 22, 2008 Three Massachusetts Institute of Technology students who were sued earlier this year by the Massachusetts Bay Transit Authority (MBTA) said Monday that they are now working to make the Boston transit system more secure. The announcement brings to a close a high profile case that pitted the rights of security researchers to freely discuss their findings against the concerns of one of the country's largest transit systems, which worried that this type of information could lead to widespread ticket fraud. "I'm really glad to have it behind me. I think this is really what should have happened from the start," said Zack Anderson, one of the students sued by the MBTA. Anderson, along with Russell "RJ" Ryan and Alessandro Chiesa, was prevented from giving a talk entitled "The Anatomy of a Subway Hack: Breaking Crypto RFIDs & Magstripes of Ticketing Systems" at the Defcon hacker conference last August. The students had planned to show that they had reverse engineered the MBTA's CharlieTicket magnetic stripe tickets and CharlieCard smartcards. The CharlieCard uses the same Mifare Classic RFID (radio frequency identification) technology that was cracked earlier this year by security researchers. The MBTA had argued that the presentation could have caused "significant damage" to the transit system, but the students had said that they had no intention of releasing key pieces of information that would have allowed people to hack the system. [...] _______________________________________________ Help InfoSecNews.org with a donation! http://www.infosecnews.org/donate.htmlReceived on Tue Dec 23 2008 - 01:08:09 PST
This archive was generated by hypermail 2.2.0 : Tue Dec 23 2008 - 01:16:53 PST