Hi Guys,
If you have 15 minutes to spare, here is an excellent blog post from someone going by the name ‘Bobbyr’ showing how to hack the Charlie Card, a contactless smart card used for transportation fare payment in the Boston area. The following is the introduction of the post that you can read in full HERE:
__
The CharlieCard is a contactless smart card used for transportation fare payment in the Boston area. It is the primary payment method for the Massachusetts Bay Transportation Authority (aka MBTA or the T) and several regional public transport systems in the U.S. state of Massachusetts. Nearly 15 years after a group of MIT students first publicly disclosed security vulnerabilities in the CharlieCard, I am publicly disclosing that it is possible using only an Android phone to:
- Have a replacement CharlieCard delivered to a listed address without paying
- Provision a new CharlieCard with funds without paying
- Steal anyone’s CharlieCard with a single physical tap of the card against a phone in a matter of seconds
__
I hope you are keeping well.
All the best,
Max Roberts,
Incognito Privacy Care Team