You are here: Fairness.com > Resources > Massachusetts Bay Transportation Authority (MBTA)

Massachusetts Bay Transportation Authority (MBTA)


Self Description

Third-Party Descriptions

August 2008: 'So far, the security flaws have only been verified in the FasTrak system, but other toll systems, like E-Z Pass and I-Pass, need to be looked at too, argues Lawson. "Every modern system requires a public security review to be sure there aren't different but related problems," he says. Indeed, in recent weeks, researchers announced flaws in another wireless identification system: the Mifare Classic chip, which is used by commuters on transport systems in many cities, including Boston and London. However, last week, the Massachusetts Bay Transportation Authority (MBTA) filed a lawsuit to prevent students at MIT from presenting an analysis of Boston's subway system.'

http://www.technologyreview.com/communications/21301/?a=f

August 2008: 'presentation "Anatomy of a Subway Hack" would have revealed ways to forge or copy both the old magnetic-stripe passes and the newer radio-frequency identification (RFID) cards used on Boston's subway, making it possible to travel for free. The restraining order was filed on behalf of the Massachusetts Bay Transportation Authority (MBTA), which spent more than $180 million to install the system'

http://www.technologyreview.com/Infotech/21254/?a=f

Relationships

RoleNameTypeLast Updated

Articles and Resources

Date Fairness.com Resource Read it at:
Aug 25, 2008 Road Tolls Hacked: A researcher claims that toll transponders can be cloned, allowing drivers to pass for free.

ABSTRACT: In many cities, commuting requires the use of digital technology to verify the commuter's identification as a paying user of a given transportation system. These digitally integrated systems have become vulnerable to fraud, and manufacturers of the systems have not addressed the security issues.

 Technology Review
Aug 14, 2008 How (Not) to Fix a Flaw Experts say disclosing bugs prevents security flaws from festering.

QUOTE: argues that researchers need to be protected as they investigate these types of flaws. "It's extremely rare for a court to bar anyone from speaking before that person has even had a chance to speak," she says. "We think this sets a terrible precedent that's very dangerous for security research."

 Technology Review