A transit agency in New England has filed a federal lawsuit to stop three Massachusetts Institute of Technology undergraduates from publicly presenting research at Defcon demonstrating gaping security holes in two of the agency’s electronic payment systems.

The Massachusetts Bay Transit Authority (MBTA) also named MIT in the 17-page complaint …

… The three speakers are Zack Anderson, 21, RJ Ryan, 22 and Alessandro Chiesa, 20, who on Sunday were scheduled to present research into both of the MBTA’s automated payment systems. Although one method uses magnetic strip technology and the other radio frequency identification, the researchers say it’s trivial to manipulate both cards to add hundreds of dollars in fare amounts.

Source: Agency sues to stop Defcon speakers from revealing gaping holes – By Dan Goodin, The Register (UK)

Comments

comments