SEARCH RESULTS
 
Showing 1-10 of 34 records
 
Expand article

Dutch RFID Transit Card Hacked

2008-01-21 06:35:43 by schneier in Schneier on Security
 
...transit card, which has already cost the government $2B -- no, that's not a typo -- has been hacked even before it has been deployed: The first reported attack was designed by two students at the University of Amsterdam, Pieter Siekerman and Maurits van der Schee. They analyzed the single-use ticket and showed its vulnerabilities in a report...
 
Tags: dutch, chip, mifare classic chip, mifare chip, dutch parliament recently, circuitry, internal circuitry, secret cryptographic algorithm, statement abut
 
 
 
 
Expand article

Oklahoma State University Parking Services server is compromised

The Article has images
2008-05-15 15:08:54 by Evan Francen in The Breach Blog
...Transit Services Victims OSU faculty, staff and students who had purchased a parking permit between July 2002 and March 2008 Number Affected as many as 70,000 Types of Data names, addresses and Social Security numbers Breach Description Oklahoma State University has discovered that a server under the control of OSU Parking and Transit...
 
Tags: server, sensitive personal information, personal information, information, server administrators, server immediately, server prior, database server, confidential information
 
 
 
 
Expand article

"Metro" employee information mistakenly posted to Web

The Article has images
2008-07-15 10:39:14 by Evan Francen in The Breach Blog
...Transit Authority ("Metro Contractor/Consultant/Branch None Victims past and present employees Number Affected 4,675 Types of Data Names and Social Security numbers Breach Description Metro has advised nearly 4,700 past and present employees that their social security numbers were published accidentally on the transit agencys Web site...
 
Tags: metro officials continue, metro officials, metro, officials, employees, letter urges employees, information, metro employees, employees responsible
 
 
 
 
Expand article

The MTA Seeks Compliance on Their Antique Vending Machines

2008-07-21 08:44:25 by Editor in Cheap Hack
 
...Transit MetroCard vending machine running Windows NT 4 Service Pack 3 I contacted the MTA (Metropolitan Transit Authority) to ask them about it. I received a response from Paul Fleuranges, vice president of Corporate Communications, MTA NYC Transit: Assuring the security of the MetroCard system is a multi-layered effort encompassing technical...
 
Tags: system, mta, fare collection system, security implications, security, mta nyc transit, nyc transit, pci, system components
 
 
 
 
Expand article

How Well "See Something, Say Something" Actually Works

2008-01-08 07:53:50 by schneier in Schneier on Security
 
...transit system. Most involved backpacks, briefcases or other items accidentally left behind by their owners. None of them, Mr. Browne said, were bombs There were, however, 816 calls to the hot line in 2006 that were deemed serious enough to require investigation by the department's intelligence division or its joint terrorism task force with...
 
Tags: line, front-line security personnel, calls, hot line, calls led, people, suspicious people, browne, normal people
 
 
 
 
Expand article

Wee-Fi: NPR on BART-Fi, San Antonio Airport Now Free

The Article has images
2008-07-07 15:47:16 by Glennf in Wi-Fi Networking News
...transit system's near-term deal to have Wi-Fi Rail put broadband across the system. It's very exciting. If successful from the technical, political, and financial viewpoints--if customers like it, especially--it could be a catalyst for transit systems worldwide to adopt on-board service, and provoke more commuting. All the tipping-point...
 
Tags: system, san antonio, rapid transit system, san francisco bay, wi-fi rail, wi-fi, adopt on-board service, transit systems worldwide, edition reports
 
 
 
 
Expand article

Protect your data: everything else is just plumbing

The Article has images
2007-07-02 20:46:32 by Steve Riley in Steve Riley on Security
...transit. Theyre decrypted only after an authorized user has been authenticated and his or her permissions have been enforced. If someone outside the RMSs domain attempts to open a file, itll just appear as nonsense. Unless your computer is enrolled in RMS and youre on the list of authorized users, this document is useless to you. Its also...
 
Tags: data security, comrms data security, data, security, confidential information, information, information security, temporary data, data vanishes
 
 
 
 
Expand article

Hannaford and Sweetbay supermarkets announce compromise of 4.2 million credit and debit cards

The Article has images
2008-03-18 00:07:06 by Evan Francen in The Breach Blog
...transit over a public network? The Payment Card Industry Data Security Standard ( PCI DSS ) states Requirement 4: Encrypt transmission of cardholder data across open, public networks Sensitive information must be encrypted during transmission over networks that are easy and common for a hacker to intercept, modify, and divert data while in...
 
Tags: credit, hannaford, breach description, breach, credit-card data breach, carry hannaford products, information, personal information, information security
 
 
 
 
Expand article

Bus Defended Against Terrorists Who Want to Reenact the Movie Speed

2008-06-10 12:31:22 by schneier in Schneier on Security
 
...Transit is currently in the process of equipping all of its roughly 3,000 buses with the technology. NJ Transit Chief of Police Joseph Bober said: "This enhanced technology helps us protect our bus drivers and customers. It's another proactive tool to protect our property, employees and customers
 
Tags: bus, bus drivers, bus companies, decamp bus lines, buses, tourist buses, technology helps, technology, commuter buses