S
sk8terg1rl
Hey guys. I was curious whether it is possible to hack the
authentication process of Oyster cards, simply out of academic
interest. Sorry if this is off topic but I don't know where else to
ask, and I thought this group would at least have a few technologically
inclined people who could point me in the right direction.
First off, the legalities:
I fully intend to pay my fares but I am against the Big Brother
monitoring system. So if I go from A -} B, both in Zone 1, I can just
check in/out at A before starting my journey. That way I still pay the
money that is due but frustrate the monitoring system.
AIUI we are required to pay the fares due, and passengers are under no
obligation to provide further information that is frankly none of TfL's
business.
Is what I am suggesting illegal?
Now, the technicalities:
Does the Oyster card work by storing the amount of £££ stored on the
RFID chip on it, or does it work by storing a unique ID code that is
cross-referenced with a central database recording how much fare money
that ID number has left?
Theoretically:
If it is the former, I will need to double the amount of money I have
and use two Oyster cards, one with a hacked £££ and one with the
actual £££. So at A I use the actual £££ one twice while at B I
used the hacked £££ one as a "Get out of Jail" card.
If it is the latter, then I use the real one at A twice and spoof some
other ID at B. I will probably need to get the ID of a Freedom Pass,
e.g. by going near a Senior Citizen or bobby and reading their RFID
chip with a portable RFID reader...lol!
Thanks
authentication process of Oyster cards, simply out of academic
interest. Sorry if this is off topic but I don't know where else to
ask, and I thought this group would at least have a few technologically
inclined people who could point me in the right direction.
First off, the legalities:
I fully intend to pay my fares but I am against the Big Brother
monitoring system. So if I go from A -} B, both in Zone 1, I can just
check in/out at A before starting my journey. That way I still pay the
money that is due but frustrate the monitoring system.
AIUI we are required to pay the fares due, and passengers are under no
obligation to provide further information that is frankly none of TfL's
business.
Is what I am suggesting illegal?
Now, the technicalities:
Does the Oyster card work by storing the amount of £££ stored on the
RFID chip on it, or does it work by storing a unique ID code that is
cross-referenced with a central database recording how much fare money
that ID number has left?
Theoretically:
If it is the former, I will need to double the amount of money I have
and use two Oyster cards, one with a hacked £££ and one with the
actual £££. So at A I use the actual £££ one twice while at B I
used the hacked £££ one as a "Get out of Jail" card.
If it is the latter, then I use the real one at A twice and spoof some
other ID at B. I will probably need to get the ID of a Freedom Pass,
e.g. by going near a Senior Citizen or bobby and reading their RFID
chip with a portable RFID reader...lol!
Thanks
