Bertocchi, Campbell, Gibson & Harris: Infinite Money Glitch — Hacking Transit Cards
A DEF CON 31 talk about reverse engineering Boston’s subway payment system. Four students analyzed the CharlieCard and discovered a way to ride for free.
They explain how they studied the card hardware, analyzed the legacy payment system, and reconstructed its logic step by step. The talk also covers responsible disclosure to government authorities.
It features custom-built tools — including a portable payment terminal — and introduces basic techniques for reverse engineering RFID cards and closed systems.
They explain how they studied the card hardware, analyzed the legacy payment system, and reconstructed its logic step by step. The talk also covers responsible disclosure to government authorities.
It features custom-built tools — including a portable payment terminal — and introduces basic techniques for reverse engineering RFID cards and closed systems.