We use cookies to provide you with a better experience. If you continue to use this site, we'll assume you're happy with this. Alternatively, click here to find out how to manage these cookies

hide cookie message

London's Oyster Card under attack

Hack to be published in October

Forget about hacking your Apple iPhone, Dutch researchers have worked out a way to hack Transport for London’s Oyster Card.

Details of how to copy the Oyster cards - that are used by millions on London's transport network - will be published in October, according to the BBC.

NXP, the makers of the travel smartcards, had won an injunction suppressing the information, but a Dutch court has now overturned this.

The security weaknesses in the Oyster card were discovered by Prof Bart Jacobs and colleagues from Radboud University, Nijmegen in March 2008.

According to the BBC report, the weaknesses centre around the Mifare Classic chip that sits at the heart of the contactless card system.

As well as being used on the 6m million Oyster cards in regular use, the Mifare chip is also used in Hong Kong's travel network, and is the basis of the Dutch Rijkspas smartcard.

Oyster is London's ticketing and revenue system. The Oyster Card can store up to £90 of cash that can be used to pay as you go, plus Travelcard or Bus Pass accounts.

Governments, also use the Mifare technology as a secure entry system for buildings.

NXP spokesman Christophe Duverne told Reuters that it would take months or years for some users of the chip to adapt their systems to defend against the attack.

"We don't mind them publishing the effects of what they have discovered to inform society, I think this is absolutely fine," he said. "But disclosing things in detail including the algorithm ... is not going to benefit society, it will create damage to society."

IDG UK Sites

How to get a free EE Power Bar: Mobile and broadband customers eligible for free smartphone charger

IDG UK Sites

Why Netflix won't terminate your account for using a VPN, probably

IDG UK Sites

Forever 21 denies pirating Adobe, Autodesk and Corel software, accuses companies of 'bullying'

IDG UK Sites

New Apple TV 2015 release date rumours: Apple's WWDC invite shows Apple TV