DEF CON 31 - Infinite Money Glitch - Hacking Transit Cards - Bertocchi, Campbell, Gibson, Harris

preview_player
Показать описание
Who likes paying to ride the subway? Sure, you could hop the fare gates, but that can be athletically challenging and simply isn’t cool enough for our tastes. What’s a mischievous and miserly rider to do, then? Hack the fare system of course!

In this talk we'll walk you through how we, four high school students and cybersecurity noobs became the first to fully reverse engineer Boston’s CharlieCard fare system and earn ourselves free rides for life… or at least until the system gets fixed, whichever comes first.

We’ll start by exploring the trials and tribulations of exploring the hardware behind the CharlieCards. Next, we’ll dive into the emotional rollercoaster of reverse engineering the black box that is a transit card system older than us. We’ll then explain the process of disclosing our findings to a government agency without having to hire a legal team. Finally, we’ll show you a demo of some of the tools we made, including our own portable fare machine! By the end of our talk, regardless of whether you’re an avid RFID hackerman, or a complete noob, we’ll leave you with useful reverse engineering strategies, tips for working with a government agency, and if nothing else, a fun story.
Рекомендации по теме
Комментарии
Автор

The irony that DEFCON can hack into pretty much anything known, but can't run a slide show....

JeremyDWilliamsOfficial
Автор

A room full of hackers that can’t get a slideshow to work is literally a family guy scene

pablopaintem
Автор

Absolute ballers for carrying on with their technical speech with no slides for 20 minutes.

OzzyMandius
Автор

These are the most composed high schoolers I have ever listened to.

beatsbyandrew
Автор

These kids are fucking brilliant and inspiring. I saw this talk live and they blew me away.
Unfortunately the system in my city uses DESFire which is a lot more secure, but a lot less fun.
All these comments about the AV glitches are burying the lead.

jaredmeit
Автор

Great talk! A shame that defcon cant get their infrastructure tech together, even at $460/ticket.

jeffreyg
Автор

I felt so bad for those kids with all the technical difficulties. They did awesome tho! ❤

boneitch
Автор

Hope this gets rerecorded by the students and put online in a non panicked manner and with working slides throughout.

skellious
Автор

It’s good to see the worlds most fitting edge hackers still have problems displaying power point. 😂

SitNSpinRecords
Автор

im 40 yo and i need to say this is super inspirational, because young people like that it's a reference! incredible job guys congratulations 🎉

albertcorzo
Автор

Loved how they broke down how they discovered the vulnerability and cudo's for helping them fix it. Great job guys!

craigbabuchanan
Автор

I wish cybersecurity was available to me in high school! So cool to see this

xrk
Автор

Wow do y'all need an A/V tech? It burns my toast to see this. I really want to see the presentation, like with my eyes. As a professional audio engineer seeing egregious things like this happen at a large scale event I was tentatively excited to attend in the future makes me question how much of a priority I want to make this.

whilykitt
Автор

32:25 the values aren’t in half pennies, they just aren’t aligned properly when being checked. Shifting right 1 bit is needed to align.

JonathanTheZombie
Автор

These guys have the right spirit mixed with great humor.

simonstergaard
Автор

as someone not super into tech & watches these every once in a while, it blows my mind that these are some really techy people but they cant get the slideshow running for their event lol

JDMKEV
Автор

Choo choo!! 🚂

Great work guys! I would have had a nervous breakdown trying to get those slides working 😅

cmorche
Автор

Great talk exemplifying the best Defcon has to offer. Enthusiasm and technical skill. Keep it up, hope to see y'all come back with more exploits.

Ankudamurderer
Автор

You guys are the best! All of us involved with MATE are proud of you. There is no limit to what you will achieve in this world! Stay in touch!

c.ebenfranks
Автор

Was gonna say a room full of hackers that cant get a laptop to a projector but i dont want all my accounts hijacked so epic job guys 👍

mattybond