Article: Cloned go cards can't be stopped

[ozbob]

From Brisbanetimes click here!

Cloned go cards can't be stopped

Cloned go cards can't be stopped
Scott Casey | April 11, 2008 - 2:20PM

There is no effective way to prevent illegally cloned go cards being used on Queensland public transport system, a computer security expert says.

It was revealed today that the security system of the go cards had been hacked by security experts, leading to fears fraudsters could illegally clone the cards and use them on Translink services.

A Translink spokesman said systems were in place to detect and reject cards that had been fraudulently manipulated.

However, Professor Andy Koronios, the head of computer and information science at the University of South Australia, said it was impossible to stop fraudsters from illegally cloning and using cards.

"The average person would not be able to do it [clone cards]. While even the average hacker would have some difficulties, some people could do it," Professor Koronios said.

Professor Koronios said while any system could be susceptible to hacking, there were measures that could be taken to improve security - such as employing better encryption.

"RFID (radio frequency identification) of course is just a signal that is transmitted and anything that is transmitted can be captured," he said.

"RFID security is not a strong as it can be, but that depends on the encryption used rather than the actual signals transmitted.

"Generally [a cloned card] would be very difficult to detect. What you need to do is secure it."

However, Professor Koronios said security needed to be appropriate to the value of the information.

"If we are talking about cards that may have a particular value for transportation, then the encryption does not need to be as strong as a defence application or an ATM application," he said.

Translink has raised the security concerns with Cubic Transportation Systems, the Australian operators of the go card system, and is awaiting a response.

[ozbob]

What is the point of cloning a transport card?

Technically beyond most anyway, and I can't really imagine the hackers using a cloned go card to go on endless rides from Robina to Gympie North some how ...

These articles will raise concern with some members of the public and probably mean they will now be reluctant to use the go card.

[Zoiks]

There could become a black market for these cards

[Derwan]

It would be a lot easier to scan and print a copy of a paper monthly ticket.  I'm sure there's potential to be a black market there.  Buy the ticket, sell copies, make a profit.

This is just scaremongering and people's attempt to get their 2 minutes of fame.

No system is fool-proof.