full-disclosure - Re: ANNOUNCE - RFIDIOt version 0.1t released

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <22559.1223486505@turing-police.cc.vt.edu>
Date: Wed, 08 Oct 2008 13:21:45 -0400
From: Valdis.Kletnieks@...edu
To: n3td3v <xploitable@...il.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: ANNOUNCE - RFIDIOt version 0.1t released

On Wed, 08 Oct 2008 16:30:51 BST, n3td3v said:
> I don't think anyone will be paying for their buses and trains anymore
> in london, they may as well lift the barrier until they get a new

OK, what % of the people who ride the buses and trains in London actually
have access to the gear needed for that exploit?

What % have access *and* are sufficiently criminal-minded to want to take
advantage of the exploit?  Remember that *most* people are basically law-abiding
and will actually pay for their cable-TV feed even when it's easy to pirate.

I'll predict that they'll see a 3%-5% drop in revenue, hardly big enough
that they need to "lift the barrier".

> system implemented. This is bad news for the intelligence services
> because they were using the oyster card to track suspected terrorists.

You have any actual evidence that they are actually doing that? You reference
a 6-month-old article that says they *want* to, with no proof that they actually
do.  In any case, if they *are* using that card, they're probably using other
means (facial recognition on CCTV cameras, etc) to track you and the other
terrorist suspects, so loss of Oyster coverage isn't a big problem.

Content of type "application/pgp-signature" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/