
Transit systems across Canada stand to lose tens of thousands of dollars to fare fraud, and access to office buildings could be compromised, after a security flaw in some of their smart-card technology was widely publicized this week.
Computer-security researchers at the Radboud University Nijmegen in the Netherlands revealed how the smart-card technology, called Mifare, can be hacked to let anyone with a computer and $100 worth of parts create counterfeit transit and building-access passes.
Mifare uses a radio-frequency-emitting computer chip embedded in a plastic card. Transit riders wave the card over a reader to pay fares, while employees and students flash it at secured doorways to gain admittance in many offices and schools.
The technology has been implemented in transit systems in St. John's, Gatineau, Que., the Greater Toronto Area and the Ontario cities of Kingston and Brantford, and is under consideration for use in Saskatoon.