Clone scanned cards and replay on scan?

pkern / kitcard-reader

An app to read the purse of the student's card of universities in Karlsruhe and Pforzheim (NOTE: This app no longer works with the current system, so this code is effectively obsolete.)

GNU General Public License v2.0

11 stars 2 forks source link

Clone scanned cards and replay on scan? #12

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago

This way you could use your mobile to pay and open doors with.
Would this be a hard thing to implement?
Would just duplicating the raw read be sufficient, if not otherwise possible?

Original issue reported on code.google.com by alex.lam...@gmail.com on 11 Feb 2014 at 2:24

GoogleCodeExporter commented 9 years ago

The cards are not readonly and given that the wallet value is stored on the 
card, this would allow double spending. (I did not design the system.)

Original comment by philipp.kern on 11 Feb 2014 at 4:16

Changed state: WontFix

GoogleCodeExporter commented 9 years ago

Wow, I didn't even know... this seems rather insecure.

Original comment by alex.lam...@gmail.com on 11 Feb 2014 at 4:20