Hey everyone,

I just got my transit pass but unfortunately there is no option to add it on the phone so, I was wondering if there is any way I can clone my pass and store it on my phone and use my phone instead. Thanks!

Ps. My phone is rooted

  • Otter@lemmy.ca
    link
    fedilink
    English
    arrow-up
    1
    ·
    7 months ago

    Could you share more details about the pass, or where you are in the world? It might help figure out which technologies are being used

      • henfredemars@infosec.pub
        link
        fedilink
        English
        arrow-up
        1
        ·
        edit-2
        7 months ago

        The data sheet specifies that they do use NFC technology, so in principle it can be copied and transmitted from a smart phone. How to extract that data though? I’m not sure. That’s beyond my skills.

        Their documentation also specifies that they may integrate smart card features that specifically prevent copying by using cryptographically secure handshakes. In that case, if your card uses such features, it would be practically impossible. It depends on exactly how they are using it and I’m not sure of that.

        Think of it like how you can do NFC credit card payments, but you can’t trivially record and replay the communications. You would have to know the secrets embedded in the chip in the card. Depending on the features they use it might be impossible to clone it with consumer hardware. Even if you can speak NFC and technically replay the information.

        • ByteMe@lemmy.worldOP
          link
          fedilink
          English
          arrow-up
          1
          ·
          7 months ago

          Okay, thanks for the info. Anyway I can confirm if it’s encrypted or not?