Jonathan Richards
Enter our Snapshots of Summer photography competition
Details of a computer hack which allowed researchers to clone identity cards that are used by million of people to access buildings and travel on public transport are to be published.
The company which makes the Mifare smartcard, which is used to gain access to thousands of British schools as well to ride on the London Underground and buses, had sought to prevent Dutch researchers from publishing details of the hack.
But a court in Holland has overturned an injunction that would have prevented the publication of the research, paving the way for academics from Radboud University to explain how they were able to ride the Tube free for a day with a cloned Oyster card - and sneak into Dutch government buildings.
After learning of the breach in April, the Dutch government posted armed guards outside all its buildings, and postponed the introduction of a new €1 billion transport payment system similar to the Oyster card until the security issues had been addressed.
Professor Bart Jacobs, who led the research team, said he would hold off publishing his findings until the Dutch Government and NXP, which makes the technology used in Mifare cards, had had a chance to make their systems more resilient.
But NXP sought an injunction to ensure the details of the hack would never be made public. A court in Arnhem has now overturned the injunction, citing freedom of expression laws. "(The) damage to NXP is not the result of the publication of the article, but of the production and sale of a chip that appears to have shortcomings," the court said.
Radboud University welcomed the ruling, saying that "in a democratic society it is of great importance that the results of scientific research can be published".
A spokesman for NXP, which was formerly a division of Philips, the electronics manufacturer, said: "We don't mind them publishing the effects of what they have discovered to inform society. I think this is absolutely fine. But disclosing things in detail including the algorithm ... is not going to benefit society, it will create damage to society."
Transport for London said it remained confident that the Oyster card system, used by millions of people on London's Tube and bus network, was secure, but added that it was "constantly reviewing" its security procedures.
The Dutch Interior Ministry said at the time the hack was made public that it was replacing 120,000 cards used by civil servants to access Government buildings. About ten million Mifare smartcards are sold in Britain each year, and are used to access public buildings as well as in contactless payment systems.
Win a luxury weekend to Newcastle and its neighbour Gateshead, find out more here
Risk, resilience and embracing new technology
Industry sectors news at a glance. Interactive heatmap, video and podcast
Discover the collective power of smart thinking. Submit a solution and be in with a chance to win a Flip MinoHD Camcorder
The inside track on current trends in the charity, not for profit and social enterprise sectors
Everything the Business Traveller needs to know to make a better trip
Make the most of the summer and enter our fabulous photographic competition, you could win a £5000 holiday
Corsica is an island of beauty and contrast, an ideal holiday destination
Enjoy further reading from Travel to Fashion, Business to Sport, discover more
Shortcuts to help you find sections and articles
The clever way to lease a new car is with Car leasing made simple™
2009
42,945
2008
71,450
Car Insurance
Not Specified
MI6
UK-based
£60,000
The Environment Agency
Bristol
Up to £90K
Boots
Midlands
OTE £85k
Credit Protection Association
Nationwide Opportunities
Completely London
Luxury Condo's in Manhattan with NYC views
The best new homes in Wimbledon?
Nationwide
Save up to £1,000 per couple with Elite Vacations at the five-star Constance Lemuria Resort
and do the British Isles this Summer.
Save up to 60% with Oxford Hotels and Inns
Try our inspiring luxury holidays to the Indian Subcontinent and South East Asia.
Great offers available
8 fabulous Canadian cities ...you won’t find cheaper
Contact our advertising team for advertising and sponsorship in Times Online, The Times and The Sunday Times, or place your advertisement.
Times Online Services: Dating | Jobs | Property Search | Used Cars | Holidays | Births, Marriages, Deaths | Subscriptions | E-paper
News International associated websites: Globrix Property Search | Property Finder | Milkround
Copyright 2009 Times Newspapers Ltd.
This service is provided on Times Newspapers' standard Terms and Conditions. Please read our Privacy Policy.To inquire about a licence to reproduce material from Times Online, The Times or The Sunday Times, click here.This website is published by a member of the News International Group. News International Limited, 1 Virginia St, London E98 1XY, is the holding company for the News International group and is registered in England No 81701. VAT number GB 243 8054 69.
This security approach is hopeless. Once a piece of technology (smart cards, dvd encryption) is out in the open, it will get cloned, it will get hacked. The entertainment industry tried it with DVD, blu-ray, etc., and failed. The question is whether it's an acceptable risk for the application.
Stephen van Egmond, Toronto, Ontario
Absolutely right that the research should be published. If the alogrithm was faulty then it should be rethought. If university staff can hack it so can criminal elements.
Richard Jefferies, Castaño del Robledo, Spain