Hey everyone,

I just got my transit pass but unfortunately there is no option to add it on the phone so, I was wondering if there is any way I can clone my pass and store it on my phone and use my phone instead. Thanks!

Ps. My phone is rooted

    • henfredemars@infosec.pub
      link
      fedilink
      English
      arrow-up
      1
      ·
      edit-2
      8 months ago

      The data sheet specifies that they do use NFC technology, so in principle it can be copied and transmitted from a smart phone. How to extract that data though? I’m not sure. That’s beyond my skills.

      Their documentation also specifies that they may integrate smart card features that specifically prevent copying by using cryptographically secure handshakes. In that case, if your card uses such features, it would be practically impossible. It depends on exactly how they are using it and I’m not sure of that.

      Think of it like how you can do NFC credit card payments, but you can’t trivially record and replay the communications. You would have to know the secrets embedded in the chip in the card. Depending on the features they use it might be impossible to clone it with consumer hardware. Even if you can speak NFC and technically replay the information.

      • ByteMe@lemmy.worldOP
        link
        fedilink
        English
        arrow-up
        1
        ·
        8 months ago

        Okay, thanks for the info. Anyway I can confirm if it’s encrypted or not?