Massachusetts Bay Transportation Authority v. Anderson et al

Filing 48

DECLARATION re 47 Reply to Response to Motion Declaration of Zack Anderson in Reply to Opposition to Motion for Reconsideration of Temporary Restraining Order by Zack Anderson, RJ Ryan, Alessandro Chiesa. (Attachments: # 1 Exhibit 1)(Kessel, Adam)

Subject: Re: Revised abstract Date: Tue, 05 Aug 2008 22:29:35 -0400 From: Zack Anderson <[e-mail]> To: Nikita Caine <[e-mail]> References: <[e-mail]> <[e-mail]>

Thanks so much! Zack Nikita Caine wrote: This should be updated on the website soon if not already, however do note the webmaster is in las vegas at the moment, and your previous abstract will be what is printed on the program. On Tue, Aug 5, 2008 at 10:24 AM, Zack Anderson <[e-mail]> wrote: Hi Nikita, We met with a Sargent Detective of the Intelligence unit at the MBTA and a Special Agent of the cybercrimes division of the FBI yesterday. The meeting went well, and our legal counsel has advised us that we can definitely proceed with the talk. If you don't mind, can you change our abstract on the website to this: "In this talk we go over weaknesses in common subway fare collection systems. We focus on the Boston T subway, and show how we reverse engineered the data on magstripe card, we present several attacks to completely break the CharlieCard, a MIFARE Classic smartcard used in many subways around the world, and we discuss physical security problems. We will discuss practical brute force attacks using FPGAs and how to use software-radio to read RFID cards. We survey 'human factors' that lead to weaknesses in the system, and we present a novel new method of hacking WiFi: WARCARTING. We will release several open source tools we wrote in the process of researching these attacks. With live demos, we will demonstrate how we broke these systems." Thanks, Zack

-------- Original Message -------Subject: Revised abstract Date: Tue, 05 Aug 2008 13:24:23 -0400

MBTA00011

From: Zack Anderson <[e-mail]> To: Nikita Caine <[e-mail]>

Hi Nikita, We met with a Sargent Detective of the Intelligence unit at the MBTA and a Special Agent of the cybercrimes division of the FBI yesterday. The meeting went well, and our legal counsel has advised us that we can definitely proceed with the talk. If you don't mind, can you change our abstract on the website to this: "In this talk we go over weaknesses in common subway fare collection systems. We focus on the Boston T subway, and show how we reverse engineered the data on magstripe card, we present several attacks to completely break the CharlieCard, a MIFARE Classic smartcard used in many subways around the world, and we discuss physical security problems. We will discuss practical brute force attacks using FPGAs and how to use software-radio to read RFID cards. We survey 'human factors' that lead to weaknesses in the system, and we present a novel new method of hacking WiFi: WARCARTING. We will release several open source tools we wrote in the process of researching these attacks. With live demos, we will demonstrate how we broke these systems." Thanks, Zack

-------- Original Message -------Subject: Re: Defcon CD Date: Thu, 31 Jul 2008 22:33:37 -0400 From: Zack Anderson <[e-mail]> To: Nikita Caine <[e-mail]> References: <[e-mail]> <[e-mail]> <[e-mail]>

We still plan on giving the talk. We left out a couple of key details from the slides, so for now I think we will be alright. We are meeting with the MBTA and legal counsel on Monday. I will keep you posted if anything changes, but expect us to give the talk. Zack Nikita Caine wrote: Zack, The CD's have been printed and are on their way to Vegas, There is no way to change it at this point. Please let me know if you will be

MBTA00012