June 2008 Archives

It appears that security researchers at Radboud University in Nijmegen, in the Netherlands, have extended their previous demonstration of the flaws in their own Phillips MiFare based travel cards, to the similar system used in the London Oyster Card.

See the reports by ZDnet: and the translation of a report about the researchers' evidence to the Netherlands Parliament regarding such transport card vulnerabilities:

They can reportedly use an Oyster Card, and then re-set the monetary balance, something which shows that the system is possibly vulnerable to fraud.

Transport for London claim that they would detect such a scam within 24 hours and so it would only be limited one day's free travel.

However, this assumes that the Dutch researchers, or any criminals exploiting the same vulnerabilities, are using are not spoofing or re-programming the Oyster card's serial number every day, as well as re-setting the monetary credit balance, in which case, this will not be picked up via a nightly accounting reconciliation subroutine on the central database.

If randomly chosen, or specifically targeted Oyster card serial numbers were to be re-programmed, then the Transport for London / TranSys consortium anti-fraud routines could be abused to create a Denial of Service attack on random innocent travellers or specific targets.

More worryingly, it appears that they can also cause a software malfunction in the Tube Gates, which are then jammed shut, after their Denial of Service attack presumably sends the wrong sort of code to the system.

At busy stations during the rush hour, this sort of Denial of Service attack could cause a lot of misery, and could potentially put lives at risk, especially at those stations which have Oyster card barriers very close to the up escalators, where there is a risk of people get trampled by a panicked crowd.

Transport for London must immediately ensure that Tube gates cannot be jammed shut by such a software malfunction. This is a safety issue, and , as such, must be given a far higher priority than any anti-fraud measures.

Transport for London need to actually publicly demonstrate that they have responded properly, to make such potential attacks impossible, and not just issue public relations spin that claim that there is no real problem.

Boris Johnson has now resigned his seat as Member of Parliament for Henley on Thames, not through the mechanism of the Chlitern Hundreds, but through that of the Manor of Northstead ("The position of Crown Steward and Bailiff of the Manor of Northstead is now used as a procedural device to effect resignation from the House of Commons, since British MPs are not permitted simply to resign their seat. Under the Act of Settlement, any Member of Parliament accepting an office of profit under the Crown must give up his or her seat.")

HM Treasury Press Release:


54/08

04 June 2008
Manor of Northstead

The Chancellor of the Exchequer has today appointed Alexander Boris de Pfeffel Johnson to be Steward and Bailiff of the Manor of Northstead.

So, bearing in mind possible party political considerations regarding the timing of the by-election, Boris Johnson has resigned his seat as an MP one month after being elected Mayor of London.

This contrasts very favourably with Ken Livingstone, who clung on to his seat as MP for Brent East, "double dipping" from the public purse for over a year after being elected as Mayor of London for the first time ion 4th May 2000. He only left when Parliament was dissolved on 14th May 2001, in preparation for the June 2001 General Election.

The Daily Mail website has some photos of Saturday night's utterly predictable "Last Orders" alcoholic binge on the the Tube.before Boris Johnson's ban on drinking alcohol came into force.

Pictured: Chaotic scenes as alcohol-fuelled Facebook party to mark the end of drinking on the tube ends in violence

Many began fighting and vomiting, seven Tube staff and two police officers were assaulted, six Underground stations had to be closed and several trains were taken out of service after party-goers began smashing them up.

Police made 17 arrests

Apart from the extra crowds caused by closing the 6 Tube stations, how was this worse than a typical Saturday night, with say, crowds of football supporters roaming the the Tube ?

The only difference was that the Police were actually on the spot, instead of hiding away somewhere, as they normally are.

The problem with alcohol on public transport is not so much what goes on in central London, but what happens on the last bus or tube or national rail train home on a Friday or Saturday night, when the extra alcohol being consumed in transit , in addition to that which people who have been drinking all evening, kicks in.

There are usually no British Transport police riding such tubes, buses or trains .out into to the suburbs, and CCTV does absolutely nothing to deter drunken violent or anti-social behavior.

We will wait and see how this new policy will actually be enforced over the next few weeks and months.

About this blog

This website comments on the policies of the Mayor of London, the London Assembly and the Greater London Authority and actually pre-dates even the referendum which took place before these public bodies were set up.

Email Contact

Please feel free to email us your views about this website or news about the issues it tries to comment on:

blog @mayor-of-london.co.uk

If you need to contact us in confidence, use our our PGP public encryption key or an email account based overseas e.g. Hushmail

Please do not confuse this website with the tax payer funded Mayor of London, the London Assembly and the Greater London Authority website.

Do not confuse that lot with the ancient office of the Lord Mayor of London either.

Hints and Tips for Whistleblowers

There are many good people trapped in the bureaucracies which run London. If you are thinking about blowing the whistle on shadowy and powerful people in Government or commerce, and their dubious policies then you need be very careful these days. The mainstream media and bloggers also need to take simple precautions to help preserve the anonymity of their sources e.g.

Links

Wikipedia article on the Mayor of London

Wikipedia article on the London Assembly

The Evening Standard newspaper - fulfills its role by scrutinising the Mayor and the GLA etc. rather more effectively than the politicians and bureaucrats do.

Mayor of London press releases

London Assembly press releases

MayorWatch - commercial news site about the Mayor of London etc.

Campaign Button Links

Watching Them, Watching Us, UK Public CCTV Surveillance Regulation Campaign
UK Public CCTV Surveillance Regulation Campaign

NO2ID - opposition to the NuLabour Compulsory Biometric ID Card
NO2ID - opposition to NuLabour's plans for Compulsory Biometric ID Card and National Identity Register centralised database.

asboconcern logo
ASBO Concern - alliance of organisations and individuals who are concerned about the abuse of NuLabour's Anti Social Behaviour Orders.

MI5 encrypted contact web form use 999 or 112 to report immediate threats
Encrypted MI5 web response form NuLabour's "Climate of Fear" is not the same as the real fight against terror.

gamesmonitor_logo_150.gif Games Monitor - "Games Monitor is a network of people raising awareness about issues within the London Olympic development processes. We want to highlight the local, London and international implications of the Olympic industry. We seek to deconstruct the 'fantastic' hype of Olympic boosterism and the eager complicity of the 'urban elites' in politics, business, the media, sport, academia and local institutional 'community stakeholders'. "

Peaceful resistance to the curtailment of our rights to Free Assembly and Free Speech in the SOCPA Designated Area around Parliament Square and beyond
Parliament Protest blog - resistance to the Designated Area resticting peaceful demonstrations or lobbying in the vicinity of Parliament.

Save Parliament: Legislative and Regulatory Reform Bill (and other issues)
Save Parliament - Legislative and Regulatory Reform Bill Act

Ken Livingstone Links

Syndicate this site (XML):

December 2014

Sun Mon Tue Wed Thu Fri Sat
  1 2 3 4 5 6
7 8 9 10 11 12 13
14 15 16 17 18 19 20
21 22 23 24 25 26 27
28 29 30 31