Myki cards to stay despite security flaws

Australia’s Victoria government plans to keep the myki smart card in circulation after security flaws were found, despite widespread media reports saying that more than one million cards would be phased out. In a statement on the myki website, Transport Ticketing Authority (VIC) CEO Bernie Carolan assured cardholders that no personal information in stored on the cards: “The TTA believes that myki customers do not need to worry about the security of their myki card. The only information available to a hacker would be the card balance and last 10 transactions.” Students at Germany’s Ruhr University reportedly hacked the Triple DES encryption of Mifare’s DESFire cards as part of their cryptology research. TTA plans to transition to the more secure EV1 cards when its existing inventory of myki cards runs out. Link to full story in iTnews.

Original post