<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	xmlns:georss="http://www.georss.org/georss" xmlns:geo="http://www.w3.org/2003/01/geo/wgs84_pos#" xmlns:media="http://search.yahoo.com/mrss/"
	>

<channel>
	<title>HexEsec &#124; a pentester's view &#187; madness</title>
	<atom:link href="http://hexesec.wordpress.com/tag/madness/feed/" rel="self" type="application/rss+xml" />
	<link>http://hexesec.wordpress.com</link>
	<description>sudo apt-get install ... security?</description>
	<lastBuildDate>Wed, 16 Dec 2009 23:34:30 +0000</lastBuildDate>
	<generator>http://wordpress.com/</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<cloud domain='hexesec.wordpress.com' port='80' path='/?rsscloud=notify' registerProcedure='' protocol='http-post' />
<image>
		<url>http://www.gravatar.com/blavatar/92201dabe8b4987549fde15513466bfb?s=96&#038;d=http://s.wordpress.com/i/buttonw-com.png</url>
		<title>HexEsec &#124; a pentester's view &#187; madness</title>
		<link>http://hexesec.wordpress.com</link>
	</image>
	<atom:link rel="search" type="application/opensearchdescription+xml" href="http://hexesec.wordpress.com/osd.xml" title="HexEsec | a pentester&#8217;s view" />
		<item>
		<title>Defcon MBTA Madness!</title>
		<link>http://hexesec.wordpress.com/2008/08/12/defcon-mbta-madness/</link>
		<comments>http://hexesec.wordpress.com/2008/08/12/defcon-mbta-madness/#comments</comments>
		<pubDate>Tue, 12 Aug 2008 15:52:52 +0000</pubDate>
		<dc:creator>jcran</dc:creator>
				<category><![CDATA[news]]></category>
		<category><![CDATA[defcon]]></category>
		<category><![CDATA[EFF]]></category>
		<category><![CDATA[jabra]]></category>
		<category><![CDATA[madness]]></category>
		<category><![CDATA[mbta]]></category>
		<category><![CDATA[quine]]></category>

		<guid isPermaLink="false">http://hexesec.wordpress.com/?p=20</guid>
		<description><![CDATA[Wow, the MBTA is in deep shit. If you haven&#8217;t heard about this, 3 kids from MIT did some analysis on the MBTA fare system and found out how bad it actually is. We&#8217;ve (jabra + quine + myself) debated whether the card is actually storing $$ value, and it turns out it is. Check [...]<img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=hexesec.wordpress.com&blog=4149787&post=20&subd=hexesec&ref=&feed=1" />]]></description>
			<content:encoded><![CDATA[<div class='snap_preview'><br /><p>Wow, the MBTA is in deep shit. If you haven&#8217;t heard about this, 3 kids from MIT did some analysis on the MBTA fare system and found out how bad it actually is. We&#8217;ve (<a href="http://spl0it.org">jabra</a> + <a href="http://n0where.org">quine</a> + myself) debated whether the card is actually storing $$ value, and it turns out it is. Check out this <a href="http://blog.wired.com/27bstroke6/files/vulnerability_assessment_of_the_mtba_system.pdf">VA report published by Wired</a> and the <a href="http://blog.wired.com/27bstroke6/2008/08/injunction-requ.html">corresponding article</a>. So now they&#8217;ve been issued a restraining order, and weren&#8217;t allowed to talk at Defcon. Here&#8217;s hoping they get off of this, as it has ramifications for security research:</p>
<p>Marcia Hoffman of the EFF (Stolen from Wired):</p>
<p>&#8220;Basically, what the court is suggesting here is that giving a presentation involving security to other security researchers is a violation of federal law,&#8221; she said. &#8220;As far as I know, this is completely unprecedented, and it has a tremendous chilling effect on sharing this sort of research. . . . And we intend to fight it with everything we&#8217;ve got.&#8221;</p>
<p>I&#8217;ll post more info on the highlights from BlackHat / Defcon soon.</p>
<p>/me heads off to buy an RFID cloner + pay EFF dues.</p>
<img alt="" border="0" src="http://feeds.wordpress.com/1.0/categories/hexesec.wordpress.com/20/" /> <img alt="" border="0" src="http://feeds.wordpress.com/1.0/tags/hexesec.wordpress.com/20/" /> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gocomments/hexesec.wordpress.com/20/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/comments/hexesec.wordpress.com/20/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godelicious/hexesec.wordpress.com/20/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/delicious/hexesec.wordpress.com/20/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/gostumble/hexesec.wordpress.com/20/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/stumble/hexesec.wordpress.com/20/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/godigg/hexesec.wordpress.com/20/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/digg/hexesec.wordpress.com/20/" /></a> <a rel="nofollow" href="http://feeds.wordpress.com/1.0/goreddit/hexesec.wordpress.com/20/"><img alt="" border="0" src="http://feeds.wordpress.com/1.0/reddit/hexesec.wordpress.com/20/" /></a> <img alt="" border="0" src="http://stats.wordpress.com/b.gif?host=hexesec.wordpress.com&blog=4149787&post=20&subd=hexesec&ref=&feed=1" /></div>]]></content:encoded>
			<wfw:commentRss>http://hexesec.wordpress.com/2008/08/12/defcon-mbta-madness/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
	
		<media:content url="http://0.gravatar.com/avatar/a7ddf41647a2dd583835558cdf11b280?s=96&#38;d=identicon&#38;r=G" medium="image">
			<media:title type="html">jcran</media:title>
		</media:content>
	</item>
	</channel>
</rss>