Security researchers identify transit system exploit in San Fran and New Jersey, create app to prove it

Security researchers identify transit system exploit in San Fran and New Jersey, create app to prove it

Mobile security company Intrepidus Group presented evidence during the EUSecWest security conference potentially identifying a major flaw in at least two US transit systems. Creating an Android app named "UltraReset" and using it in tandem with an NFC-enabled Android phone (a Nexus S, in this case), security researchers Corey Benninger and Max Sobell were able to reset and reuse -- free of charge -- transit access cards in both San Francisco's MUNI system and New Jersey's PATH system. Before you go getting any bad ideas, know that Benninger and Sobell haven't released the app for public use, and warned both transit systems in late 2011 (though neither region has fixed the exploit, the duo claim). PATH and MUNI share a common chip access card -- the Mifare Ultralight -- which can apparently be reset for 10 extra rides (as demonstrated on video below) via Android phones with NFC, an OS newer than 2.3.3 (Gingerbread). Starting to sound familiar?

Intrepidus is, however, releasing a modified version of the app, named "UltraCardTester." The modified app functions just like its nefarious progenitor, except it can't add time to cards (see it in action below). The app can tell you how many rides you have left, and if a system is open to exploit, but it won't assist you in the act of exploiting. We reached out to both New Jersey's PATH and San Francisco MUNI on the issue, but have yet to hear back as of publishing.

Continue reading Security researchers identify transit system exploit in San Fran and New Jersey, create app to prove it

Filed under: , , , ,

Security researchers identify transit system exploit in San Fran and New Jersey, create app to prove it originally appeared on Engadget on Sun, 23 Sep 2012 19:48:00 EDT. Please see our terms for use of feeds.

Permalink   |  sourceIDG News Service  | Email this | Comments

Isis’ NFC mobile payments delayed past September target

Isis NFC mobile payment video

Isis must have spoken too soon. Just days after the alliance committed to launching its mobile payment system in September, its marketing lead Jaymee Johnson has warned FierceMobileContent that the rollout won't make the promised summer target. The delay is portrayed as a collection of minor hiccups, although we're not bracing ourselves for a short wait: Isis plans to update us on the situation in October, and that suggests we won't be making NFC-based purchases on Isis any sooner. It's another disappointment for the future-is-now crowd hoping to leave cash behind -- not that Apple and Google will object to a rival's misstep.

Filed under: ,

Isis' NFC mobile payments delayed past September target originally appeared on Engadget on Thu, 13 Sep 2012 17:27:00 EDT. Please see our terms for use of feeds.

Permalink   |  sourceFierceMobileContent  | Email this | Comments

Apple’s Phil Schiller explains new ‘Lightning’ port, doesn’t think much of NFC and wireless charging

Apple VP explains lack of NFC, wireless charging in iPhone 5, new 'Lightning' port

Now that we know much, much more about Apple's latest iPhone, we can't help but wonder why certain features are missing from the iPhone 5. For instance, near-field communication -- standard in many iPhone competitors -- is notably absent. This seems especially odd considering iOS 6's Passbook feature, which acts like a virtual wallet for gift cards, boarding passes, and other such things, would be a perfect fit for NFC technology. "Passbook does the kinds of things customers need today," Apple senior VP Phil Schiller told All Things D.

Schiller also explained the reason for the iPhone 5's new "Lightning" port, which allows for faster data transfer between phone and computer, but also requires an adapter ($29) for use with Apple's previous wire standard. Apparently Apple's future lineup would be impossible without the new connecter, according to Schiller. He attempted to assuage concerned consumers with one hopeful promise: "This is the new connector for many years to come."

And finally, when pressed on wireless charging -- a main feature of Nokia's flagship Windows Phone 8 device, the Lumia 920 -- Schiller said such a feature offers little to consumers beyond confusion. "Having to create another device you have to plug into the wall is actually, for most situations, more complicated," he said. As per usual, the iPhone 5 will charge via USB -- using the new dock connector, of course. But surely, turning a bunch of cables into just one giant wireless charging plate aligns well with Apple's simplicity design, right?

Filed under: ,

Apple's Phil Schiller explains new 'Lightning' port, doesn't think much of NFC and wireless charging originally appeared on Engadget on Wed, 12 Sep 2012 17:29:00 EDT. Please see our terms for use of feeds.

Permalink   |  sourceAll Things Digital  | Email this | Comments

iPhone 5: the rumor roundup

iPhone 2012 and iPhone 4S shells compared

We're on the cusp of Apple's sixth iPhone launch, and there's very different expectations than there were last year. The 2011 rumor cycle left more than a few people burned: the later-than-usual October launch and repeated claims of a heavily-remade design led some to a disappointment when the iPhone 4S arrived, even though the final product had a slew of camera, speed and voice command upgrades. This year, the rumors have been grounded well before there was an event date in our hands.

There have been fewer instances of wild rumors. Instead, it's been based more around pragmatism, using either tangible leaks or sources that have a solid track record. Think of the perennial leaks from the Wall Street Journal or the increasingly well-established sourcing from iMore and The Loop. Whether you're conspiracy-minded or not, it's been hard to ignore the sheer number of claims that have tamped down expectations rather than inflated them. It's as though there's a collective fear we'll see a repeat of the 2011 hysteria and deal with fans (or detractors) complaining about missing features that were never promised in the first place.

Where last summer was full of uncertainty, this year there's a mounting consensus as to what we'll see, how we'll get it, and when. Tracking everything that's been mentioned may be a handful, however. With that in mind, we'll dive in and gauge what's likely to emerge from behind Apple's curtain on September 12th -- as well as what we can rule out from the get-go.

Continue reading iPhone 5: the rumor roundup

Filed under: ,

iPhone 5: the rumor roundup originally appeared on Engadget on Tue, 11 Sep 2012 10:00:00 EDT. Please see our terms for use of feeds.

Permalink   |   | Email this | Comments

LevelUp unveils payment docks that take both NFC and QR codes, leave out the guesswork

LevelUp unveils payment docks that take both NFC and QR codes, leave out the guesswork

Most stores accepting mobile payments usually have to take just one format, whether it's Google Wallet, Square or another flavor that you probably can't use. LevelUp is convinced you shouldn't have to choose platforms: it just revealed a new payment dock that will recognize both the company's existing QR code system as well as NFC. It's much easier sight on the eyes than typical NFC terminals, to boot. Just don't expect a one-for-one recreation of systems like Google Wallet or Isis. Rather than expose your banking details by holding them in a chip, LevelUp's NFC is just used to move the transaction along -- if it's used to get things started, shoppers can either switch to a QR code or complete the transaction with a second tap. The company is mostly planning to replace its existing payment points across the US with the NFC-aware models. Bluetooth 4.0 is an option for the future, however, which could make LevelUp even more of a Swiss Army Knife for the world of mobile commerce.

Filed under: ,

LevelUp unveils payment docks that take both NFC and QR codes, leave out the guesswork originally appeared on Engadget on Fri, 07 Sep 2012 03:33:00 EDT. Please see our terms for use of feeds.

Permalink   |  sourceGigaOM  | Email this | Comments

Sony VAIO Duo 11 slides its way past the FCC

Sony VAIO Duo 11 slides its way past the FCC

Sony is clearly bent on getting the VAIO Duo 11 to market on time -- just as we're recovering from our post-IFA jet lag, the Windows 8 slider has popped up for approval at the FCC. The PC put through the wringer is very much like what we saw at the show, with 802.11n WiFi, Bluetooth, NFC and that signature stylus on offer. There's no sign of 3G or 4G for the road warrior crowd. We don't have any clues as to the exact US release timing from the FCC's sign-off, but it does clear a path for an American release side by side with the European model in late October, if Sony yearns for some international synchronicity.

Filed under: ,

Sony VAIO Duo 11 slides its way past the FCC originally appeared on Engadget on Thu, 06 Sep 2012 09:53:00 EDT. Please see our terms for use of feeds.

Permalink   |  sourceFCC  | Email this | Comments

Spotify comes to Denon and Marantz receivers, shares music over NFC

Spotify comes to Denon and Marantz receivers, shares music over NFC

Spotify didn't want to leave all the spotlight time to phone manufacturers today. To start, it's widening its toehold in the living room: three Denon AV receivers and four Marantz counterparts now have support for streaming Spotify Premium music through respective firmware updates, with control coming either through the on-device screen or through Denon's mobile remote app. You're not necessarily left out if you have no compatible home theater to call your own, however. As long as you have a device with at least Android 4.0, an update to the Spotify app will let you apply audio effects or share Premium music between NFC devices through a tap. All of the updates are free -- just know that you'll need Spotify's full $10 per month subscription to grease the wheels. Check the source links for the supported receivers and app updates.

Filed under: , ,

Spotify comes to Denon and Marantz receivers, shares music over NFC originally appeared on Engadget on Wed, 05 Sep 2012 16:18:00 EDT. Please see our terms for use of feeds.

Permalink The Next Web  |  sourceSpotify (1), (2), Google Play  | Email this | Comments

Nokia’s Purity HD stereo headset by Monster goes Pro, gains Bluetooth, NFC and noise cancellation (update)

Nokia's Purity HD Headset by Monster goes Pro, ditches cord with Bluetooth in the process

If Nokia doesn't show off at least one banana-hued Lumia smartphone come September 5th, we're going to be extremely confused. Say howdy to the Pro-monikered followup to its corded Purity HD stereo headset by Monster, which gains Bluetooth (no word on what version), NFC for pairing and active noise cancellation. Similar to its recently revealed PlayUp speaker, the company's teasing the the Purity HD Pro as an audio accessory that'll "perfectly match your Lumia" in a choice of black, white, red and yellow. The Pro is essentially identical to its predecessor, but now the folding earcups also serve as a pseudo-on/off switch for its anc functionality for the unit itself. As you might expect, all that tech and Monster branding will cost ya a spendy €299 (about $376) -- nearly as much as Parrot's Zik by Starck. Further details are currently unavailable, except that the cans will reach store shelves near this year's close.

Update: You'll find a video hands-on by way of The Nokia Blog here. According a Nokia rep in that video, the earpads have a head detection sensor for automatically enabling ANC (similar to the Zik), while plugging in an included cable will let the headphones function sans Bluetooth. Furthermore, the company also noted to TNB that the battery should last about 24 hours for music or calls, with a week's worth of life on standby.

Filed under: ,

Nokia's Purity HD stereo headset by Monster goes Pro, gains Bluetooth, NFC and noise cancellation (update) originally appeared on Engadget on Sun, 02 Sep 2012 15:04:00 EDT. Please see our terms for use of feeds.

Permalink Nokia Converstations  |  sourceNokia  | Email this | Comments

Sony unveils VAIO Duo 11 slide-out tablet, Tap 20 portable touchscreen all-in-one

Sony unveils VAIO Duo 11 slideout tablet, Tap 20 portable touchscreen allinone

Sony just threw itself fully into the touchscreen Windows 8 arena -- it's introducing the VAIO Duo 11 slider tablet and the Tap 20 combination desktop and tablet design at its IFA 2012 press conference. The Duo 11 is a noticeably amped-up realization of the Hybrid concept we saw at CES. Its 11.6-inch, 1080p touchscreen is joined by a proper digitizer stylus for low-lag handwriting as well as some seriously powerful innards for a convertible PC its size: we're talking an Ultrabook-level Core i3, i5 or i7 as well as a 128GB or 256GB SSD, NFC wireless, GPS, and HD-capable cameras at the front and back. Sony is hoping for a late October release for this beast of a slate, although we haven't been given that all-important price.

The VAIO Tap 20, meanwhile, is more than just a tilting all-in-one desktop in the vein of Lenovo's IdeaCentre A720. Despite carrying a 20-inch, 1,600 x 900 touchscreen, it's still very much battery-powered -- you can lug the 11.4-pound PC into the living room and treat it like a tiny multi-touch table, if that's your inclination. It's sharing the same processor picks as the Duo 11, but it turns to more conventional 750GB or 1TB hard drives and puts the emphasis on shareable apps like Family Paint and the Fingertapps Organizer calendar. Not surprisingly, there's only one, front-facing 1.3-megapixel camera here, although NFC does make the cut. The Tap 20 is due to arrive at about the same time as its smaller Duo 11 sibling, although we're once again without details of how much it will cost.

Continue reading Sony unveils VAIO Duo 11 slide-out tablet, Tap 20 portable touchscreen all-in-one

Filed under: , ,

Sony unveils VAIO Duo 11 slide-out tablet, Tap 20 portable touchscreen all-in-one originally appeared on Engadget on Wed, 29 Aug 2012 10:45:00 EDT. Please see our terms for use of feeds.

Permalink   |   | Email this | Comments

Isis mobile payment system primed for September launch, supported devices revealed

Isis mobile payment system primed for September launch in Austin and Salt Lake City

You've known it was coming, but Isis has been so quiet on the mobile payments front in the past few months that you might've forgotten the score. Now, the joint venture backed by AT&T, T-Mobile and Verizon has announced that it'll debut its system in Austin and Salt Lake City next month. At least part of the delay is attributed to its shift in strategy, when Isis shelved its plans to process payments through the carriers themselves and instead work with MasterCard and Visa. Isis representatives have declined to elaborate on future expansion plans.

Coinciding with the recent update that enabled Isis support for T-Mobile's Galaxy S II, MasterCard has come clean with a list of devices that'll receive similar treatment. Specifically, those in the US can expect the Droid Incredible 4G LTE, One X, Amaze 4G, Galaxy S III to gain Isis support. Naturally, the possibility remains open for other devices as well, and if you'd like to see the complete list of candidates, make sure to check out the PDF below.

Filed under: , ,

Isis mobile payment system primed for September launch, supported devices revealed originally appeared on Engadget on Tue, 28 Aug 2012 20:47:00 EDT. Please see our terms for use of feeds.

Permalink Droid Life  |  sourceBloomberg, MasterCard (PDF)  | Email this | Comments