German Rent A Bike scheme hacked

Call me Bob

http://www.ccc.de/hackabike/index_en.html

--

Call me "Bob"

"More oneness, less categories,
Open hearts, no strategies"

Email address is spam trapped, to reply directly remove the beverage.

pk

Call me Bob wrote:
> http://www.ccc.de/hackabike/index_en.html


I was surprised to see a similar "bike rental via mobile phone" bike at
Parson's green a little while ago. Are there many?

pk

Tony Raven

Call me Bob wrote:
> http://www.ccc.de/hackabike/index_en.html
>

But why? Its a hell of a lot of effort to crack a basically well
designed system and as they say, they could have bought several bikes
for the man-hours involved. I guess its one of those "because we can"
reasons.

Tony

Roger Thorpe

Call me Bob wrote:
> http://www.ccc.de/hackabike/index_en.html
>

Oh that's lovely, would you also post a link to a site giving
instructions for thieves to get into my bike shed and take the lot?
and if not how would that be different?

--
Roger Thorpe

My email address is spamtrapped. You can work it out!

Andy Leighton

On Wed, 22 Dec 2004 10:05:40 +0000, Tony Raven <junk@raven-family.com> wrote:
> Call me Bob wrote:
>> http://www.ccc.de/hackabike/index_en.html
>>
>
> But why? Its a hell of a lot of effort to crack a basically well
> designed system and as they say, they could have bought several bikes
> for the man-hours involved. I guess its one of those "because we can"
> reasons.

Because it was a neat hack. It isn't about the money, or the effort,
but the egoboo.

--
Andy Leighton => andyl@azaal.plus.com
"The Lord is my shepherd, but we still lost the sheep dog trials"
- Robert Rankin, _They Came And Ate Us_

Call me Bob

On Wed, 22 Dec 2004 10:13:34 +0000, Roger Thorpe
<myinitialdotmysurname@warwick.ac.uk> wrote:

>Oh that's lovely, would you also post a link to a site giving
>instructions for thieves to get into my bike shed and take the lot?
>and if not how would that be different?

Happy to oblige Roger. If you'll just let me have your address and
details of the kind of lock you have on your shed I'll get the details
up straight away.

FFS.

--

Call me "Bob"

"More oneness, less categories,
Open hearts, no strategies"

Email address is spam trapped, to reply directly remove the beverage.

dkahn400

Roger Thorpe wrote:

> Oh that's lovely, would you also post a link to a site giving
> instructions for thieves to get into my bike shed and take the lot?
> and if not how would that be different?

They're not stealing the bikes, but they are of course stealing the
rental time on them. Now that they've published the hack the rental
company shouldn't have much trouble defeating it. Keeping quiet about
it would arguably have been more sinister.

--
Dave...

Tony Raven

Roger Thorpe wrote:
>
> Oh that's lovely, would you also post a link to a site giving
> instructions for thieves to get into my bike shed and take the lot?
> and if not how would that be different?
>

Your wish is my command:
http://thirdrate.com/misc/krypto.mov

Tony ;-)

elyob

"Tony Raven" <junk@raven-family.com> wrote in message
news:32t0voF3p6q37U2@individual.net...
> Roger Thorpe wrote:
>>
>> Oh that's lovely, would you also post a link to a site giving
>> instructions for thieves to get into my bike shed and take the lot?
>> and if not how would that be different?
>>
>
> Your wish is my command:
> http://thirdrate.com/misc/krypto.mov

And on the topic, they are way behind their schedule.

" Unfortunately, we have not yet been able to send UPS call tags to our lock
exchange participants in Canada and Europe. We have been experiencing
technical issues with the international software used to generate these call
tags, but we hope to have the issues resolved within the next two weeks.
Once we are able to do so, we will work to issue call tags rapidly, to make
up for the time delay. "

Simon Brooke

in message <41C948CE.40808@warwick.ac.uk>, Roger Thorpe
('myinitialdotmysurname@warwick.ac.uk') wrote:

> Call me Bob wrote:
>> http://www.ccc.de/hackabike/index_en.html
>>
>
> Oh that's lovely, would you also post a link to a site giving
> instructions for thieves to get into my bike shed and take the lot?
> and if not how would that be different?

I have to admit that was my reaction to this brainwave when it turned up
on Slashdot yesterday. Take a scheme which has genuine public utility
but pretty marginal economics (rental bikes); wreck the economics of
the scheme in order to show how clever you are; gasp with surprise as
rental bikes disappear from your towns and cities so you are no longer
able to use them - hacked or unhacked.

Very clever indeed.

--
simon@jasmine.org.uk (Simon Brooke) http://www.jasmine.org.uk/~simon/
Just as defying the law of gravity through building aircraft requires
careful design and a lot of effort, so too does defying laws of
economics. It seems to be a deeply ingrained aspect of humanity to
forever strive to improve things, so unquestioning acceptance of a
free market system seems to me to be unnatural. ;; Charles Bryant

David Martin

On 22/12/04 12:03 pm, in article
9d4o92-cjj.ln1@gododdin.internal.jasmine.org.uk, "Simon Brooke"
<simon@jasmine.org.uk> wrote:

> in message <41C948CE.40808@warwick.ac.uk>, Roger Thorpe
> ('myinitialdotmysurname@warwick.ac.uk') wrote:
>
>> Call me Bob wrote:
>>> http://www.ccc.de/hackabike/index_en.html
>>>
>>
>> Oh that's lovely, would you also post a link to a site giving
>> instructions for thieves to get into my bike shed and take the lot?
>> and if not how would that be different?
>
> I have to admit that was my reaction to this brainwave when it turned up
> on Slashdot yesterday. Take a scheme which has genuine public utility
> but pretty marginal economics (rental bikes); wreck the economics of
> the scheme in order to show how clever you are; gasp with surprise as
> rental bikes disappear from your towns and cities so you are no longer
> able to use them - hacked or unhacked.
>
> Very clever indeed.

I'd agree with that in principle. My reaction was a) a cool bit of reverse
engineering. b) irresponsible and criminal.

However, m'lud, in mitigation, they did point out that they had hacked 10%
of the bikes and the magic codes were not general public knowledge. As a
maximum of 1% of revenue could have been lost it is not turning the project
into a complete disaster.

It looked as if a minor oversight by the developers left a loophole (not
enabling write protection on the EEPROM IIRC). I presume this would be fixed
in the revised version.

...d

m-gineering

Tony Raven wrote:
>
> Call me Bob wrote:
> > http://www.ccc.de/hackabike/index_en.html
> >
>
> But why? Its a hell of a lot of effort to crack a basically well
> designed system and as they say, they could have bought several bikes
> for the man-hours involved. I guess its one of those "because we can"
> reasons.

'Because you can't' was cited as a reason. At the introduction an
offical stressed that the system couldn't be hacked.

--
---
Marten Gerritsen

INFOapestaartjeM-GINEERINGpuntNL
www.m-gineering.nl

soup

Tony Raven popped their head over the parapet saw what was going on and
said

> Your wish is my command:
> http://thirdrate.com/misc/krypto.mov

Is it just me/my system, I can't get this to work
in Firefox it seems to just sit there with a Q in a box
in Internet Explorer after a while the Q is replaced
by a piece of torn film with a Q on it.

--
yours S

Nihil curo de ista tua stulta superstitione