https://github.com/taivlam/charliecard-on-metrodroid
Verbose personal notes on how to get CharlieCard to work properly with Metrodroid, with assistance from MIFARE Classic Tool
https://github.com/taivlam/charliecard-on-metrodroid
Last synced: 3 months ago
JSON representation
Verbose personal notes on how to get CharlieCard to work properly with Metrodroid, with assistance from MIFARE Classic Tool
- Host: GitHub
- URL: https://github.com/taivlam/charliecard-on-metrodroid
- Owner: taivlam
- License: gpl-3.0
- Created: 2021-05-18T19:07:33.000Z (about 4 years ago)
- Default Branch: main
- Last Pushed: 2024-08-01T20:20:41.000Z (10 months ago)
- Last Synced: 2024-08-01T22:36:30.088Z (10 months ago)
- Size: 34.2 KB
- Stars: 2
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# CharlieCard on Metrodroid
Here are my scattered notes on how I got the [Metrodroid](https://www.metrodroid.org/metrodroid/)
app to work on my Android phones.
Sometimes I need to check my CharlieCard cash balance without a T kiosk.
I've personally confirmed the following phones work on GrapheneOS:
* [Pixel 4a](https://en.wikipedia.org/wiki/Pixel_4a)
* [Pixel 5a](https://en.wikipedia.org/wiki/Pixel_5a)
* [Pixel 6a](https://en.wikipedia.org/wiki/Pixel_6a)
## Notes
According to this 2023 hardwear.io '"Un-fare Advantage” - Hacking The
MBTA CharlieCard From 2008 To Present' [talk](https://www.youtube.com/watch?v=me6FyrDRlD4)
by Bobby Rauch, the MIFARE Classic keys for CharlieCards are included on the
lists of well-known keys on [Flipper Zero](https://en.wikipedia.org/wiki/Flipper_Zero)
devices with the latest firmware.
As mentioned on the Security Notes [page](https://github.com/metrodroid/metrodroid/wiki/Security-Notes)
of the Metrodroid wiki, the MBTA really should allow ways for its customers to
view the current balance of CharlieCards in an offline manner along with fixing
fundamental issues with its ticketing system, instead of relying on on a system
design entirely dependent on
[security through obscurity](https://en.wikipedia.org/wiki/Security_through_obscurity).
## License
(Probably GPLv3, though I may change to some form of Creative Commons if I need to)