news.volyx.in

Reversing UK mobile rail tickets (eta.st)

484 points by 076ae80a-3c97-4 · 1309 days ago · 225 comments on HN

Article summary

The article discusses the author's attempt to reverse-engineer UK mobile rail tickets, which use a custom standard called RSP-6. The author discovers that the tickets are signed with RSA and PKCS#1, and that the public keys are not publicly available. However, the author is able to obtain some of the public keys from an APK file and a website, and uses them to decode a ticket. The article also mentions the use of mobile tickets in the UK and the potential benefits and drawbacks of this system.

Main themes

  • mobile tickets
  • paper tickets
  • convenience
  • usability
  • security
  • accessibility

What commenters say

  • Mobile tickets are more convenient than paper tickets, but can be frustrating to use when the app is slow or unresponsive.
  • The use of mobile tickets discriminates against people who do not have a smartphone or access to a computer.
  • Paper tickets are still a viable option and have their own advantages, such as not requiring a device or internet connection.
  • The usability of mobile tickets can be improved with better design and user experience.
  • Some people prefer the convenience of mobile tickets, while others prefer the tangibility of paper tickets.
  • The reliance on mobile tickets can be a problem for people who do not have a reliable device or internet connection.
  • Mobile tickets can be more secure than paper tickets, as they are more difficult to lose or forge.