1. Fotis Loukos <fotisl@gmail.com>
Free Riding Toumpa
Fotis Loukos

2. What is Toumpa? Home of PAOK F.C.
Built at Reconstructed at 2004
8 gates
Max fans
Gate 4: Legendary for it’s fans

3. Most of the times...

4. Free riding: The 90’s way
Ntou!
Can you stop them???

5. Welcome to the 21st century
Addition of tourniquets
Two methods of entering:
Ticket (or e-ticket)
Season ticket
Ntou does not work anymore :(

6. Free riding never ends
After all… It’s a tradition!

7. Gentleman’s free riding: Part 1
The e-ticket
Barcode scanner
reads this
Guess what!
Barcode is this string encoded using Code 128
Enter into scanner this way
You have to remember 8 numbers to be able to clone someone else’s ticket! Or just take a photo using your phone!
No idea what this is!
What if the ticket number is
‘123 or 1=1’ ???
Furthermore, if you buy two tickets they have sequential numbers… What about the next user’s ticket??? FAIL!

8. Gentleman’s free riding: Part 2
The season ticket
MIFARE Ultralight with 7 byte UID
Which is also encoded using Code 128 here!
Take a photo and you have the UID!

9. Gentleman’s free riding: Part 2
MIFARE: Series of chips by NXP Semiconductors for implementing RFID solutions
“Customers will have the choice to purchase either products with unique 7 Byte IDs (our recommended) option or 4 Byte IDs, which are not globally unique any more.”
“Block 0 of sector 0 (i.e. Manufacturer Block also called Manufacturer Data) contains the IC manufacturer data, and the Unique Identifier (UID, also called Serial Number, see [ISOIEC ] for a detailed definition).”
“This is the first data block (block 0) of the first sector (sector 0). It contains the IC manufacturer data. Due to security and system requirements this block is write protected after having been programmed by the IC manufacturer at production.”

10. Gentleman’s free riding: Part 2
Yeah right...

11. Disclaimer
All these have been tested using my own e-tickets and season tickets!
Please don’t clone tickets of other fans!
Because, PAOK you are!