3 ms·

> you are essentially having fun at the expense of the public servants The author never actually went out and fraudulently saved money by implementing his idea

by zodiac 10y ago

> you are essentially having fun at the expense of the public servants The author never actually went out and fraudulently saved money by implementing his idea, so I fail to see how his actions are "at the expense of the public servants". To quote him, > One final note before I dive in: this algorithm is essentially large scale ticket swapping, which is obviously illegal and unethical. I don’t believe that it would be ethical to use this in the real world. I value safe and smooth travel more than I value the 20-40% of my fare I could save by stealing from

hyperbovine 10y ago
> The author never actually went out and fraudulently saved money by implementing his idea nope, it's just a big mental wank designed to show the world that the author is medium clever and knows how to write down an ILP problem, make pretty graphs, and something about NFC. I'm not sure which I find less appealing, really.
gpvos 10y ago
I think he shouldn't have made the source available. Now it's really only the (apparent?) uncloneability of the Clipper cards that stops someone.
- nickff 10y ago
  I am of the view that anyone who finds an exploit should (generally) do what they feel would have the best result. This would incentivize organisations to create payouts (prizes) for non-public exploits, and it would allow concerned citizens to force a change from generally unmovable bureaucracies.
  - uola 10y ago
    This is just the latest justification among security people to not having acknowledge their own incompetency in things like risk management. Since when was "doing what you feel" considered a reasoned solution? Many times these things aren't even weaknesses as such, just loose tolerances in the system and exposing them under great fanfare just making the system less flexible. Which is pretty ironic if you think about it.
- stickfigure 10y ago
  This is a silly objection. If you can clone clipper cards, you don't need special software to cheat the system. The software here is just an academic exercise in optimization algorithms.

by zodiac 10y ago

hyperbovine 10y ago

> The author never actually went out and fraudulently saved money by implementing his idea nope, it's just a big mental wank designed to show the world that the author is medium clever and knows how to write down an ILP problem, make pretty graphs, and something about NFC. I'm not sure which I find less appealing, really.

gpvos 10y ago

I think he shouldn't have made the source available. Now it's really only the (apparent?) uncloneability of the Clipper cards that stops someone.

nickff 10y ago
I am of the view that anyone who finds an exploit should (generally) do what they feel would have the best result. This would incentivize organisations to create payouts (prizes) for non-public exploits, and it would allow concerned citizens to force a change from generally unmovable bureaucracies.
- uola 10y ago
  This is just the latest justification among security people to not having acknowledge their own incompetency in things like risk management. Since when was "doing what you feel" considered a reasoned solution? Many times these things aren't even weaknesses as such, just loose tolerances in the system and exposing them under great fanfare just making the system less flexible. Which is pretty ironic if you think about it.
stickfigure 10y ago
This is a silly objection. If you can clone clipper cards, you don't need special software to cheat the system. The software here is just an academic exercise in optimization algorithms.