Here's the really bad part: the transponders support unauthenticated over the air upgrading. You can force any transponder to take on a new ID. An attacker coul

Here's the really bad part: the transponders support unauthenticated over the air upgrading. You can force any transponder to take on a new ID. An attacker could overwrite every tag passing a certain intersection and cause havoc in the toll system. Unbelieveable. One thing, though: When a tag read fails now, the system takes a picture of your license plate so a human can determine what account it belongs to. The system could be updated to randomly take photos of cars that were reading correctly just to make sure the ID belongs to the car pictured. I would assume that this is happening: Every car that passes through a gate is also being photographed, and that data is being kept for somewhere between 60 days and forever. If you rewrite your RFID tag with Arnold Schwarzenegger's ID, there's a good chance you'll get busted if and when he complains, because they'll look up the photos.