Agency Sues to Stop Defcon Speakers From Revealing Gaping Holes

A transit agency in New England has filed a federal lawsuit to stop three Massachusetts Institute of Technology undergraduates from publicly presenting research at Defcon demonstrating gaping security holes in two of the agency’s electronic payment systems.

The Massachusetts Bay Transit Authority (MBTA) also named MIT in the 17-page complaint, which seeks unspecified monetary damages for violation of the Computer Fraud and Abuse Act, negligent supervision and other causes of action. It also requests a temporary order preventing the students from “publicly stating or indicating that the security or integrity” of the MBTA’s systems has been compromised.

The three speakers are Zack Anderson, 21; R.J. Ryan; 22 and Alessandro Chiesa, 20; who on Sunday were scheduled to present research into both of the MBTA’s automated payment systems.

Read the rest of this post