For day two of Black Hat, we sat in on on [Joe Grand], [Jacob Appelbaum], and [Chris Tarnovsky]’s study of the electronic parking meter industry. They decided to study parking meters because they are available everywhere, but rarely considered from a security perspective.
It seems some enterprising individual in Grand Forks, North Dakota has been placing fake parking violations on cars. If the recipient visited the URL on the flyer, they would be told to install a toolbar to view pictures of their vehicle. That piece of malicious software would then attempt to install several more. The actual vehicle pictures were from Grand Forks, but we wouldn’t be surprised to see a similar attack happen in a much larger city.
This hack is an interesting twist that will allow you to get in or out of some parking garages when the attendant isn’t looking. Using something metal to trip the parking lot’s proximity sensor that is meant to let cars out automatically you can get into the garage or vice-versa without opening your wallet. A magnet from a hard drive might work a bit better because it is able to trip multiple types of sensors, but for this hack any kind of metal will work. This proximity sensor is a high–frequency oscillation type, so anything that attenuates, varies the frequency or stops the oscillation trips the sensor. When you can’t find a place to park, this hack will certainly impress your friends more than this method, but your street credibility could quickly turn into never lived down stories, if you end up driving over tire strips and ruining your tires, get a huge parking or trespassing ticket, or worse yet get your vehicle towed!
