July 21, 2008
Dutch Court Allows Researchers Who Cracked Chip to Publish Their Results
A court in the Netherlands ruled last Friday that a Dutch research team can publish a scientific paper on security shortcomings in the most popular chip used in transit systems worldwide, according to CNET.com.
In March a team of scientists at Radboud University Nijmegen, in the Netherlands, led by Bart Jacobs, a professor of design and verification of secure software systems, cracked the cryptography of the Mifare Classic Chip showing that London transit-system cards could be cloned.
The university informed the Dutch government and NXP Semiconductors, the manufacturer of the chip, of these findings, giving the company time to fix the problem before publishing the results, said Radboud University Nimejen in a press release.
But NXP sued the professor and the university in July, to prevent the publication of the paper. The company argued it would be irresponsible to make the sensitive information public. The university said such a ban would go against academic freedom.
The Dutch court ruled in the university’s favor, pointing out that the institution had acted with due care. The paper will be published in October during a scientific conference, as the researchers had initially planned.—Maria José Viñas
Posted on Monday July 21, 2008 | Permalink |Comments
Commenting is closed for this article.
Previous: Harvard Professor and Software Developer Build Disease-Tracking Web Site
Next: Keeping an Eye on Online Students
The very act of filing the suit was far more damaging to the public good, in the long run, than premature revelation of the chip’s vulnerabilities could have been. One effect could be to discourage bad news entirely — which may have been NXP’s motive. With that thought in mind, the moral of the story as delivered to the academic community by NXP Semiconductors: when the responsible authorities are too irresponsible to be trusted with advance notice, let them read about it in the news. Oh, yes, and if you have any stock in NXP Semiconductors, sell.
— Gregory McColm Jul 22, 05:31 PM #