Скачать с ютуб On the Security of Dockless Bike Sharing Services by Antoine Neuenschwander (@ant0inet) в хорошем качестве

On the Security of Dockless Bike Sharing Services by Antoine Neuenschwander (@ant0inet)

Insomni'hack 2019 Title : On the Security of Dockless Bike Sharing Services Speaker: Antoine Neuenschwander (@ant0inet) Starting in 2016, many bike sharing services emerged in larger Asian cities, flooding the streets with 100 thousands of bicycles. The startups behind these services are aggressively competing for territory and investment, and have now also expanded to European Cities. The city of Zurich hadn't launched their 'Publibike' service yet, they were already outrunned by other private competitors. The way these 'Uber for bikes' services work is quite simple: clients use their smartphone to locate bicycles. Once nearby, they can unlock the bicycle directly from the app or by scanning a QR code. Unlike traditional rental services, however, which require bikes to be returned to a fixed docking station, users are free to leave the bikes anywhere on the street. The interesting part about these services is that they combine technologies such as IoT, mobile applications, geolocation and web services, all of which have their own attack surface. I had a closer look at two bike sharing services in Zurich with respect to security aspects and will share my findings with you in this session.