i must be dreaming but is there any way to tweak my touch and go so that i can get over rm>9999999 credit? toll expensive lar...

the TnG data stored in the card or in centralized server?
I mean, the balance...

This post has been edited by hafiz_tahir: Jan 2 2014, 04:33 PM

U think so easy to tweak the card

It is likely touchngo credit is not stored in your card.
Only the card serial/pin is stored in the card.
In this case, they just need to build a card reader in lrt booth/toll booth.

If the credit is stored in the card, then they need to build a card reader/writer in lrt booth/toll booth, why spend more while they can save?

If you tamper with the card, they can just make your card tidak sah in your next transaction, then you need to go to touch n go center and submit your card for investigation, then they will know what you did and you will not get a refund.

no matter how, it is a lose lose situation.

use touchngo haram gonna be burn in hell liao

Stored in the card AND the server.

The card store a lot of grand mother stories.

As long as there is a difference between your card and the server. Your card will be blacklisted.

i guess it would be both .. that's why we are able to "read' the balance of the tng card from smart tag .. when u by pass the smart tag lane... system will sync with their office db on ur balance...
i think there was recent case user using mobile apps to bypass it.... no confirmation from tng company yet .. saying they are still investigating.. but if u are hardworking enuf.. u will see there was actually a case many years back ... few people kena nabbed coz they were able to edit the credit balance of tng ...
too bad, the tech. din pass to /k/ still T.T

If it functions like every other scan card system I seen, the actual data is stored on the server, the card is but a key to identify the owner so that the data can be retrieved.

u can hack their server

for sure they will store your card balance inside database

This post has been edited by fantasy1989: Jan 2 2014, 04:37 PM

#rompakbank

Guna lah jalan tikus…takde toll. Ikut kata Menteri. Jangan buat jenayah.

ok price hike

got ktard wan curi wifi
now got ktard wan hack tng credit

whats next? brace yourself for more

lol

update tngbalance
set balance ='>999999999999'
where id ='atrocitines /k/'

kan senang

get myvi and use motor lane like the other cars which are always showing up on youtube

tweak bukan tweaked
tweaked tu past tense maknanya kau dah buat and successful and suppose to share it here

kolos thread la buang masa je

I remember a minister saying paying toll is a choice. Don't want to pay toll? Just use an alternative road.

when u use the tng card, the reader will read the card and its remaining value, minus the charges and write back the new value

this info will be stored in the local database for eg: toll booth and will be uploaded by batch to tng main server

then the system will tally back the record with their current record and publish in the website for your transaction usage. thats why your current usgae of tng will no appear in the record after a few days

my opinion only

inb4 tailgate rapat2

The security is very high between the card and server . good luck

i know there are some geniuses in /k/ please help me reduce living expenses.

Beli motor jela.nampak gaya macam kau tak mampu ada kereta

Use old road.

Capture smarttag zing card reload data
Replay back to your smarttag

I believe this method can work
But don't use with tol, got case where people got caught for hacking tng before

cheapskate use motorcycle or motor lane

print chuck norris image on it

Walk by foot, no toll charge at all.

https://quik2go.touchngo.com.my << my project on 2010. reload tng online.

someone able to hack the java applet to write balance to card.

basically if you want to hack there are 2 databases.

Oracle and MSSQL.

Oracle for storing card transaction.

while MSSQL for card details.

good luck

tak nak bayar tol? naik basikal.
(because soon motorcycle also will kene toll)

senang saje...go find the TNG DB admin and bayar him to top up la...

My logic says : (I MUST be wrong, just guessing)

1. Card : Stores card serial number, credit balance (bcoz you can check balance with SmartTag)
2. Server (database) : Stores credit balance.

Only place to reload the card will definitely go through their server, so server sure got latest credit balance and information. Even if you tweak the card balance to "9999999", in database your balance still 0 also useless bcoz when you use your card, for sure they will check your balance through database.

As for the reader at any tng device definitely is a read/write reader. Bcoz they need to write balance into the card, and read the card serial number to get your balance info.

my friend work on this said, the Tng Data is not online one.
it will sync once a day. but idk true or not.

i think it true lah. like our CC lah.

actually, what my previous colleague said since he's doing integration with touch n go, that the money is actually stored in the card itself. He said that it is very hard to tweaked that card due to security reason. You can only topup the value using the device provided by touch n go only.

so the key should be reverse engineering the device provided by touch and go?
hmmm

you need this software to work

I think rompak is easier than stealing tng credit.

the value should be stored inside the card
or else how you can read the balance from any smarttag reader then?

What is illegal reload?



Illegal reload refers to any top up/reload activities offered by unauthorised party.


Their modus operandi is by offering customers a big reload sum at a smaller fee. For a complete list of authorised counters, please click here.


TNGSB strongly advised all customers to only reload from our list of authorised counters.


If an illegal reload has been detected, the Touch 'n Go card will be INVALIDATED immediately . The card and all its balance will be forfeited and forwarded to the authority for investigation.

http://www.touchngo.com.my/?pg=products&subPg=tng_faq11

we need K programmer help us program touch and go card unlimited

how abt if the card kena emp or some stray cosmic rays and thus fry the card to be read only mode..

even though if the card balance is RM50, it will always be RM50 coz when subsequent usage and update (write) to card balance, it will be just ignored.

Nope. I think it is stored in the card. You can check your balance using smart tag device, offline. Plus if the balance is stored in a database, it'll not be Touch N Go, it'll be Touch N Wait Then Go. Also, if it's stored in a centralized server, there should be a way to top up your card online, but there's none.

If you know the APDU during top up, you might be able to hack your card and add extra credit. But I'm not so sure whether you can do it another time. They might have a record of how much balance you have based on top up and end of the day clearance. The next time you tried to use the card, it's already blocked.

Just a theory.

probably easier to grab some TnG cards from users at the lrt stations

I think it's easier to tamper your company salary database than to tamper touch n go server.

So I suggest you hack your company server and add few k in your salary to be credited.

you are partially correct in the sense that whenever you use your card, it is instant with no wait time.

however you are also wrong because , as some ppl already commented, the transactions/balance will be synched with the server.
fyi, it is possible to top up using ATM machine but you have to physically place the card on the ATM to update the balance in the card.

why they dont allow internet reload ? reason is because it is physically impossible for users to update the balance in the card.

summary: balance is stored in both card and server.

This post has been edited by sootienann: Jan 9 2014, 07:53 PM

langgar je toll booth. u can help everyone save money

there is VIP touch and go card with unlimited balance
which is only given to VVIP
my uncle has one

ur uncle name?

thats for you to find out

how about using touch and go at the bus? I dont think all bus connected to internet. If the data is gathered by batch to the server, would there be a way to detect tampered card by an offline scanner?

TS

Why dont tweak your wallet and pay all toll?

Hack TnG la. hahahah

I don't think they're so daring as to not store some details in their own servers, they need to keep track anyway.

it doesnt need to be realtime.
they could do a daily or weekly sync and reconciliation

that mean prior to the sync, we can alter the data in the card and use it again on the other buses.

just for scamming a few ringgit ? doesnt seem worthwhile to me.

that's just an example. There are few food outlet that can use tng as method of payment

what monetary value can be gained from scamming the restaurant ?
you dont get any richer. only can get a full stomach. unless u wanaa tapau the food then sell in it lelong ?

wow. you don't see the big picture here. What if you be the one to provide this kind of service to other people?
service==money

i wonder how this is implemented.
maybe using a binary flag, where 0=unlimited VIP, and normal card=1 ?
or maybe setting a variable to max value of 32 bit (roughly 2 billion).

if not mistaken, you need to provide IC to buy the card right ?
if so, then once the sync-reconcile fails, then the polis will come after whoever owns the card.

Actually Touch N Go does store the data on the card. You may tamper with the amount and use it few times until its detected and blocked.

I actually bought few cards (from LYN here) and eventually its blocked and asked for refund.

so how you tamper the amount?

the more important question is, what can we buy using touch n go ?
for example, is there any mall or retail outlet which accepts the card as payment for purchases ?

kk mart

1. Read the second paragraph. Which is my assumption, and gave the same meaning of 'sync'. When you do transaction, I doubt TnG terminals will directly connected to the server->check balance->then do transaction if balance is valid. Thus it's offline and transaction is allowed based on the balance stored in the card. End of the day, when clearance is done, the balance of the card might be calculated. Each transaction values will be deducted from the most recent top up value, a.k.a synchronizing. Thus, if final balance is negative, the card have invalid balance, meaning the data might have been altered by the user. I developed an e-payment system that uses smart card before. So I know how slow it would be if the transaction is online.
2. This one I know. I use this all the time when I top up my MyKad.
3. This one also I know. I did mention about APDU right? APDU is the way terminals/card reader communicate with the chip on the smart card.

May be.

I bought an RM 300 credit card for RM 100 before long time ago, used it only 2 times before it was blocked for further transaction.
Went to TnG centre and check, they said the card is faulty, they can issue a refund if I can find out the owner. (not sure if they will really issue a refund or report police instead)

Correct. Its actually offline for reload, and also when using the card.
At the end of the day then only it will all be sync back to TnG and that is when they detect the tampered amount.

Yeap.

I doubt it. High security means low performance.

The maximum limit set at RM 500..

u penah dengar tak laki bini kena tangkap sebab buat illegal tng topup

go hack their server.

there was once i reloaded my tng card in one of the bank atm, somehow the bank didnt deduct my money after i reload the card. true story!

Correct.
However both batch and real time transactions are performed, depending on the terminal's location.

Audited TnG before.

perhaps system has been upgraded by now to dealt the the loopholes, btw whats the max touch and go value can be stored? and how much is the max daily transaction?

Ok ur intelligent had surpass all criminal which never think anout tis b4