So… one of the local gas stations has this “Buy 3 get 5” car wash deal
…turns out that if you buy this, you get a card…
A mifare classic to be exact
… turns out someone has free car wash for life😁
Hypothetically speaking, of course! I personally would NEVER do anything illegal like clone a washing card
Anyway, for those thieving bastards out there: the brand of the car wash system is called Christ and I believe it’s an american brand, so hopefully it’s available at many gas stations around the world
I’m not sure if I am understanding correctly how the system works, but is it like this?
First, you buy a 5 wash pass, and they give you this card. The car wash payment machine indentifies the cards by UID.
On the 5th time you wash your car, the machine will not return the card back.
The cards can be redistributed and the staff do not need to do anything to reset the number of washes (it is automatically done), which means if you cloned the card, you can get a free car wash, only that each cycle you need to re clone it before washing the 5th time.
You are almost correct.
But the machine reads/writes to the card, so just cloning the UID isn’t enough.
What the staff does to reset a used card, I have no idea. They probably have a programming unit in the station, so they can program the cards based on the customers wishes. ‘do you want the, “triple platinum super duper wash” or “some other fancy name here” wash?’
So in theory, the process is:
1: buy a 5 wash card
2: crack and clone it, and save the dump file
3: gift the original card to someone you like, as you don’t need it anymore
4: use your cloned card for four washes (the machine tells you the number of washes you have left each time you use it, so when it says you have one wash left:
5: Re-upload your dump to your card, so you have 5 washes again
6. Repeat steps 4-6 every 4th wash
Until they keep seeing a bootleg card in the collector and pull up the surveillance camera recording to see the license plate and know who is doing that… lmao
If it’s a super high volume activity level place, it’s unlikely to be noticed.
If it’s minimum wage slacker lackeys running it, it’s unlikely to be cared about.
Not that I’m suggesting anyone actually do this. While it’s fun to game it out, in practice it’s kinda being a crappy human being. We already got enough of those in this world.