MRMCD 2026

EUTicket when: An update on train (and other) ticket shenanigans
2026-09-11 , Weltraum - C205
Language: English

The famous 39C3 talk of "All my Deutschlandtickets gone: Fraud at an industrial scale" made us all ask a lot of questions. Hopefully we can answer some more and show you how tides are changing.


In the talk we will present an update on how the DTVG is protecting the issuing of Deutschlandtickets and where the industry is moving with the introduction of the digital BC100 with dynamic barcodes (digitalisierung punkt jetzt, oder so).

During this process, we all also somehow ended up becoming part of an EU panel writing the next generation standard in public transport ticketing that should allow more borderless travel. How do these panels work? What are our goals? Will we finally be able to buy one ticket from Barcelona to Oslo or anywhere else that crosses the holy SNCF territory?


This submission abstains from the use of AI:

CraftByte is a Security Researcher and Software Developer by day, Freedom of Information Enthusiast and Problem Causer by night. Also a massive train (ticketing) nerd.

Fedi: @anze@treehouse.systems
Website: anze.dev
Blog: craftbyte.blog

maya (it/its), frequently identified by the serial 551724, is a self-described "software janitor" as well as a creature that enjoys building things, be it friendships, communities, events and - in the real world - security blinky boxes and software. It also enjoys breaking things and figuring out how stuff really functions, constantly striving to improve them, when it isn't completely burnt out.

fedi: @maya@catgirl.global
blog: atomicmaya.me