MRMCD 2026

EUTicket when: An update on train (and other) ticket shenanigans
11.09.2026 –, Weltraum - C205
Language: English

The famous 39C3 talk of "All my Deutschlandtickets gone: Fraud at an industrial scale" made us all ask a lot of questions. Hopefully we can answer some more and show you how tides are changing.


Slides: https://craftbyte.github.io/mrmcd26-slides/

In the talk we will present an update on how the DTVG is protecting the issuing of Deutschlandtickets and where the industry is moving with the introduction of the digital BC100 with dynamic barcodes (digitalisierung punkt jetzt, oder so).

During this process, we all also somehow ended up becoming part of an EU panel writing the next generation standard in public transport ticketing that should allow more borderless travel. How do these panels work? What are our goals? Will we finally be able to buy one ticket from Barcelona to Oslo or anywhere else that crosses the holy SNCF territory?


Diese Einreichung verzichtet auf die Verwendung von KI:

CraftByte is a Security Researcher and Software Developer by day, Freedom of Information Enthusiast and Problem Causer by night. Also a massive train (ticketing) nerd.

Fedi: @anze@treehouse.systems
Website: anze.dev
Blog: craftbyte.blog

maya (it/its), frequently identified by the serial 551724, is a self-described "software janitor" as well as a being that enjoys building things, be it the occasional software, friendships, communities or events. It also enjoys breaking things and figuring out how stuff (including itself) really functions. All of this while constantly needle-threading burnout, time-management and its own sanity.

fedi: @maya@catgirl.global
blog: atomicmaya.me