Research presented at the 25th Chaos Communication Congress in Berlin demonstrated how an attacker could impersonate any website, including those secured by the HTTPS protocol.
The bad blood between three student security researchers and Boston's transit system appears over, and the two sides are working together to resolve existing vulnerabilities.