hello capt.,

flaws in the verifone system due to outdated software…i attached a copy of a credit card slip and notice at the top where hack# is supposed to be and it is all zeros as opposed to being 78 which would be my #….so i called up to find out what happened and was told that i have outdated software that will book you off the system while the meter is on and your in the middle of a job….

also i probably shouldn’t tell you the other flaw that i have found because this one is in my favor!!… but i can log into verifone swipe using my atm card as opposed to using the verifone card i wouldn’t do a credit job this way because where is the $ sent?… but can do cash jobs cause it tricks the system into thinking its a legitimate logon # the meter will work and those jobs do not show up on my records…im sure any type of swipe card(atm,credit card,hotel room swipe card,ect would also work)… so i just ask customer up front if they will be paying cash or credit and if credit i login properly using the verifone card….

so i’m really starting to wonder how secure this system is on the driver end?…all our information can easily be stolen with basic knowledge of a person/driver…. its great that the customers are secure from fraud with this system but what about the drivers?… it really don’t seem our info is too secure from fraud….i’m losing faith and patience with this and am at the point where i may just get my own hand held wireless machine to run credit cards and no longer use verifone until they get their shit together…

so my questions to you would be where does hackney stand on me getting my own hand held machine and merchant # to do credit under rule 403?…does it require all credit cards to be run only on machines installed in taxi or does it only require me to have it installed in taxi but not require me to use it? would like to know before i spend 400$ and not be able to use it….

S.Fitzpatrick

From: Duane Deane
To: Ciccolo, Robert
Cc: ‘amos tamam’
Sent: Fri Sep 04 16:19:17 2009
Subject: RE: flaws in verifone system due to outdated software

Captain Ciccolo,

Based on Mr. Fitzpatrick’s email, his issues have been investigated by our programmers, in which they have been found to be valid. Our programmers have identified the root cause of the issue and are working on preventing the drivers of having the capability of logging into our system with any other card (e.g. atm card, etc) on single screen units only (dual screen units are not affected). This fix will be completed today and will be released to all cabs by end of business today to allow drivers to have the capability of logging into our system with our VTS issued swipe card only.

In regards to his concerns addressing how secure are system is for drivers, it is very secure and we don’t see a risk for driver information falling into the wrong hands. No one other than VTS employees can gain or have access to driver banking information and social security numbers, etc. As a takeaway from Tuesday’s meeting, we will be implementing a feature on our VTS website, providing the drivers with the ability to change their passwords for additional added security. In addition, we have begun the process of issuing driver log in cards to all VTS clients and will disable the keypad login currently available on dual screen units only by next month.

We appreciate Mr. Fitzpatrick advising us of these issues and welcome him and encourage any other client with our system to come forward with issues they have found. This will only help and assist with the driver/vendor relations. For advising us of this issue, Amos, would like to extend an offer to Mr. Fitzpatrick of $200.00 for bringing this valuable information to our attention.

Please have him reach out to me if he is interested in accepting Amos’ offer.

Sincerely,

Duane M. Deane

Director of Strategic Planning

VeriFone Transportation Systems