Before you go getting any bad ideas, know that Benninger and Sobell haven't released the app for public use, and warned both transit systems in late 2011 (though neither region has fixed the exploit, the duo claim).
ENGADGET: Security researchers identify transit system exploit in San Fran and New Jersey, create app to prove it