118
I Tracked an NYC Subway Rider's Movements with an MTA ‘Feature’
(www.404media.co)
What's the feature
With their consent, I had entered the rider’s credit card information—data that is often easy to buy from criminal marketplaces, or which might be trivial for an abusive partner to obtain—and punched that into the MTA site for OMNY, the subway’s contactless payments system. After a few seconds, the site churned out the rider’s travel history for the past 7 days, no other verification required.
From the article
Credit cards are as secure as carrying your passwords around you on a piece of paper, and telling it loots of people always.
Thank you! I was on the bus and couldn't get the article to load
From the article, you can get a detailed usage history of MTA transactions by simply supplying the credit card number (which they state can very often be bought on the dark web). The lack of identity confirmation to pull the report is the concern.
You want to force people to show ID to use the subway?
Why is this info even public? That's the real issue.
Not to use the subway, to access a payment card's complete ride history.
Credit card info -> see timestamped transit transacting history, including station name (location)
What is reading
Are we playing Jeopardy?
:p
This is why I always pickup someone's old card from the ground in a subway station and reload it with cash.
We need more metros that use paper mag swipe cards that cost less than a penny to produce, so they can be recycled anonymously in this way. RFID metro cards are cancer
this post was submitted on 31 Aug 2023
118 points (98.4% liked)
Privacy
31607 readers
108 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
Chat rooms
-
[Matrix/Element]Dead
much thanks to @gary_host_laptop for the logo design :)
founded 5 years ago
MODERATORS