“Obviously this is a great fit for abusers,” an expert on domestic violence and cybersecurity said.

During all this monitoring, I wasn’t anywhere near the rider. I didn’t even need to see them with my own eyes. Instead, I was sitting inside an apartment, following their movements through a feature on a Metropolitan Transportation Authority (MTA) website, which runs the New York City subway system.

This is why I always pickup someone’s old card from the ground in a subway station and reload it with cash.

We need more metros that use paper mag swipe cards that cost less than a penny to produce, so they can be recycled anonymously in this way. RFID metro cards are cancer

Otter
link
fedilink
151Y

What’s the feature

What is reading

Are we playing Jeopardy?

Otter
link
fedilink
-21Y

:p

With their consent, I had entered the rider’s credit card information—data that is often easy to buy from criminal marketplaces, or which might be trivial for an abusive partner to obtain—and punched that into the MTA site for OMNY, the subway’s contactless payments system. After a few seconds, the site churned out the rider’s travel history for the past 7 days, no other verification required.

From the article

Credit cards are as secure as carrying your passwords around you on a piece of paper, and telling it loots of people always.

Otter
link
fedilink
81Y

Thank you! I was on the bus and couldn’t get the article to load

Credit card info -> see timestamped transit transacting history, including station name (location)

From the article, you can get a detailed usage history of MTA transactions by simply supplying the credit card number (which they state can very often be bought on the dark web). The lack of identity confirmation to pull the report is the concern.

You want to force people to show ID to use the subway?

Why is this info even public? That’s the real issue.

Not to use the subway, to access a payment card’s complete ride history.

Create a post

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

  • Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post
  • Don’t promote proprietary software
  • Try to keep things on topic
  • If you have a question, please try searching for previous discussions, maybe it has already been answered
  • Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
  • Be nice :)

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

  • 0 users online
  • 57 users / day
  • 383 users / week
  • 1.5K users / month
  • 5.7K users / 6 months
  • 1 subscriber
  • 2.96K Posts
  • 74.6K Comments
  • Modlog