The New York subway’s ride tracker has a scary security loophole
by Adi Robertson from The Verge - All Posts on (#6EAFQ)
Photo by Amelia Holowaty Krales / The Verge New York's OMNY subway pass system is supposed to make the lives of its riders easier, but as a 404 Media investigation highlights, it makes tracking your movement a little bit too easy - posing dangers for anyone at risk of stalking or harassment.
If you tap a bank card to ride the subway, a trip history" feature on the OMNY website will reveal your past seven days' worth of trips - including the time and station of entry - to anyone with access to your card number and expiration date. Since it's not unusual for card numbers to be compromised either online or through someone (like a housemate or partner) briefly getting access to a wallet, that creates an easy-to-miss security hole for people facing things like intimate partner...