“Obviously this is a great fit for abusers,” an expert on domestic violence and cybersecurity said.

…During all this monitoring, I wasn’t anywhere near the rider. I didn’t even need to see them with my own eyes. Instead, I was sitting inside an apartment, following their movements through a feature on a Metropolitan Transportation Authority (MTA) website…

  • krayj@sh.itjust.worksEnglish
    155·
    1 year ago

    This is a security flaw for sure, but it’s not nearly as serious as the article makes it out to be. You have to know the person you are targeting, you have to know which credit card they used to pay for their subway credits, and then you have to know the credit card number of that credit card. If you are in a position to know all that, then you are probably already in a position to stalk them using other/superior methods.

  • mercano@lemmy.world
    11·
    1 year ago

    Other cities let you pay for transit directly via a credit card. Surely places like London have come up with a solution to this problem.

    • Kbobabob@lemmy.world
      11·
      1 year ago

      With their consent, I had entered the rider’s credit card information—data that is often easy to buy from criminal marketplaces, or which might be trivial for an abusive partner to obtain—and punched that into the MTA site for OMNY

      Didn’t actually read it did you?