New York's OMNY subway pass system was supposed to make public transit more convenient. However, the system reportedly has a security loophole, making stalking and harassment easier.
New York's OMNY System Security Loophole
Passengers tap their bank cards when they ride the subway. However, when they do, the "trip history" feature on the OMNY website will show the trips in the previous week, including the time and station of entry.
According to the 404 Media investigation highlights, it makes tracking your movement a little bit too easy. It increases the risk of stalking and harassment from anyone with access to your card number and expiration date.
Since it's common for card numbers to be stolen, whether online or by a housemate or partner briefly having access to a wallet, this creates a security gap that's simple to overlook for those dealing with issues like intimate partner violence. However, a few of the Verge staff members who use Apple and Google Pay to ride the subway weren't able to retrieve their personal travel histories using the website; 404 was also able to monitor trip histories for users who rode the subway using a bank card stored with the Apple Pay app.
The MTA is "committed" to protecting consumer privacy, according to Eugene Resnick, a spokesman for the New York Metropolitan Transportation Authority.
According to Resnick, the trip history feature lets users view their paid and free journey history for the last seven days without registering for an OMNY account. Additionally, they offer consumers the choice of paying cash for their OMNY travel.
Resnick stressed that they are continuously searching for ways to improve the passengers' privacy, and as they assess potential new developments, they will take advice from the safety experts.
Resnick added that the MTA does not store a copy of the credit card number itself. It reportedly uses a token identifier associated with the card. Additionally, it only shows the point of entry, not the exit, unlike some systems since passengers are not required to tap a card on their way out.
Apple and Google didn't immediately respond to requests for comment.
What Is OMNY?
OMNY is a contactless fare payment system, making it the simplest and most convenient way to pay for bus or subway rides. There are three ways to pay using OMNY - a digital wallet, a contactless bank card, and an OMNY card. You can utilize your contactless credit or debit card instead of signing up or downloading an app to enjoy OMNY.
In the long run, the company wants to integrate fare payments and ticketing for commuter rail, buses, paratransit, and subways. You can continue using your MetroCard, TrainTime, and other existing fare payment choices while they work toward a full rollout, allowing you to decide whether OMNY is the best option for you.
Simply tap your contactless credit or debit card, mobile device, or OMNY card on the OMNY reader to pay your fare at subway turnstiles, AutoGates, and inside buses, including Select Bus Service buses.
To receive a free transfer, use the same card or device for both legs of your journey. If the tap is successful, the screen will immediately confirm it, allowing you to move on with your day without delay.
When you use the same card or device for each journey, OMNY caps your weekly fares at $34. Customers of OMNY can now enjoy the advantages of a 7-Day Unlimited MetroCard without having to pay upfront.
A new seven-day cap begins with your initial tap. You can ride for free for the remainder of the cap period if you spend $34 in the next seven days. You only pay for the rides you take if you spend less.
Every seven days, the cap resets and starts over with your subsequent tap. The cap does not include transfers, group journeys, and express buses. The cap for reduced fares is $17.
RELATED ARTICLE : Teenage Hacker In Control of Over 20 Tesla Vehicles in Several Countries Using Software to Operate the Cars Even Without Keys
Check out more news and information on Technology in Science Times.
