• ArtificialLink@yall.theatl.social
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    1 year ago

    The card system would probably be best where just buy a card and load it up at a kiosk. There would still be potential security vulnerabilities if you were allow someone to "anonymously "view that transaction. Or allow someone to view the card trips. Which would just be logged with its number.

    And I’m just more so talking about the current system they have in place. I’m not sure what else they could do utilizing their current system except for forcing some kind of account

    • bytor9
      link
      fedilink
      arrow-up
      6
      ·
      1 year ago

      It would be trivially easy to add privacy any number of ways if they didn’t insist on tracking the users and logging that info.

      They could even track it and just not make it available by web. Or require 2FA. Not exactly a nation-state level attack being described here.

      People have just become accustomed to not caring about privacy and so that’s what we get.

      • bamboo@lemmy.blahaj.zone
        link
        fedilink
        English
        arrow-up
        1
        ·
        1 year ago

        I had ExpressPay before OMNY and that also had a list of every transaction in the website where you had to refill your card. Ever since they came out with the MetroCard, I assume there was a shadow profile per card and that was linked to the credit card number on file if that was the method the card was purchased by.

        Personally, I value the transactions list, since it makes it easier to verify I was billed properly and got the free transfer or the 13th ride free. I’ve not had to dispute anything yet but I imagine it’ll be easier to bring up any issues with customer service over the phone after the fact, than the station agent.

        There’s always the dedicated OMNY cards you can buy from stores, although I’m not sure if it’s possible to refill with cash directly somehow. For the most privacy focused, it’s good this option exists, and at least maintains most of the privacy as the MetroCards used to.