New from 404 Media: I tracked the precise movements of an NYC subway rider. Saw what specific time they got on and at what station. It became obvious which station was nearest to their home.
This was all because of a 'feature' on the MTA website. You just need their credit card info, something easily accessible to abusive partners or potentially on underground marketplaces
This feature is wide open to abuse
https://www.404media.co/i-tracked-nyc-subway-rider-home-omny-mta/
Joseph Cox /
npub1nn…n6uvg
2023-08-30 13:07:56
Author Public Key
npub1nn5563e0hlzfalpuf3r2ekxdaqjqyascq5l9p8h5gfsjmm3ffp3snn6uvgPublished at
2023-08-30 13:07:56Event JSON
{
"id": "8595dcceafb3aeb1bd6c6fc842e3c58eb96473b17614e1c92959dfc56acf72b4",
"pubkey": "9ce94d472fbfc49efc3c4c46acd8cde824027618053e509ef442612dee294863",
"created_at": 1693400876,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/users/josephcox/statuses/110978719840609223",
"activitypub"
]
],
"content": "New from 404 Media: I tracked the precise movements of an NYC subway rider. Saw what specific time they got on and at what station. It became obvious which station was nearest to their home.\n\nThis was all because of a 'feature' on the MTA website. You just need their credit card info, something easily accessible to abusive partners or potentially on underground marketplaces\n\nThis feature is wide open to abuse\n\nhttps://www.404media.co/i-tracked-nyc-subway-rider-home-omny-mta/",
"sig": "b9e7358a237dc531d96ef591cdb873a9b2703062f47d57acb2c693e243894b38c0cea73d42f82b1a8f6ef6c1189cd9dd7622ee14edb270a0b9bfb88fc10157bb"
}