> the MBTA hasn’t actually fixed the vulnerabilities they discovered and instead appears to be waiting for an entirely new subway card system that it plans to r

> the MBTA hasn’t actually fixed the vulnerabilities they discovered and instead appears to be waiting for an entirely new subway card system that it plans to roll out in 2025 ... This vulnerability will not exist once the new fare collection system goes live, due to the fact that it will be an account-based system versus today’s card-based system. Seemingly another poorly-designed system ripe for surveillance, with little public outcry. In 2025 it'll be "so easy to check your balance online". In 2030 they'll be selling everything they know about you (including everywhere you go) to the consumer surveillance industry, just as cell companies and DMVs do today. The US desperately needs a port of the GDPR.