Third parties may have an anonymous ov-chip card associated with an account on ov-chipkaart.nl, making the travel of the holder of the anonymous card to follow. The only thing that is needed is information on the back of the card.
With the card number and the expiration date can be an anonymous ov-chipkaart can be linked to an account on ov-chipkaart.nl and then the person who has a login for that account the travel history can follow from the user of the anonymous ov-chipkaart. That says, the newspaper NRC. In a test of Tweakers proved that with data only on the back of the card to any account attached to it. Therefore, according to the newspaper, for example, jealous wives, their man real-time tracking and should employers be able to check whether workers are indeed sick at home.
The trick only works on ov-chipkaart.nl, the site of Trans Link Systems, the company behind the ov-chipkaart. On Ns.nl can ov-chipkaart also be linked. According to the NRC required the NS that the user of the anonymous card in order for the registration to validate it first at a ticket machine a ‘kaartservicecode’ requests. Only then can the transaction data be accessed. That extra security has Trans Link Systems, which for example, creating a picture of the card conforms to someone’s public transport to travel to be able to follow.
For maps name in the link, a date of birth and postal code be entered, after which it to a random account can be linked. That are not on the map, but also that security doesn’t look particularly strong.
A spokeswoman for Trans Link Systems says that the company has met the demand of consumer organisations to the travel history available for anonymous cards. “We don’t know anything of that people. We can get them when logging in, so only ask for their card number and the expiration date.” The company is not in the security of the NS, which is an extra step required for a map attached to it.
