Are MagicBands the new big brother?

[BudgieMama]

@jtowntoflorida I don't remember having a voucher last year in our pack (which is sent to us my WDTC UK, rather than WDW) and we were told to go to the desk on arrival. We were greeted as we approached the desk, and they asked if we were international guests. When we said yes, they told us to go to the desk. I think that's when we got a voucher. I'm going to see if that's in my paperwork now!

 

[Hootch]

They have little RFID chips that send a signal. There are also long range scanners that pick up your RFID signal for interactions.

What information is collected through your use of the RF Devices and how is it used?

We use the information collected in connection with MyMagic+ to deliver the best possible guest experience. For example:

When you use your RF Device at touch points (e.g., for Disney Resort room entry, park admission, FastPass+, and purchases at select Resort locations), we are able to record your transaction and, when necessary, make the appropriate adjustment to your account.

The long-range readers will be in specific locations to enable the delivery of attraction photos and videos and personalized offerings.

Your interactions provide us with information about the products and services you experience in the Parks; your wait time for rides, restaurants and other attractions; and similar types of information.

If you sign up on the My Disney Experience website or mobile app to receive special email and/or text message alerts during your Resort visit, we may use information collected through your use of the RF Device to fulfill your request.

We may also use the information we collect through your use of the RF Device to send you information about products and services that we think may be of interest to you, but you can always choose not to receive marketing information from us. We will not use information collected in connection with MyMagic+ to personalize or target advertising to children under age 13.

Aggregate information can be used to better understand guest behavior and make improvements to the guest experience (e.g., managing wait times and improving traffic flow).

How is information collected through your use of the RF Devices shared?

We may share information about your experiences at the Resort with other members of the Walt Disney Family of Companies, but you can always choose not to receive marketing from us.

However, information about your specific park experience collected automatically when your MagicBand is read by long-range readers will not be shared with other members of the Walt Disney Family of Companies to use for marketing purposes unless you elect that we do so.

We will only share information about you that is collected automatically when your MagicBand is read by long-range readers with third parties for their marketing uses if you elect that we do so.

What choices are available regarding information collected through your use of the RF Devices?

Guests participating in MyMagic+ have a choice about how their information is used for marketing and can choose not to receive marketing information from us by opting out of receiving such communications. MyMagic+ also allows guests to receive offers and tips during their visit to Walt Disney World, but only if they request them from us.

We will not use information collected in connection with MyMagic+ to personalize or target advertising to children under age 13.

Are all guests required to participate in MyMagic+?

Guests can enjoy admission to the parks without having to participate in MyMagic+, register on the My Disney Experience website or provide any personal information. Guests who choose to participate in MyMagic+ and register on My Disney Experience will be able to use the FastPass+ service, make dining reservations online, and enjoy the convenience of having their tickets, FastPass+ selections, Resort room access and other enhanced features all in one place. Guests participating in MyMagic+ always have the option to use a card instead of a MagicBand. Guests can also choose whether to use their RF Device to make purchases at select Resort locations.

I did not realize the long range scanners could not read the cards with RFID.

 

[jtowntoflorida]

@jtowntoflorida I don't remember having a voucher last year in our pack (which is sent to us my WDTC UK, rather than WDW) and we were told to go to the desk on arrival. We were greeted as we approached the desk, and they asked if we were international guests. When we said yes, they told us to go to the desk. I think that's when we got a voucher. I'm going to see if that's in my paperwork now!

I don't understand why they treat you Canadians so differently! It isn't like you're "real" foreigner, like a European!

The vouchers are in a little booklet that comes with the yellow DME luggage tags. Do they give you the luggage tags, or since you have to clear Customs, is that not a service that apply to international guests as well?

 

[BudgieMama]

I don't understand why they treat you Canadians so differently! It isn't like you're "real" foreigner, like a European!

The vouchers are in a little booklet that comes with the yellow DME luggage tags. Do they give you the luggage tags, or since you have to clear Customs, is that not a service that apply to international guests as well?

I'm English. We don't get luggage tags or vouchers.

We have to collect our bags for customs.

 

[dixiegirl]

I have been personally greeted with the bands before and I don't mind at all. I'm choosing to spend time on their property and am also choosing to use the MBs so that's on me. Their land, their rules - don't mind one bit - they can track me all day long. I know that if I'm out in public - in general I'm being filmed by someone somewhere.

 

[jtowntoflorida]

I'm English. We don't get luggage tags or vouchers.

We have to collect our bags for customs.

Whoops...my bad. I thought you said you were Canadian.

I can see with the Customs issue why you have to stop to collect bags, and I guess they've decided that sending just the vouchers internationally would be too expensive. Sorry!

 

[BudgieMama]

@jtowntoflorida - we don't get anything sent direct from WDW. All the info we get is from the UK based Walt Disney Travel Company (who we book with) or through whatever tour operator you use over here. Which is why we don't get our Magic Bands either. We do get a cute little pocket guide book though! "The Little Book of Magic"!

 

[SureAsLiz]

They actually don't track your every movement throughout the park, the bands are only read when within range of a scanner (such as in the ride photo area, or near a checkout terminal) and if I remember correctly, personal identification information is not tracked so they can't pull your name up in a system and tell everywhere you've been. If they were able to track you everywhere, then lost children would be less of an issue since they would theoretically be able to pinpoint where the child and/or family is. As it is now, that is not something that is done.

Part of the MyMagic+ experience is that it makes the trip more personal through the sharing of select information from MagicBands

 

[k5jm]

Just an FYI, Magic Bands can be read by readers other than TWDC. I can read them with my Nexus 5. The non-Disney readers can only see the Unique ID of the RFID tag, but once you know what that ID number is, you can associate it to a person. You essentially have a beacon attached to arm. TWDC is also using your phone to collect data when you attach to the Wifi at the WDW and DL. If you have Bluetooth turned-on on your cell phone, then WDW can also watch you using i-beacon and Low-power bluetooth. It is not just WDW, it is Lowes, Home Depot, Macy's, etc.

Here is the scary part. If someone can read your MB, they can clone it.

http://www.instructables.com/id/RFID-Emulator-How-to-Clone-RFID-Card-Tag-/

There is no expectation of privacy when you beacon yourself out to the world.

 

[wilkeliza]

Just an FYI, Magic Bands can be read by readers other than TWDC. I can read them with my Nexus 5. The non-Disney readers can only see the Unique ID of the RFID tag, but once you know what that ID number is, you can associate it to a person. You essentially have a beacon attached to arm. TWDC is also using your phone to collect data when you attach to the Wifi at the WDW and DL. If you have Bluetooth turned-on on your cell phone, then WDW can also watch you using i-beacon and Low-power bluetooth. It is not just WDW, it is Lowes, Home Depot, Macy's, etc.

Here is the scary part. If someone can read your MB, they can clone it.

http://www.instructables.com/id/RFID-Emulator-How-to-Clone-RFID-Card-Tag-/

There is no expectation of privacy when you beacon yourself out to the world.

Cloaning is why Disney requires ID to tell you your room number or change pin code etc. If you ever try to do these things and aren't asked for ID take the CMs name down and make sure you let Disney know how disappointed you are that your security was put at risk by a CM who didn't make sure you were you before changing anything.

With your Disney ID they would need to hack into the Disneh system to get your private information. I hope that never happens but with all the professional hacking rings around I imagine it is only a matter of time.

 

[k5jm]

Clowning is why Disney requires ID to tell you your room number or change pin code etc. If you ever try to do these things and aren't asked for ID take the CMs name down and make sure you let Disney know how disappointed you are that your security was put at risk by a CM who didn't make sure you were you before changing anything.

RFID Snarfing would have to be done in pretty close range and would probably be done by walking down a hall at a resort around breakfast time. It would not be hard to target someone leaving their room. Once you have that UUID, you could not only clone the card, but could be able to identify the cloning victim in the park if you walked in close enough proximity to them (needle in a haystack).

With your Disney ID they would need to hack into the Disneh system to get your private information. I hope that never happens but with all the professional hacking rings around I imagine it is only a matter of time.

The Database is the last thing these folks would be able to get access to. RFID is a "serial" medium, exchanging a UUID and very some additional "low value" data. Plus, I would be more worried crooks looking for easy target items that you would get from room access.

 

[AngiTN]

I just got back from a marvelous trip....hot, humid and full of fun rides. One thing is bothering me to no end however.

We did not stay on site, but I did get Magic Bands to help our crew get through admissions, fast passes, etc faster. We all wore them with no thought to it.

On the last day, literally on our way out of the park, one of my kids pointed out that we had not bought Disney popcorn yet on this trip. I stopped at the cart near the exit and bought a bucket of popcorn. As we walked away from the cart, a Disney Research cast member approached. I assumed it was the usual "you are leaving the park" survey. She pulled me over and asked if she could ask me a couple of questions about my popcorn cart experience. I said fine and she showed me the ipad. BEFORE the first question, my NAME was at the top of the ipad page. Now, what is weird is that I paid cash at the cart and did not scan in any way.

The only thing I could think was that my MagicBand could track where in the park I was. Is Disney using it for that? Did I sign over for tracking me when I bought these? Is Disney taking data on our patterns, spending, etc?

Yes.

 

[itchin2go]

Part of the MyMagic+ experience is that it makes the trip more personal through the sharing of select information from MagicBands

Like what?

 

[GreatLakes]

We are at the very beginning of what can be done with MBs. They are a beacon telling Disney where you are at any given moment, what your walking pattern is, you spending habits, your likes and dislikes, etc. Some of those things are actually gathered with MDE but linked to you via your MB. When you break the entire MyMagic+ project down it is a data mining project at it's heart. Every other aspect of it feeds that data gathering and analysis.

As the platform and product becomes more mature, and more infrastructure is added, Disney will be able to deliver more personalized experiences. It is a bit big brotherish but in reality the Snowden revelations about mass data gathering is a much larger concern than what we voluntarily agree to give Disney when we accept the T&Cs of using MagicBands (either explicitly or implicitly).

If you really don't feel comfortable with Disney being able to ping you at any given time just grab an RFID blocking bag or wallet to keep your MB in when you aren't actively using it to enter a park, your room, or pay for something. Actually I'd skip that last one if you are really concerned. You don't have to attach spending to your Magic Band.

ETA: None of that really speaks to the security of the data being passed but the architecture they are using, as Mike sated, does segregate the high value data from the unprotected UUID. I would have liked to see some public-key crypto included to make it harder to spoof the MBs but that isn't really the industry norm at the moment.

 

[Disneyliscious]

The only thing I could think was that my MagicBand could track where in the park I was. Is Disney using it for that? Did I sign over for tracking me when I bought these? Is Disney taking data on our patterns, spending, etc?

Absolutely. Disney knows every move you make now due to MB.

Were you a guest who had a horrible experience? Well on your next trip they can track you with MB and a CM can find you and "choose" you for a little pixie dust. Guest satisfaction, know what I mean?

Are you a big spender in Disney World? Well lets track you down and give you a free FP. They really want to keep big spenders happy and coming back!

You complained about a rude CM in a shop? Were you even in that shop? One sec, Disney will check to see if your MB was read as being in that store that day.

You got your wallet stolen from the pocket on your backpack? What? Disney can check to see all the MB's that were within arms reach of you today and give a list to the police.

You complain that you were denied FP+ usage but you arrived 2 minutes before the window closed. Well, now Disney can check to see if you really did!

You ate at CRT and Akershus. The princesses must be important to your family. Disney will send targeted ads about the Princesses your way!

Family A walks by and the CM's I Pad shows its their first visit. Family B walks by and the CM's I Pad shows its their 12th visit. We know family B is going to return, so lets choose family A for a nice photo op or something. That way they'll come back!

If it isn't already available on MB, it soon will be. Your MB will act as your SSN inside Disney and they will know every move you make. There are lots of pluses to MB, but as with all technology, there are lots of downfalls too.

 

[k5jm]

I think it is important to remember that this technology is used everyday to collect data. Florida's Sunpass, Texas Tags/EZtag, and other tolling systems are used to capture more than tolling data on drivers. The Toll Tags are used to capture traffic patterns and slowdowns on non-tolled roads and private property. We have many subdivisions and communities in my part of the country that will use those same toll tags to give you access to gated communities. There are also many stand alone readers capturing that data passively. The readers do not discriminate. If the RFID responds to the RF energy emitted from the readers, then the reader will collect that UUID of the RFID unit. I am sure SunPass has read my MBs plenty of times.

 

[SureAsLiz]

Like what?

Name, affiliations (AP, DVC, CM, etc), things like that. All things they would have in the database already, but now instead of asking if you have any discounts, they can remove a step and ask for that specific discount card.

They can't pinpoint your location in the park, as much as people want to think they can. Even at BOG which is designed to have your food delivered based on your MB they don't know exactly where you are at all times.

 

[AngiTN]

Name, affiliations (AP, DVC, CM, etc), things like that. All things they would have in the database already, but now instead of asking if you have any discounts, they can remove a step and ask for that specific discount card.

They can't pinpoint your location in the park, as much as people want to think they can. Even at BOG which is designed to have your food delivered based on your MB they don't know exactly where you are at all times.

Maybe they can but they don't use that yet. I think much of what is mentioned here in this thread are things that may come in the future, not things being done now.

We've been trying to find tech here at work that does track your pinpoint location for a specific project. So far they can't find a thing. General areas but not pin point

 

[SureAsLiz]

Maybe they can but they don't use that yet. I think much of what is mentioned here in this thread are things that may come in the future, not things being done now.

We've been trying to find tech here at work that does track your pinpoint location for a specific project. So far they can't find a thing. General areas but not pin point

Just to clarify with what you've bolded - are you saying they don't currently check for affiliation? Because I know for a fact that they do as it has happened to me multiple times. Most notably was when I was exiting Star Tour and the CM at the photo desk called me out and said they have a CM discount while I was exiting the ramp (it was a slow day and I walk fast, so I was the only one in the area). There have been other smaller incidents where I was purchasing something and they asked for my id before I had even pulled out my wallet. Maybe it's not something that is used as widely when it is busy, but it definitely happens

 

[3DisneyFanz]

Name, affiliations (AP, DVC, CM, etc), things like that. All things they would have in the database already, but now instead of asking if you have any discounts, they can remove a step and ask for that specific discount card.

They can't pinpoint your location in the park, as much as people want to think they can. Even at BOG which is designed to have your food delivered based on your MB they don't know exactly where you are at all times.

During one of the rollout discussions on the project Disney stated they could use the technology to find a lost child in the park. If they say they can do that then between the permanent sensors and the ones on the CMs equipment they can pinpoint a location.