Congress concerned over MagicBand security issues..

[stimmons]

First off, thank you OP for sharing. This thread has been most entertaining at the very least.

Secondly, I know that much more of my personal information is in MUCH more sinister hands just by default. So Disney knowing where I am in their parks doesn't bother me in the slightest.

You know it's just because Rep Markey wants to make dining reservations for his March trip and doesn't know if he can book 3 FP+ or 4.

I am really glad that there is not any important business that congress need to worry about.

My guess? Markey has an old refillable mug that expired a few years ago and he wants a free refill next month.

Thank you Deb & Bill for making me explode in laughter while having my coworker stare at me like I'm crazy. Then having to try to explain why I was laughing with more weird looks.

 

[rammh]

Your credit card information is not on the band. It is no less secure than it is under the current system. The same goes with your linked family information..

But all you have to do is scan it to make charges. They dont ask for a pin until the purchase is over $50. I suppose you would notice quickly that it is gone but I wish you had to put your pin in for all purchases.

That being said-I was at the resort store one night and needed to buy a half gallon of milk. I had my room key but not my license. The woman had no problem charging it for me and we joked that if I had stolen someone's key, I probably would be buying more than milk. So you are correct, it is basically the same as the old system.

 

[donaldlovesdaisy]

I'm glad that someone is attempting to question Disney over this. While I realise you can opt out of the band, it also seems that you will lose perks. I'm not comfortable with Disney knowing my ever single move of ever single moment. There is absolutely no way we will wear this band and we are hoping it doesn't become a "must do" or you lose perks.

If congress starts regulating what perks Disney can offer and to whom then we might as well all get out our red bandannas.

 

[dadddio]

I can forsee MANY problems.

Among these are:

What are the opt-in and opt-out options with the wrist band and RFID system?

they have stated that you can opt out of the bands entirely, you can choose not to pay with it, and you can choose not to have CMs given your name. What else would you need to opt out of?

How easily are the wristbands detatched, especially when on thrill/water rides?

I doubt that they will fall off very easily. The ones that have been shown to us seem pretty secure.

If someone loses their wristband, how qucikly/easily is it for the wristband to be disabled (let's say if you don't have a smartphone)?

You could likely also use the kiosk. Also, CMs can take care of it. Given that they will be selling upgrade bans, it makes sense that CMs in about any gift shop could delink the lost one.

Is skimming of the RFID data going to be easily done by criminals?

Why would they want to? No personal info exists on the bands, after all.

If the guest is supposed to keep their wristband, how quickly does the RFID data get "turned off"?

Why would it need to be turned off? Again, there's no personal info on the band.

The information stored in these wristbands and when they are being accessed is invisbile.

No personal information exists on the band. The only thing on the band is a number identifying the band.

 

[ses1230]

But all you have to do is scan it to make charges. They dont ask for a pin until the purchase is over $50. I suppose you would notice quickly that it is gone but I wish you had to put your pin in for all purchases.

That being said-I was at the resort store one night and needed to buy a half gallon of milk. I had my room key but not my license. The woman had no problem charging it for me and we joked that if I had stolen someone's key, I probably would be buying more than milk. So you are correct, it is basically the same as the old system.

I thought it was reported that you need a pin code for all purchases with the magicband.

 

[doconeill]

Note that the only significant change is that the MagicBand contains a transmitter, not just an RFID chip. Take out the transmitter and it isn't much different than a KTTW card (albeit easier to skip and duplicate).

The transmitter works over an unspecified distance (Disney has not stated the power level I believe, but it operates on the 2.4GHz Wi-Fi/cordless phone band, which gives it a practical maximum range of 300 feet outdoors.

Disney has also not specified why it has it, but the primary reason is believed to trigger the "customized" experiences by knowing when you are in a certain area. This is like the rumored (or did the confirm?) exit room at IASW replacing the "goodbye" signs, etc.

Disney COULD use it to know where you are in the park to a certain degree. The question is what value that knowledge provides them, or is it really a privacy issue. Disney COULD use other technologies - some you wouldn't be able to opt out of other than to not enter the park.

But all you have to do is scan it to make charges. They dont ask for a pin until the purchase is over $50. I suppose you would notice quickly that it is gone but I wish you had to put your pin in for all purchases.

They supposedly changed to require a PIN on all purchases, but there have been wide reports about a complete inconsistency all around of being asked to supply a pin and not being asked to use the pin for a purchase even over $50.

 

[doconeill]

Why would they want to? No personal info exists on the bands, after all.

Don't need personal information. Just need charge privileges. And if Disney can't get its act together on the PINs...

 

[dadddio]

I think that people that are up in arms about being tracked by Disney are forgetting that they are tracking you only while you are at their business. They have every right to know where you are on their property or what they are selling you.

If you go to the grocery store, you are on camera the entire time. Then you swipe your shopper card so that they can track what you buy. Other than the act that Disney uses better carrots, I'm not seeing much of a difference.

 

[dadddio]

Yes, if you lose it you have to go to guest services, which completely messes up your planning....consider how far GS is from, say, American Adventure at Epcot. Meanwhile whoever found it could be charging lots of stuff on YOUR wristband.

They actually can't charge anything because they don't have your PIN. They can't use it for park access because they don't have your finger. They can get into your room, but how would they know which room is yours?

 

[dadddio]

Not so far, actually.
There is a Guest Relations at Epcot's International Gateway.

But, your point is correct that there are spots in the various parks that are quite a long way from a Guest Relations.

My "out-of-contact" distance champions would include Planet Watch in DAK,
Big Thunder Mtn. at MK, and at DHS, inside the Fantasmic! theater at the end of the show.

I bet that gift shops can delink the bands because they will need to do that if you want to buy an upgraded band.

 

[doconeill]

Like I said, Disney can do it with other technologies you can't opt out of...

What is of concern for Congress is if Disney was able to say use the technology to know that your child spend a lot of time in the shop looking at Princess stuff, and then used that info to market Princess stuff directly to them.

 

[Disney_Princess83]

If congress starts regulating what perks Disney can offer and to whom then we might as well all get out our red bandannas.

I'm not saying that they regulate it but Disney should have no problems with answering these questions. If they have problems in answering these questions and having these answers made public, then they think people would have a problem with how their information is being used. That to me is a problem.

 

[mousermerf]

They actually can't charge anything because they don't have your PIN. They can't use it for park access because they don't have your finger. They can get into your room, but how would they know which room is yours?

And charges are not made to your credit card, but to your room account. You have that opportunity to dispute the charge before it's sent to you credit card account.

 

[dadddio]

But all you have to do is scan it to make charges. They dont ask for a pin until the purchase is over $50. I suppose you would notice quickly that it is gone but I wish you had to put your pin in for all purchases.

That being said-I was at the resort store one night and needed to buy a half gallon of milk. I had my room key but not my license. The woman had no problem charging it for me and we joked that if I had stolen someone's key, I probably would be buying more than milk. So you are correct, it is basically the same as the old system.

It's actually not the same because they granted your wish something like a week ago and stated that a PIN would be needed for all purchases.

 

[Disney_Princess83]

Like I said, Disney can do it with other technologies you can't opt out of...

What is of concern for Congress is if Disney was able to say use the technology to know that your child spend a lot of time in the shop looking at Princess stuff, and then used that info to market Princess stuff directly to them.

I think this is something that bothers me too, especially if there is information in the system about minors.

 

[SaraJayne]

I think that people that are up n arms about being tracked by Disney are forgetting that they are tracking you only while you are at their business. They have every right to know where you are on their property or what they are selling you.

If you go to the grocery store, you are on camera the entire time. Then you swipe your shopper card so that they can track what you buy. Other than the act that Disney uses better carrots, I'm not seeing much of a difference.

On camera, yes. The grocery store I choose to shop at does not have a shopper card.

 

[doconeill]

They actually can't charge anything because they don't have your PIN. They can't use it for park access because they don't have your finger. They can get into your room, but how would they know which room is yours?

1) Charging: Disney needs to get it's act together on the PIN requirements. The current reports are kind of scary.

2) Park access: Also depends on the consistency of requiring finger scans. We know that at times the turn them off. Perhaps with the new "more efficient" system, they will be on more.

3) Now THAT would be difficult, unless they can at least figure out what resort you were at. Be careful buying that resort-specific T-shirt

I bet that gift shops can delink the bands because they will need to do that if you want to buy an upgraded band.

Depends on the locations that will sell the upcharge bands - I'm betting it will at least be small to start with specially trained CMs, or they'll only be at the resorts and maybe a MK location. And that assumes they will actually have the upcharge bands.

 

[SaraJayne]

It's actually not the same because they granted your wish something like a week ago and stated that a PIN would be needed for all purchases.

There have been many reports of disney not being consistent in using the PIN.

 

[Granny square]

We had to put in our pin for all items starting about 3 days into our trip.

 

[mousermerf]

1) Charging: Disney needs to get it's act together on the PIN requirements. The current reports are kind of scary.

2) Park access: Also depends on the consistency of requiring finger scans. We know that at times the turn them off. Perhaps with the new "more efficient" system, they will be on more.

3) Now THAT would be difficult, unless they can at least figure out what resort you were at. Be careful buying that resort-specific T-shirt



Depends on the locations that will sell the upcharge bands - I'm betting it will at least be small to start with specially trained CMs, or they'll only be at the resorts and maybe a MK location. And that assumes they will actually have the upcharge bands.

The most likely location to sell the upcharge bands is Epcot because the intended market is Annual Passholders.