DH has played around quiet a bit with our bands and the RFID reader on our phones. All that you get from it is a string of numbers. For them to mean anything you have to be directly connected to Disney's database first. There are so many levels of protection that even my paranoid it husband says it would be way more trouble than its worth.
And it probably was only one particular ID. The MagicBands actually have three, given off at three different frequencies.
And FYI the signal is so weak that you have to have actual physical contact for a few seconds completely still for any scanner to get a read. Pretty sure you would notice that.
That does depend on the equipment being used. Something giving a more powerful magnetic field will induce the radio circuit from a greater distance, and with a refined antenna can read it from a distance. But then it's getting more cumbersome to pull it off.
And to gain very little.
Not entirely true. Disney is using long range readers to connect attraction photos to people's PhotoPass+ accounts. It's apparently still in the testing phase (like everything else), but it happened for us on ToT. We had no FP+ for it, didn't use our Magic Band at the attraction for anything, and didn't go claim our photo after the ride. However, the picture still showed up in our PP+ account. I was totally mystified, until I saw some other guests reporting similar experiences, and was then told by a CM that that's what Disney was doing.
OK, I hadn't realized they were doing that. For group shots like on TOT, I can see it working pretty well. For more individual ones, like on the coasters or Splash Mountain, I wonder if it would have trouble identifying which bands were in particular seats...
Exactly. My DH and I have also played around with reading the RFID signals from our bands. He has an IT background, and came to the same conclusion. He said with the encryption that Disney is using, it's virtually impossible that someone outside of Disney could get any sort of identifying or useful information from scanning a Magic Band.
It isn't so much the encryption (the chip does support encryption, but I'm not sure it is used for this application), but that someone also needs access to the massive "Disney Database of Everything" (DDE as I call it)...which if they have access to that, they don't NEED the RFID info and there is a much, much larger problem.
Even the various kiosks, terminals, etc. probably only have access to compartmentalized information. A Fastpass+ kiosk, for instance, could not pull up resort information even if hacked, etc. (I believe - I don't have direct knowledge)