Hi all,
I've been struggling to find accurate information about the SwissPass RFID cards. Is there just a lack of information in English or has there been no debate about this issue at all?
Does anybody else know anything about how the "anonymization" of customer data works? Is it just a gimmick or is it based on some open algorithm that can be trusted?
I came across a couple of links that don't really give any details but they suggest the SBB can't be trusted:
http://lenews.ch/2015/09/04/does-the-swisspass-protect-your-personal-data-qu...
https://www.reddit.com/r/Switzerland/comments/3hjwg8/can_i_change_my_swisspa...
Regards,
Daniel
There was never any discussion over this topic in switzerland, some talk in the news (perhaps 2 articles) but everything went really fast, and suddenly it was there.
There is no anonymization of the Customer data before it is read by the conductor. The QR code just contains a link to your digital profile at SBB, and they then check your status online. (Perhaps they have a database of all valid GAs on the cellphone, because I got also checked in the tunnel, where I had no reception).
Otherwise there is only the promise that they will store the data anonymised and if you write them, that you don't like your data to be sold to other companies, they won't do it.
Not a lot that you can do here. As everything is now through. The good part is that the Half fare isn't checked very often digitally. (Put this could change when it's one year past since the swisspass was introduced) I myself was very surprised that there was not more outcry over the obvious privacy problems with the SwissPass.
Regards, Samuel
Am Son, 22. Nov, 2015 um 6:50 schrieb Daniel Pocock daniel@pocock.pro:
Hi all,
I've been struggling to find accurate information about the SwissPass RFID cards. Is there just a lack of information in English or has there been no debate about this issue at all?
Does anybody else know anything about how the "anonymization" of customer data works? Is it just a gimmick or is it based on some open algorithm that can be trusted?
I came across a couple of links that don't really give any details but they suggest the SBB can't be trusted:
http://lenews.ch/2015/09/04/does-the-swisspass-protect-your-personal-data-qu...
https://www.reddit.com/r/Switzerland/comments/3hjwg8/can_i_change_my_swisspa...
Regards,
Daniel
Zurich mailing list Zurich@lists.fsfe.org https://lists.fsfe.org/mailman/listinfo/zurich
The cellphones of the train staff use GSM-R. Maybe they have a better network.
Am 22. November 2015 18:56:40 MEZ, schrieb Samuel Gyger gygersamuel@gmail.com:
There was never any discussion over this topic in switzerland, some talk in the news (perhaps 2 articles) but everything went really fast, and suddenly it was there.
There is no anonymization of the Customer data before it is read by the
conductor. The QR code just contains a link to your digital profile at SBB, and they then check your status online. (Perhaps they have a database of all valid GAs on the cellphone, because I got also checked in the tunnel, where I had no reception).
Otherwise there is only the promise that they will store the data anonymised and if you write them, that you don't like your data to be sold to other companies, they won't do it.
Not a lot that you can do here. As everything is now through. The good part is that the Half fare isn't checked very often digitally. (Put this could change when it's one year past since the swisspass was introduced) I myself was very surprised that there was not more outcry over the obvious privacy problems with the SwissPass.
Regards, Samuel
Am Son, 22. Nov, 2015 um 6:50 schrieb Daniel Pocock daniel@pocock.pro:
Hi all,
I've been struggling to find accurate information about the SwissPass RFID cards. Is there just a lack of information in English or has there been no debate about this issue at all?
Does anybody else know anything about how the "anonymization" of customer data works? Is it just a gimmick or is it based on some
open
algorithm that can be trusted?
I came across a couple of links that don't really give any details
but
they suggest the SBB can't be trusted:
http://lenews.ch/2015/09/04/does-the-swisspass-protect-your-personal-data-qu...
https://www.reddit.com/r/Switzerland/comments/3hjwg8/can_i_change_my_swisspa...
Regards,
Daniel
Zurich mailing list Zurich@lists.fsfe.org https://lists.fsfe.org/mailman/listinfo/zurich
Zurich mailing list Zurich@lists.fsfe.org https://lists.fsfe.org/mailman/listinfo/zurich
On 22/11/15 18:56, Samuel Gyger wrote:
There was never any discussion over this topic in switzerland, some talk in the news (perhaps 2 articles) but everything went really fast, and suddenly it was there.
Yes, very nice that they should sneak in something sinister like this on a public holiday in the middle of summer when everybody is on vacation.
There is no anonymization of the Customer data before it is read by the conductor. The QR code just contains a link to your digital profile at SBB, and they then check your status online. (Perhaps they have a database of all valid GAs on the cellphone, because I got also checked in the tunnel, where I had no reception).
Otherwise there is only the promise that they will store the data anonymised and if you write them, that you don't like your data to be sold to other companies, they won't do it.
Not a lot that you can do here. As everything is now through. The good part is that the Half fare isn't checked very often digitally. (Put this could change when it's one year past since the swisspass was introduced) I myself was very surprised that there was not more outcry over the obvious privacy problems with the SwissPass.
I would expect several things to change - it is called bait-and-switch
Once they have forced it on everybody they will sack some of those extra staff they hired or they will militarize them like in other countries where these systems have become very adversarial. People here seem to have a lot of respect for the transport system and the staff, that doesn't exist in other countries that have gone to automated systems.
One incident well known in Melbourne involved the "ticket inspector" picking up a 15 year old girl and throwing her on the ground[1]. I tend to think of somebody like that primarily as a child abuser who also happens to be a ticket inspector. 20 years ago Melbourne had conductors on trams and trains, like Switzerland, now there is a private army instead, they don't sell tickets or answer questions for passengers, they just hunt in packs, setting up ambushes at the exits from tram stops or platforms.
It has a nasty effect on society in general when people see this type of gangland behavior on their way to work every morning.
It also means people doing dangerous things to avoid the cavalry like crossing railway tracks instead of using the passageways. While there are not so many accidents, it means they have to invoke safety procedures, slow down the trains, etc, so everybody suffers.
SBB may well look at putting automatic gates at station entrances too, this will involve creating lots of fences around platforms and generally making the stations feel a bit more like prisons. The openness of Swiss railway stations today is a nice thing that people will reflect on when it is gone.
Another nasty surprise in there is that they now do automatic renewal. People will have to cancel their annual GA at least 1 month before the expiry date or they are screwed. Maybe a good idea to send a registered letter opting out of automatic renewal, marketing and data sharing.
Looking at the terms and conditions, it says you can't keep the card in a wallet or RFID protective cover: http://www.sbb.ch/content/sbb/en/desktop/abos-billette/abonnemente/ga/ga-erw...
and it also says that you must hand it to the ticket inspector every time and they don't have to give it back.
One positive thing I noticed is that business customers can still buy the regular card (for now).
Regards,
Daniel
1. http://www.heraldsun.com.au/news/victoria/ticket-inspectors-used-excessive-f...
Hi Daniel
On 2015-11-22, Daniel Pocock wrote:
I've been struggling to find accurate information about the SwissPass RFID cards. Is there just a lack of information in English or has there been no debate about this issue at all?
Unfortunately I can't help you. I just thought that maybe the CCCZH has got some info for you. Their mailing list is at
http://sonne.alt-f4.ch/cgi-bin/mailman/listinfo/zuerich
Their homepage is at