Hotel card reader facts and fiction
- IT TOPICS:Security
The earlier report in this blog that a director of IT equipped with a card reader found his personal information stored on his hotel key on several occasions has been met with much concern - and more than a bit of skepticism.
Readers point to the Snopes.com Card Sharks article as proof that this story is an urban legend. But a Slashdot user cautions that the Snopes article may not be the whole story.
Others have pointed to Jane Ann Morrison's 2003 article, Hotels can't erase myth about credit card information on room keys.
I have been in touch with Peter Wallace, the director of IT who made the statements to me a few days ago. His comments on hotel keys came up as an interesting aside during our discussion on a different subject. Wallace stated that, using a card reader, he has on several occasions swiped a hotel card key in a reader and discovered his personal information. The information Wallace says he has read from hotel keys has included his credit card number, name and address.
Wallace began receiving feedback from my initial posting at 6:00 a.m. this morning. He stated in an e-mail that he would like to respond, but is awaiting clearance from his organization's legal dept. before he can do so.
What's interesting to me is that while everyone has an opinion as to whether its possible that hotels would - either knowingly or unknowingly - store such information on a card key, only one person who posted here claims to have tried this at several hotels (without success). Given past discussions and all of the news stories going back to at least 2003, I am surprised that no one else among this tech savvy group has tried this and reported in.
Perhaps Wallace's additional comments on his observations, when the come, will clarify things a bit.
Follow up: Summary of 'Net responses in today's IT Blogwatch



