An undergraduate student recently approached and described to The Scout, on the condition of anonymity, a way to access the information on Bradley QuickCards without ever touching the IDs.
This is a huge security vulnerability to campus – one that, if left unaddressed, poses serious safety risks to campus. This includes leaving dorms, academic buildings, parking decks, labs and other locations susceptible to security breaches.
After learning about this issue, The Scout approached administrators in the Controller’s Office, which is in charge of the QuickCard system, and explained the vulnerabilities associated with the magnetic (mag) stripe technology on the cards.
We were glad to hear administration has plans for updating Bradley’s security and ID system, including phasing out the mag stripe for more secure technology as well as altering the ID’s physical appearance with safety in mind.
However, we also received an unsettling response.
“We do know about the issues with the mag stripe,” Mona Hutchison, systems manager for the Controller’s Office, said. “We have for a while.”
Why was this not brought to anybody’s attention previously?
Students use their ID numbers for so many things on campus – checking into events, classes, greek life parties and more. These numbers are given verbally or written down, shared with friends and even posted to Snapchat account “hilltopmadness” when cards are reported lost.
Students wouldn’t do these things if they were informed by administrators that writing those six digits down could enable someone to copy their card and break into a number of campus building.
Additionally, we fear administration will not act quickly, as it appears they have avoided taking responsibility for the vulnerability so far.
“[The issue] can’t be taken care of systematically; that falls upon the person to not put their number out there to the public,” University Spokesperson Renee Charles said.
We agree students need to be careful with their ID cards and numbers. Treat them with the same caution and protection as credit cards.
But responsibility should also fall on those who oversee the system. We hope to see this change in direction soon – before it’s too late.
