Oh wonderful, now they tell me--but some of this is mitigated by a criminal getting actually hold of the physical card and password (as the article mentions).. C'mon, OMNY, smarten up please. But I feel for others who can potentially experience this kind of exploitation. NYC can be a scary place for everyday ppl as it is.
Fun Fact- NYC Subway still uses OS/2 (actually ArcaOS 5, which is OS/2 Warp with some Linux sprinkled in).