Comment on My Local Public Tennis Court Requires Online Registration
tmyakal@infosec.pub 2 weeks agoI disagree with the premise of ensuring it’s only accessible to people who are “supposed to be using it.” This is a public park. The public is supposed to be using it. By forcing registration, they’re limiting access to just people who have smart phones and are savvy enough to navigate the registration hoops. Children and old people aren’t allowed to play tennis, I guess?
If the big tangible benefit is resolving scheduling disputes, this is an over-engineered solution. There could be a sign-up board or book right by the entrance. Hell, they could station a park worker there during peak hours, just like they do for the swimming pool there.
And data collection absolutely is an issue on its own. Especially when it’s tied to a random QR code on a sign. A malicious actor could make their own copycat portal and start stealing IDs with the amount of information these guys are asking for. And that’s to say nothing of what the actual company may be doing with it.