Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Lime LA has NULL bike_id values #179

Closed
Oobhuntoo opened this issue Oct 1, 2019 · 3 comments
Closed

Lime LA has NULL bike_id values #179

Oobhuntoo opened this issue Oct 1, 2019 · 3 comments

Comments

@Oobhuntoo
Copy link

https://data.lime.bike/api/partners/v1/gbfs/los_angeles/free_bike_status

I noticed that the bike_id values in the above link for Lime free bike status data are all null. Is this because Lime stopped reporting their bike_id's for security reasons?

@Empty2k12
Copy link

I would love some insight from Lime on this. Which security problems am I not seeing by having this data openly accessible for everyone to use?
If I understand it correctly, the Scooter ID cannot be linked to a specific rider but only allows a scooter location to be tracked around the city. Was this the reason why this data was removed?
Maybe @johnpena can help answer as he seems to be working for Lime.

@mplsmitch
Copy link
Collaborator

@Empty2k12 - you're a little late to the party on this, see here for how IDs are linked to individuals: #146

hence the need for auth on feeds containing IDs

@Empty2k12
Copy link

Empty2k12 commented Jan 6, 2020

@mplsmitch Thanks for making me aware of #146 there are some interesting points mentioned there, and I can see why Scooters might be a problem. #146 was closed in favor of #147 where I also left a comment.
Our use case is fixed stations where one can trace rides only from station to station, which does not leak any PII.
I think removing bike_id altogether is jumping to conclusions too quickly. Shouldn't the judgment lie with the operators themselves if data could be traced back to a specific user? Maybe the standard should point out these improbable possibilities of re-id and instead encourage operators to decide if their data can be used in such ways? Maybe there are also other mitigations that might be employed to prevent re-id.
In the end, it really depends on the location and type of vehicle used.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants