Latest news with #JohnBreyault
WIRED
09-07-2025
- Business
- WIRED
The ‘Click-to-Cancel' Rule Was Killed, but Consumer Advocates Could Revive It
A US court scrapped a rule requiring a simple method for canceling recurring payments. Experts are hopeful regulators will revisit the issue and ease consumers' rage over 'subscription traps.' Photo-Illustration:United States residents almost escaped subscription cancellation hell, but the Federal Trade Commission's 'Click to Cancel' rule was unanimously struck down by the US Court of Appeals for the Eighth Circuit on Tuesday—just days before it was set to go into effect. What would have happened if this updated FTC rule had gone into effect on July 14 as planned? 'The stated goal was that they wanted to make it as easy for you to cancel a subscription as it is to sign up,' says John Breyault, vice president of public policy, telecommunications, and fraud at the National Consumers League. How reasonable! It's the type of rule that sounds like it should already exist as part of baseline consumer protections. If I can sign up for a gym membership or a news website subscription or a food delivery service with just a few, seamless taps on my smartphone, then why am I so often thrown into a labyrinth of puzzles—with people to call or in-person locations to visit—whenever I want to opt out from one of the recurring subscription charges. Even services that do allow users to cancel online may include more steps than the sign-up process or introduce confusingly labeled buttons that slow down the process. The Eighth Circuit's decision to nix the 'Click to Cancel' rule was based on procedural complaints, not on the substance of what the consumer protections entailed. 'While we certainly do not endorse the use of unfair and deceptive practices in negative option marketing, the procedural deficiencies of the Commission's rulemaking process are fatal here,' reads the appeal court's published opinion. John Davisson, director of litigation at the Electronic Privacy Information Center, sees this decision as 'very poorly reasoned' and hopes the current FTC tries to revisit the rule to protect consumers better. 'It would be such a slam dunk for the commission,' says Davisson. 'I think everyone understands why the subscription traps are bad. No one without a financial incentive or career advancement motive to sustain these subscription traps thinks they should exist.' A broad base of support from individual consumers for streamlining the opt out process could help eventually revive the 'Click to Cancel' rule or similar consumer protections. 'I'm somewhat hopeful, given the public support for this important option of canceling, that the commission will go back and get this thing re-going again,' says Bill Baer, a visiting fellow at the Brookings Institution and former member of the FTC. 'It'll take some time, but it's an important benefit to consumers.' If the current FTC decides to try again, which it may not, the process would likely take months or even years to complete. 'It's unfortunate the FTC's rule won't be enforced,' says Mario Trujillo, a staff attorney at the Electronic Frontier Foundation. 'But, the opinion doesn't stop states from acting, Congress from acting, or even the FTC from bringing individual cases.' States-level rules already have started to step in with more consumer protections than what's currently offered at the federal level and won't be impacted by the court's recent decision. For example, California's own version of 'Click to Cancel' went into effect last year and remains intact. Like many Americans, I'm seeing more and more of my paycheck go to subscription services each month. While some of the services are essential, others are less so. But, the hassle of going through the opt out process to cancel these unwanted services is often so tedious that I've put it off in the past—until I see the $20 recurring charge again the next month and get frustrated with myself. While deep-pocketed business interests will likely try to block any future attempts to mandate a simplified cancellation process, a deep-set hunger for change from consumers, fueled in part by righteous indignation, may eventually prevail. 'I think, on balance, it is something worth doing that can be done with modest cost to the business community and a hell of a lot of benefit to the consumer community,' says Baer.
%3Amax_bytes(150000)%3Astrip_icc()%2FTAL-on-phone-airport-lounge-NOAIRPORTWIFI0625-acc9b8888e5e4badba1c40628e9df63e.jpg&w=3840&q=100)
Travel + Leisure
17-06-2025
- Travel + Leisure
This Is One of the Biggest Cybersecurity Mistakes You Can Make at an Airport, Experts Warn
While cruising an airport's public internet network may feel like a convenience, criminals can easily exploit those networks to steal sensitive data from unsuspecting travelers, experts warn. 'It's definitely among the worst things you can do at an airport,' Matthew Hicks, a cybersecurity expert and associate professor of computer science at Virginia Tech, told Travel + Leisure . Public Wi-Fi is a shared internet connection, often over an unsecured network. Users are therefore vulnerable to hackers, who can intercept data like credit card details or account passwords, and install malware onto consumers' devices, according to experts. About 40 percent of Americans have had their data compromised while using a public Wi-Fi network, according to a recent Forbes Advisor survey of 2,000 workers who regularly use public internet. Yet, 23 percent of users said they think public Wi-Fi is completely safe, and another 43 percent said it's somewhat safe, the Forbes survey found. Anything you do on airport Wi-Fi should be something you'd be comfortable with the rest of the world knowing about. — John Breyault Because travelers often have ample downtime before flights—and may be in an area without cellular connection—airports are a common access point for public Wi-Fi, Hicks said. Consumers reported losing more than $16 billion to internet crime overall in 2024, a record high and a 33 percent increase from 2023, according to data from the Federal Bureau of Investigation. Personal data breaches were among the top three most common complaints received by the FBI, it said. 'As nearly all aspects of our lives have become digitally connected, the attack surface for cyber actors has grown exponentially,' B. Chad Yarbrough, operations director for the FBI's criminal and cyber unit, wrote in the Bureau's annual internet crime report. 'Scammers are increasingly using the Internet to steal Americans' hard-earned savings.' Scammers also often try to trick travelers into logging onto fake Wi-Fi networks, John Breyault, vice president of public policy, telecommunications and fraud at the National Consumers League, a consumer advocacy group, told T+L. Someone trying to connect to the O'Hare Guest Wi-Fi network may unknowingly access another—perhaps 'O'Hare Guest 2' or 'Chicago Airport Wi-Fi'—controlled by a criminal. "Make sure [the network] is the one run by the airport, and not someone setting up a honeypot," Breyault said. In 2024, the Australian Federal Police charged a man for allegedly establishing one of these so-called 'evil twin' networks to steal people's personal data. He did this at airports in Perth, Melbourne and Adelaide, among other places, AFP reported. Accessing the correct network will 'eliminate most of the real attackers,' Hicks said, adding that travelers can ask airport personnel if they're unsure. Using your cell phone to establish a personal internet hotspot is among the safest ways to access the web in an airport. This simple step will reduce the number of attackers to 'near zero,' according to Hicks. That's because it's a private cellular connection instead of an open Wi-Fi network. 'You're not sharing that connection with everyone else in the airport,' Breyault said. 'Your data will be much safer in transit.' If that's not available, experts recommend using a device with a 'virtual private network' or VPN, which is an encrypted connection that offers an additional layer of security. Hicks' best advice is to buy one from a reputable, U.S.-based company. Travelers should ultimately avoid logging into financial, email, social media, or other sensitive accounts over airport Wi-Fi, Breyault noted. 'If you're just checking the weather, that's one thing,' Breyault said. 'If you're checking your bank account balance, that's something different.' "Anything you do on airport Wi-Fi should be something you'd be comfortable with the rest of the world knowing about,' he said.
NBC News
27-04-2025
- NBC News
As Real ID deadline for U.S. air travel approaches, there are ‘workarounds,' experts say
The deadline for U.S. travelers to get a Real ID is fast approaching — and those who don't have one may not be able to board flights within the U.S. The Real ID card is an optional, upgraded driver's license or state identification card that is issued by a state driver's licensing agency and marked with a star. The good news: There are other forms of identification U.S. travelers can use — such as a valid U.S. passport, passport card, permanent resident card, or certain Department of Homeland Security trusted traveler cards — if they can't get a Real ID by the deadline, May 7. 'There are workarounds people can use,' said John Breyault, a travel expert at the National Consumers League, a consumer advocacy group. 'Most people already have the ability to travel, whether they have a Real ID or not.' About 19% of travelers don't yet have a Real ID-compliant type of identification, according to Transportation Security Administration data as of Thursday. Passengers who arrive at the airport without an acceptable form of ID 'can expect to face delays, additional screening and the possibility of not being permitted into the security checkpoint,' according to the TSA. Even passengers who have a Real ID card or other acceptable ID should aim to be at the airport at least 1½ hours ahead of their flight, due to likely delays in airport security lines as enforcement gets underway, Breyault said. What is the Real ID law? Congress passed the Real ID Act in 2005. The law set minimum security standards for state-issued driver's licenses and ID cards. The federal government will require Americans who access federal facilities to have a Real ID starting May 7. That includes travelers who go through TSA airport security checkpoints and board commercial airplanes, even for domestic flights. The rule applies to all airline passengers 18 years and older, including TSA PreCheck members. How to get around the Real ID rule Travelers can skirt the requirement to present a Real ID card if they have other types of approved identification. Experts said the most common among them are: a passport or passport card; a Global Entry card; an enhanced driver's license issued by Washington state, Michigan, Minnesota, New York or Vermont; or a permanent resident card, also known as a green card. Here's a list of all acceptable alternatives, according to the TSA: State-issued enhanced driver's license U.S. passport U.S. passport card Department of Homeland Security-issued trusted traveler cards (Global Entry, NEXUS, SENTRI, FAST) U.S. Department of Defense ID, including IDs issued to dependents Permanent resident card Border crossing card An acceptable photo ID issued by a federally recognized Tribal Nation/Indian Tribe, including Enhanced Tribal Cards (ETCs). HSPD-12 PIV card Foreign government-issued passport Canadian provincial driver's license or Indian and Northern Affairs Canada card Transportation worker identification credential U.S. Citizenship and Immigration Services Employment Authorization Card (I-766) U.S. Merchant Mariner Credential Veteran Health Identification Card (VHIC) 'Get that Real ID' It may be somewhat riskier to travel with an alternative document such as a passport for domestic flights, said Sally French, a travel expert at NerdWallet. 'A passport is much more complicated to replace than a driver's license, and it's more expensive,' French said. 'Get that Real ID.' A traditional passport book costs $130 to renew. Real ID fees vary by state but are generally less costly, experts said. They typically aren't more expensive than a standard driver's license. For example, in California it costs $45 to renew a standard driver's license or $39 to renew a regular ID card; in Virginia, there's a $10 one-time Real ID fee, plus a driver's license fee, usually $32. Desperate travelers can also gamble by showing up at the airport without a Real ID-compliant form of identification on May 7 and beyond, and hope airport agents show some mercy, French said. It's a 'much longer screening' process and isn't guaranteed, French said. It's a 'Hail Mary,' she said.
CNBC
27-04-2025
- CNBC
As Real ID deadline for U.S. air travel approaches, there are 'workarounds,' experts say
The deadline for U.S. travelers to get a Real ID is fast approaching — and those who don't have one may not be able to board flights within the U.S. The Real ID card is an optional, upgraded driver's license or state identification card that is issued by a state driver's licensing agency and marked with a star. The good news: There are other forms of identification U.S. travelers can use — such as a valid U.S. passport, passport card, permanent resident card, or certain Department of Homeland Security trusted traveler cards — if they can't get a Real ID by the deadline, May 7. "There are workarounds people can use," said John Breyault, a travel expert at the National Consumers League, a consumer advocacy group. "Most people already have the ability to travel, whether they have a Real ID or not." About 19% of travelers don't yet have a Real ID-compliant type of identification, according to Transportation Security Administration data as of Thursday. Passengers who arrive at the airport without an acceptable form of ID "can expect to face delays, additional screening and the possibility of not being permitted into the security checkpoint," according to the TSA. Even passengers who have a Real ID card or other acceptable ID should aim to be at the airport at least 1½ hours ahead of their flight, due to likely delays in airport security lines as enforcement gets underway, Breyault said. Congress passed the Real ID Act in 2005. The law set minimum security standards for state-issued driver's licenses and ID cards. The federal government will require Americans who access federal facilities to have a Real ID starting May 7. That includes travelers who go through TSA airport security checkpoints and board commercial airplanes, even for domestic flights. The rule applies to all airline passengers 18 years and older, including TSA PreCheck members. Travelers can skirt the requirement to present a Real ID card if they have other types of approved identification. Experts said the most common among them are: a passport or passport card; a Global Entry card; an enhanced driver's license issued by Washington state, Michigan, Minnesota, New York or Vermont; or a permanent resident card, also known as a green card. Here's a list of all acceptable alternatives, according to the TSA: It may be somewhat riskier to travel with an alternative document such as a passport for domestic flights, said Sally French, a travel expert at NerdWallet. "A passport is much more complicated to replace than a driver's license, and it's more expensive," French said. "Get that Real ID." A traditional passport book costs $130 to renew. Real ID fees vary by state but are generally less costly, experts said. They typically aren't more expensive than a standard driver's license. For example, in California it costs $45 to renew a standard driver's license or $39 to renew a regular ID card; in Virginia, there's a $10 one-time Real ID fee, plus a driver's license fee, usually $32. Desperate travelers can also gamble by showing up at the airport without a Real ID-compliant form of identification on May 7 and beyond, and hope airport agents show some mercy, French said. It's a "much longer screening" process and isn't guaranteed, French said. It's a "Hail Mary," she said.
