BOSTON — A passenger door on a Boston subway car did not function properly when a man got his arm stuck in it and was dragged to his death last month, federal investigators said Monday.

An unchanged credential allows anyone to virtually control door locks and elevators at dozens of apartment buildings across North America, a security researcher found.