Sign up FAST! Login

What’s in a Boarding Pass Barcode? A Lot.


What s in a Boarding Pass Barcode A Lot Krebs on Security

Source: http://krebsonsecurity.com/2015/10/whats...

“Besides his name, frequent flyer number and other [personally identifiable information], I was able to get his record locator (a.k.a. “record key” for the Lufthansa flight he was taking that day,” Cory said. “I then proceeded to Lufthansa’s website and using his last name (which was encoded in the barcode) and the record locator was able to get access to his entire account. Not only could I see this one flight, but I could see ANY future flights that were booked to his frequent flyer number from the Star Alliance.”

The access granted by Lufthansa’s site also included his friend’s phone number, and the name of the person who booked the flight. More worrisome, Cory now had the ability to view all future flights tied to that frequent flyer account, change seats for the ticketed passengers, and even cancel any future flights.

Stashed in: Identity, Travel!, Travel

To save this post, select a stash from drop-down menu or type in a new one:

Geez, a boarding pass is a one way ticket to identity theft.

You May Also Like: