Hacker News new | ask | show | jobs
by dawnerd 3190 days ago
Not the first time airlines have had poor security with boarding passes:

https://medium.com/@da/need-a-last-minute-flight-45af88ec8df... https://www.wired.com/2016/08/fake-boarding-pass-app-gets-ha... https://puckinflight.wordpress.com/2012/10/19/security-flaws... http://www.washingtonpost.com/national/experts-warn-about-se...

And what the OP article is basically copying: https://www.theverge.com/2017/1/10/14226034/instagram-boardi...

I don't see this changing anytime soon (although there are some tests to move towards facial recognition).

2 comments

The real problem is that once again someone treated what should simply be an identifier to look up data as something more. Why not store all this information on the server that an authorized person can see when they scan a uuid on the boarding pass? Would they allow boarding of the network was down?
There are procedures in place in case the network is down. I have flown with hand-written boarding passes multiple times in the past (they even had special cards for that situation laying around). On the other hand there were flights that were grounded as there was some network malfunction. I guess it depends on the specific problem they have.
Can you imagine how slow boarding might be if the information needed retrieved from a distant mainframe by the scanner before it would emit its _beep_ of consent? (I agree with you, though)
Is the problem the airline or the person posting it online?