Hacker Newsnew | past | comments | ask | show | jobs | submitlogin
Low PNR Entropy: I accessed all airline bookings via simple math (alexschapiro.com)
4 points by bearsyankees 24 days ago | hide | past | favorite | 1 comment


Meanwhile in India we have airlines asking for OTP + Aadhaar + blood sample to change a seat, and somehow Avelo just needed 6 random chars. Beautiful write-up, Alex — this is the kind of responsible disclosure we need more of.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: