News for hackers. Stuff that matters.
Re:Airport lounges will let anyone in, provided you can fake... by Spivak on Friday August 04, 2017 @03:28PM (#14931313)
What's the takeaway here? That they use a rudimentary security system as a mild deterrent which is easily exploitable. That it's okay to commit fraud as long as you use tech to do it?

You wouldn't see this kind of thing on a lockpicking forum, "Airport lounges will let anyone in, provided you brink your kit."

Re:Airport lounges will let anyone in, provided you can fake... by mikeash on Friday August 04, 2017 @04:51PM (#14932146)
Reminds me of the common joke life pro-tip: you can get stuff without paying for it by going to a store, picking something up, and just walking out with it!
Re:Airport lounges will let anyone in, provided you can fake... by iainmerrick on Friday August 04, 2017 @03:44PM (#14931484)
Exactly! Just because the flaw is there, that doesn't give you the right to gratuitously exploit it. Do we really want to force people to implement super-strict security for relatively trivial things like this?
Re:Airport lounges will let anyone in, provided you can fake... by whipoodle on Friday August 04, 2017 @04:01PM (#14931687)
I mean, I see your point, but if that's what they have to do to stop fraud, and the fraud is something they really care about, then yeah, they should do that. Surely it's no great tragedy that stores have cash registers and bill checkers.
Re:Airport lounges will let anyone in, provided you can fake... by mikeash on Friday August 04, 2017 @04:43PM (#14932080)
Most stores have far fewer controls than they could, because they'd rather be nice to their customers. This changes if the level of fraud/theft increases.

Stores places where few people steal are nice and open, have nobody watching the doors, and basically rely on the honor system to ensure that you pass by a cashier before you leave. Stores in places where theft is common have all sorts of unpleasant security measures.

Society only works because most of us behave. Look around you, and you'll see an incredible number of structures that only work because 99% of people are basically decent and honest. Don't be in the 1% who aren't, and definitely don't encourage that 1% to grow.

Re:Airport lounges will let anyone in, provided you can fake... by techsupporter on Friday August 04, 2017 @05:12PM (#14932317)
> Most stores have far fewer controls than they could, because they'd rather be nice to their customers. This changes if the level of fraud/theft increases.

Yep, and people can easily see this for themselves. It is incredibly telling to note the difference between going into the Rite Aid on Rainier Ave S in Seattle and the Rite Aid on 35th Ave NE in the same city. They're almost directly due north/south of each other and separated by less than ten miles.

However, the Rainier one has at least one visible store security guard, tags on the shopping trolleys to prevent leaving the store with them, locked-down shaving razor refills and baby formula and small electronics, and "you are being recorded" security televisions prominently placed.

The one on 35th has none of those. If there is a security guard or loss-prevention specialist, that person is often hidden. Shave refills are easily accessed (though do have removable security tags), there are corrals outside so customers can use the trolleys to load purchases into their vehicles, and the store simply feels more open and accessible.

Re:Airport lounges will let anyone in, provided you can fake... by popcorncowboy on Saturday August 05, 2017 @10:47AM (#14935976)
> Most stores have far fewer controls than they could, because they'd rather be nice to their customers. ... 99% of people are basically decent and honest. Don't be in the 1% who aren't

This is dangerous thinking.

People don't generally steal because they're bad vs "nice", they steal because they have an incentive to do so (economically speaking). Heaping moral judgement on them is unhelpful and in many cases actively detrimental [because it obscures causal underlying issues and excuses bad policy designed to address symptoms].

'I mean, have you noticed that like, in white, "nice" places, where people are "nice", the stores are all open and nice and people are friendly, but in those dirty poor black neighborhoods the corner stores have got bars on the windows and grills in front of the cashiers, because blacks steal more and make up more of that nasty 1% obviously' </valleygirlvoice> I hope it's obvious where this line of reasoning leads. Dangerous places.

Theft controls are functions of behavioral economics, not how "nice" people are (store owners included). ALL stores suffer from some level of theft, and thus _could_ implement HYPER security to eliminate the problem. They don't, mostly because the costs (direct and indirect) outweigh the benefits of deterring a given level of theft. So for most stores, the expenditure on theft prevention comes down to the minimum spend necessary to reach a tolerable level of theft. And levels of theft have everything to do with a very careful balance of cost:benefit to do with economic and social incentives for the actors involved. This "most people are nice but 1% of people are bad and mess it up for everyone else" type thinking excuses awful systemic abuse and places blame in entirely the wrong place.

Re:Airport lounges will let anyone in, provided you can fake... by mikeash on Saturday August 05, 2017 @12:44PM (#14936563)
It's dangerous thinking to observe that stores in poor areas have more security, because there's a twisted line of thinking that leads from there to racism? How about, it's the racism that's dangerous thinking.
Re:Airport lounges will let anyone in, provided you can fake... by popcorncowboy on Saturday August 05, 2017 @02:54PM (#14937258)
Haha, wow, you really missed the crux of my reply.
Re:Airport lounges will let anyone in, provided you can fake... by chrismcb on Saturday August 05, 2017 @04:55PM (#14937847)
What exactly is the crux of your reply? Are you trying to claim it is a purely monetary relationship? As soon as the cost for the security controls is lower than the cost of the theft then it will be implemented? I don't think it is that simple as their is an intangible as well, part of the "niceness"of the op. If I had to choose between a place with high theft deterrent and one with low, I would choose the one with low. Yeah in the end it all comes down to profit. But being nice to your customers also had an impact on your bottom line.
Re:Airport lounges will let anyone in, provided you can fake... by popcorncowboy on Sunday August 06, 2017 @05:07AM (#14940538)
> Are you trying to claim it is a purely monetary relationship?

No. "Cost" in behavioral economics is never purely monetary. It includes social, emotional, cultural, personal, moral and relational calculus too. The entire spectrum of the human condition really.

> As soon as the cost for the security controls is lower than the cost of the theft then it will be implemented?

Yes, but where "cost" includes the aforementioned factors. Consider it by way of example, you standing in front of the Airport Lounge, QR code cracker hand, asking yourself one critical question: "Is it worth it?" (what will my friends think, what if I don't and have to spend the next 4 hours in a plastic airport seat, I'm tired, what if I get caught, but oh man I could snapchat me in a biz class lounge and Sarah would see, etc etc).

Store owners and businesses in general have to ask the same question. "Is it worth it?"

> Yeah in the end it all comes down to profit.

Does it? Many of the comments here are people incensed by some version of _moral_ or _social-code_ violations by the QR cracker. Their sentiment and that of any prosecuting 'store owner' is not to do with the marginal "cost ($)" of his offense (which is likely close to zero, and arguably net positive).

> But being nice to your customers also had an impact on your bottom line.

I agree with you.

> What exactly is the crux of your reply?

Humans intuitively see correlation as causation and jump to apply moral judgements leading to (often devastating) social consequences to the wrong people because of it. The line of reasoning that "we're all nice, it's just a handful of bad people out there who are the problem" is the problem.

Re:Airport lounges will let anyone in, provided you can fake... by mikeash on Saturday August 05, 2017 @03:16PM (#14937372)
It's very difficult to pay attention to anything else when you basically accuse me of being racist in the middle of the comment.
Re:Airport lounges will let anyone in, provided you can fake... by popcorncowboy on Sunday August 06, 2017 @05:07AM (#14940536)
mikeash - for the record, I am not calling you a racist, don't think you are a racist and in no way am implying you are one. It is a pity you drew that line back to yourself as that was not my intent.

I thank you for including the word "basically" in your assertion, as it infers you understand that it does require a leap to connect the dots in my reply to an accusation of racism.

To be clear, '</valleygirlvoice>' was specifically included to define that speech as being an example of someone-else confusing correlation with causation and (this is the critical bit) the ease with which we (all) jump from there to moral judgements and social consequences.

Re:Airport lounges will let anyone in, provided you can fake... by eunoia on Friday August 04, 2017 @03:54PM (#14931608)
Oh the poor airlines! They would never, ever gratuitously exploit their passengers. How could these mean awful people take advantage of them like this?

It's pretty hard to root for a corporation when it's smart individual vs faceless multinational ineptitude. Human nature perhaps?

Re:Airport lounges will let anyone in, provided you can fake... by mseebach on Friday August 04, 2017 @04:06PM (#14931745)
By that logic, shoplifting from sufficiently large stores is ok. Not stealing bread to feed your family, just randomly grabbing stuff because you feel like it (and it isn't locked down).
Re:Airport lounges will let anyone in, provided you can fake... by watty on Friday August 04, 2017 @04:47PM (#14932106)
Apparently it's ok to create fake barcodes.
Re:Airport lounges will let anyone in, provided you can fake... by eunoia on Friday August 04, 2017 @04:15PM (#14931838)
Stealing physical items for fun != exploiting ineptitude to have a less terrible layover. It's also harder to even begin to measure the economic cost.

I think it's more akin to buying terrible cheap seats to a show and moving into a better yet unoccupied section once it starts.

The internet has always seemed to have a lot more moralists than the real world.

Re:Airport lounges will let anyone in, provided you can fake... by mwfunk on Friday August 04, 2017 @05:07PM (#14932274)
Actually no, the internet is just where many people realize that the things they think are OK sometimes aren't, because on the internet they're telling the whole world what sketchy stuff they do, instead of just their buddies that they do sketchy stuff with. You're much more likely to interact with people you wouldn't normally cross paths with on the internet, and the audience is much wider.

Tangentially, I really hate buying good seats and getting to a show to find some cheapo sitting in them because they're proactively hoping no one shows up. If you want good seats, buy good seats. Lots of people in the real world feel that way, and respecting other people's wishes (even, and especially, when you think it's unreasonable and can't relate) is a basic part of being a grownup.

Re:Airport lounges will let anyone in, provided you can fake... by eunoia on Friday August 04, 2017 @06:05PM (#14932737)
Your first point is spot on and interesting. I would also argue that we all have different flaws and it's easy to judge others for theirs while pretending ours are somehow less bad. For example the most judgemental people I know are also some of the "worst" people I know. Their morality matrix is just incredibly biased towards looking favorably upon themselves vs others.

As for the tangent, if you can't be bothered to show up for a show by the time it starts you can at least be bothered to say "Hey, these are my seats." I've been on both sides of that interaction many times. Every time it's been resolved immediately and amicably.

That might be too much human interaction though. Maybe we should get further away from humans talking to each other and invent another app to solve this "problem".

Re:Airport lounges will let anyone in, provided you can fake... by hueving on Friday August 04, 2017 @07:14PM (#14933151)
It sounds like you have no problem using services/goods you didn't pay for. I don't think you're going to have any productive discussion trying to convince other people that your moral position is correct because it directly results in a terrible society that cannot operate on trust at all.
Re:Airport lounges will let anyone in, provided you can fake... by eunoia on Friday August 04, 2017 @08:05PM (#14933395)
You've been casting a lot of stones in the comments.

If you've really never torrented a song, used a friend's Netflix account, snuck onto the floor of a concert, took an extra travel bottle of shampoo from a hotel maid's cart etc. etc. etc... Then I truly commend you. The world needs more people like you.

But I highly doubt that's the case. Meanwhile I'll be the monster over here creating a terrible society by using some free wifi and a place to charge my laptop to get some work done halfway through a long trip.

Re:Airport lounges will let anyone in, provided you can fake... by hueving on Saturday August 05, 2017 @01:25AM (#14934361)
>But I highly doubt that's the case.

No, I stopped doing that kind of stuff around my second year of college after some economics and ethics classes. I objectively evaluated these types of actions and realized in nearly every case where I hand-waved away with "nobody will notice because its trivial", I was basically justifying theft of small amounts of resources by claiming it was negligible.

>Meanwhile I'll be the monster over here creating a terrible society by using some free wifi and a place to charge my laptop to get some work done halfway through a long trip.

I can tell you're trying to be sarcastic, but when people behave like you it does make it miserable for everyone else. You increase the costs for honest people or at a minimum deprive them of some of the value they would have received if you weren't there (more seating, shorter bathroom queues, more available outlets, less congested wifi).

Also, in most clubs it's not free wifi, it's wifi provided for people legitimately allowed access to the club. You are just stealing it.

Re:Airport lounges will let anyone in, provided you can fake... by mikeash on Friday August 04, 2017 @04:41PM (#14932058)
Maybe, as long as you don't touch any of the food or drink. How likely is that, though?
Re:Airport lounges will let anyone in, provided you can fake... by eunoia on Friday August 04, 2017 @04:58PM (#14932189)
Did you know most airlines have absolutely awful inventory control over the supplies on their planes? If you make friends with a flight attendant they usually have the leeway to bring you just about anything you want for free. Is that stealing too?

Pro tip: Bring candy or snacks for flight attendants on long flights, they appreciate it and may even reciprocate in kind.

Re:Airport lounges will let anyone in, provided you can fake... by mikeash on Friday August 04, 2017 @05:15PM (#14932340)
It's not stealing when they give it to you willingly without any fraud.

Are you that fuzzy on the concept of "stealing" that you don't see the difference here?

Re:Airport lounges will let anyone in, provided you can fake... by somabc on Friday August 04, 2017 @06:40PM (#14932967)
Airlines have fired staff for eating a sandwich or drinking a coke taken from the plane e en if it was going to be thrown away. It's the same concept as most food outlets. They have no discretion yo give away free things to people who give them candy.
Re:Airport lounges will let anyone in, provided you can fake... by eunoia on Friday August 04, 2017 @07:08PM (#14933113)
Anecdotally, it's rampant. To the point where crews will take bags(!) of booze and certain snacks off planes for layovers / gifts etc.

And I didn't mean you should bring candy for the FA's solely in expectation of getting something in return. You should really do it because they work surprisingly stressful jobs with absurd hours. They often have to deal with the worst kind of people and could really use a metaphorical hug every once in a while.

Source: Dated a FA for a long time. Know many others.

Re:Airport lounges will let anyone in, provided you can fake... by eunoia on Friday August 04, 2017 @06:10PM (#14932784)
Actually it is stealing, you're just not the one doing it.
Re:Airport lounges will let anyone in, provided you can fake... by mikeash on Friday August 04, 2017 @06:32PM (#14932920)
I bet the airlines allow flight attendants to use their discretion here.

Forging a ticket is just not equivalent to asking nicely if you can have something.

Re:Airport lounges will let anyone in, provided you can fake... by BeetleB on Friday August 04, 2017 @04:43PM (#14932072)
>I think it's more akin to buying terrible cheap seats to a show and moving into a better yet unoccupied section once it starts.

And GP thinks otherwise.

You are merely stating an opinion.

Re:Airport lounges will let anyone in, provided you can fake... by arnarbi on Friday August 04, 2017 @04:17PM (#14931854)
Opposing stealing is now rooting for corporations?
Re:Airport lounges will let anyone in, provided you can fake... by eunoia on Friday August 04, 2017 @04:24PM (#14931912)
Many/most forms of hacking could be construed as stealing if you squint hard enough. What was this community founded around again?

Do you think "disruption" is a peaceful, happy, 100% beneficial process for everyone involved? Is Uber stealing by taking business from incumbents that play by a different (regulated) rulebook?

Re:Airport lounges will let anyone in, provided you can fake... by kinkrtyavimoodh on Friday August 04, 2017 @04:33PM (#14932006)
This 'community' (to the extent that all the users of this site can be clubbed into one) was definitely not formed on any founding principle which would legitimize theft.

Not that sneaking into airport lounges is some huge theft, but acting like it's completely okay isn't cool either.

Re:Airport lounges will let anyone in, provided you can fake... by eunoia on Friday August 04, 2017 @04:54PM (#14932166)
I agree, it's not 100% okay. I wouldn't feel bad doing it though. I also wouldn't do it in a situation where my presence hurts another paying customer (i.e. full lounge).

My personal ethics apply to how my actions impact other living things. I don't lose sleep worrying if I've wronged an entity created solely for the purpose of maximizing shareholder value.

I'm honestly surprised how many people don't agree with that. To each their own I suppose.

Edit: You're totally right about the futility of trying to shove all of us into any one descriptive bucket though. That was a mistake.

Re:Airport lounges will let anyone in, provided you can fake... by hueving on Friday August 04, 2017 @07:17PM (#14933163)
>I'm honestly surprised how many people don't agree with that. To each their own I suppose.

You're advocating for stealing from businesses. When enough people like you do this, it results in either higher prices for honest people or the loss of a service entirely.

Re:Airport lounges will let anyone in, provided you can fake... by imron on Friday August 04, 2017 @10:56PM (#14933985)
> I'm honestly surprised how many people don't agree with that.

At some level, most people think everyone else thinks and behaves similarly to them, and are surprised when they find out that they don't. That's why projection is a thing.

Re:Airport lounges will let anyone in, provided you can fake... by arnarbi on Sunday August 06, 2017 @02:48PM (#14942761)
I'm curious, what do you think about public services? E.g. is it ok to ride the bus without paying if you get away with it? What if it only takes a a fake QR code to do so?

Because in the end, even big evil mega-corporations have human stakeholders. For some of them that's their livelyhood. Not everyone is in it out of greed.

Re:Airport lounges will let anyone in, provided you can fake... by CodeMage on Friday August 04, 2017 @04:39PM (#14932051)
I really wish people would stop slapping the "theft" label on things that aren't. It's intellectual laziness that just cheapens the discussion.

Sitting in an airport lounge you shouldn't have access to isn't stealing. Piracy isn't stealing. Using ad blockers on a site that supports itself through ads isn't stealing.

Re:Airport lounges will let anyone in, provided you can fake... by SilasX on Friday August 04, 2017 @05:44PM (#14932575)
They call it "theft" for the defensible reason that it maps to traditional theft in (what they regard as) the most important dimensions. Your disagreement with the validity of the (IMHO, obvious) mapping doesn't make it lazy.

Theft is wrong for well-known reasons. Most of those same reasons apply to these situations.

Re:Airport lounges will let anyone in, provided you can fake... by eh78ssxv2f on Friday August 04, 2017 @06:28PM (#14932892)
> Sitting in an airport lounge you shouldn't have access to isn't stealing.

What do you think of random people occupying your house while you are gone out to work or grocery store? Is that okay too?

> Using ad blockers on a site that supports itself through ads isn't stealing.

I agree with this because browsers are "user agents" not "website agents".

Re:Airport lounges will let anyone in, provided you can fake... by hueving on Friday August 04, 2017 @07:19PM (#14933185)
Airport lounges offer all kinds of drinks and snacks that I'm certain this person is not ignoring. They are also using the facilities and causing more congestion, making it less pleasant for the paying customers, so they are stealing the value that the lounge offers from other customers.
Re:Airport lounges will let anyone in, provided you can fake... by KGIII on Friday August 04, 2017 @05:16PM (#14932349)
It may be classed as theft of services.

If curious, consult a qualified legal representative in the appropriate jurisdiction.

Re:Airport lounges will let anyone in, provided you can fake... by usertrjx on Friday August 04, 2017 @04:48PM (#14932115)
What about the food and drink that are offered in these lounges?
Re:Airport lounges will let anyone in, provided you can fake... by BeetleB on Friday August 04, 2017 @04:44PM (#14932083)
You may have a point.

So opposing trespass is now rooting for corporations?

Re:Airport lounges will let anyone in, provided you can fake... by CodeMage on Friday August 04, 2017 @04:49PM (#14932133)
Well, @eunoia seems to think so. I happen to disagree. But at least now we can discuss it without the emotional baggage of calling someone a thief. For whatever reason, people get worked up over that label more than "trespasser" or "squatter" or "moocher" ;)
Re:Airport lounges will let anyone in, provided you can fake... by zo1 on Friday August 04, 2017 @06:15PM (#14932817)
I'm afraid we all might be wrong/right on some level. I.e.:

1. Getting into an area you don't have access to: Trespassing.

2. Tricking the security they have in place: Fraud.

3. Taking snacks from the lounge-area: Stealing.

Re:Airport lounges will let anyone in, provided you can fake... by arnarbi on Sunday August 06, 2017 @02:53PM (#14942786)
> Sitting in an airport lounge you shouldn't have access to isn't stealing

You are consuming a resource that's finite. You are literally taking value from the provider without asking or paying for it. What do you propose we call this?

Re:Airport lounges will let anyone in, provided you can fake... by pharrington on Friday August 04, 2017 @06:06PM (#14932745)
Physical space in a building is a limited resource. "IP" isn't.
Re:Airport lounges will let anyone in, provided you can fake... by bdcravens on Friday August 04, 2017 @04:00PM (#14931676)
I don't think it's rooting for a corporation, but a simple matter of ethics.
Re:Airport lounges will let anyone in, provided you can fake... by finnn on Friday August 04, 2017 @04:14PM (#14931828)
They have no ethics while exploiting you for as much money as possible, so you should be nice to them and treat them as you would another human?

Edit: sorry, this was kind of a flippant remark that I made without thinking a lot.

Re:Airport lounges will let anyone in, provided you can fake... by opportune on Friday August 04, 2017 @04:28PM (#14931956)
That's a vast exaggeration of things. "Exploiting" my ass. You know the reason why airlines are so shitty? Because people only buy the cheapest tickets to their destination. I'm guilty of this myself. The end result is a race to the bottom .

And yes, when the man refused to get off the United plane, he should not have been beaten. Big deal, hundreds of millions of people fly every year. The fact that that happened sucks, but the reality is that 99.99% of people will at worst just deal with incompetent customer service during a cancelled or heavily delayed flight. That doesn't give you justification to steal from the airliner.

This is a discussion I feel you would have with a teenager.

Re:Airport lounges will let anyone in, provided you can fake... by ImSkeptical on Friday August 04, 2017 @05:11PM (#14932312)
Don't they transport you and your luggage safely through the air at high speed for a sum of money that you agreed to pay? Where is exploitation coming from?
Re:Airport lounges will let anyone in, provided you can fake... by zo1 on Friday August 04, 2017 @06:24PM (#14932865)
Capitalism, apparently.

Though, to be a bit more generous, I'd interpret that people hate airlines without really having a conscious reason, so they make something up that's visible and easy to be upset about. E.g. Cost of flying, leg-room, crappy service, "run by evil corporation". I'd posit that they somehow see something wrong with it, yet can't pin-point what that is. In my view, somehow they realize that a government-enabled and enforced monopoly makes the whole thing unfair. And if only we had no intervention and prevention of competition, they'd finally see "nice" airlines. But until they actively "see" that, they'll always think that it's the government that's preventing the really nice peachy happy people from running an airline that they'd enjoy using.

Re:Airport lounges will let anyone in, provided you can fake... by bdcravens on Friday August 04, 2017 @05:52PM (#14932643)
Yes, I should be honest.
Re:Airport lounges will let anyone in, provided you can fake... by another-dave on Friday August 04, 2017 @05:17PM (#14932357)
"Hotel breakfast buffets will let anyone in, provided you can say a room number."
Re:Airport lounges will let anyone in, provided you can fake... by BenjiWiebe on Friday August 04, 2017 @10:57PM (#14933988)
The people who bring your food at Sonic do not make sure you've activated (removed) the coupon you told them you had. So you could use the coupon over and over...
Re:Airport lounges will let anyone in, provided you can fake... by mnutt on Friday August 04, 2017 @06:45PM (#14932988)
I think the HN-framed takeaway here is that the developer building the system could have used a timestamp + HMAC and prevented the issue, but chose not to for whatever reason. Maybe they wanted to be able to generate barcodes from the app itself while offline, maybe they were getting the data from the server anyway and just didn't know any better.
Re:Airport lounges will let anyone in, provided you can fake... by BenjiWiebe on Friday August 04, 2017 @10:58PM (#14933991)
Perhaps the developer saw an opportunity to make an app to distribute to friends to let them into the lounges.
Re:Airport lounges will let anyone in, provided you can fake... by catshirt on Friday August 04, 2017 @04:19PM (#14931880)
the takeaway is that you can do it, as the title suggests :)