Post a boarding pass on Facebook, get your account stolen

Re:Post a boarding pass on Facebook, get your account stolen by function_seven on Saturday September 23, 2017 @04:22AM (#15318779)

A nice feature would be for them to decode and display the barcode info when you're uploading.

Something like “This image contains the following info: <Sensitive info you didn't mean to share>. Would you like us to blur that out? (Y/n)”

[ Parent | on HN ]

Re:Post a boarding pass on Facebook, get your account stolen by hoschicz on Saturday September 23, 2017 @07:33AM (#15319281)

This image contains the following info: (long line of gibberish, the boarding pass ID)

User: srsly fb? OK

[ Parent | on HN ]

Re:Post a boarding pass on Facebook, get your account stolen by atomwaffel on Saturday September 23, 2017 @10:12AM (#15319808)

Detecting if the embedded data is from a boarding pass is not difficult, nor is parsing it[0] and displaying it in a human-friendly format to "prove" that it's probably sensitive ("The boarding pass you posted belongs to John Smith and contains their American Airlines frequent flyer number. Are you sure you want to share this?")

[0] https://www.iata.org/whatwedo/stb/Documents/BCBP-Implementat...

[ Parent | on HN ]

Re:Post a boarding pass on Facebook, get your account stolen by _asummers on Sunday September 24, 2017 @09:36AM (#15324634)

Could also very easily link to documents explaining why that could be bad for the user.

[ Parent | on HN ]