News for hackers. Stuff that matters.

A comment on Post a boarding pass on Facebook, get your account stolen. Parent comment

Re:Post a boarding pass on Facebook, get your account stolen by hoschicz on Saturday September 23, 2017 @07:33AM (#15319281)
This image contains the following info: (long line of gibberish, the boarding pass ID)

User: srsly fb? OK

[ Parent | on HN ]
Re:Post a boarding pass on Facebook, get your account stolen by atomwaffel on Saturday September 23, 2017 @10:12AM (#15319808)
Detecting if the embedded data is from a boarding pass is not difficult, nor is parsing it[0] and displaying it in a human-friendly format to "prove" that it's probably sensitive ("The boarding pass you posted belongs to John Smith and contains their American Airlines frequent flyer number. Are you sure you want to share this?")

[0] https://www.iata.org/whatwedo/stb/Documents/BCBP-Implementat...

[ Parent | on HN ]
Re:Post a boarding pass on Facebook, get your account stolen by _asummers on Sunday September 24, 2017 @09:36AM (#15324634)
Could also very easily link to documents explaining why that could be bad for the user.
[ Parent | on HN ]