British Airways: Suspect code that hacked fliers ‘found’

Re:British Airways: Suspect code that hacked fliers ‘found’ by gaius on Tuesday September 11, 2018 @06:05AM (#17958387)

Here’s the thing tho’, BA’s website exists solely to provide information on and sell their own services. Why is there third-party anything on it in the first place? Fix that and you’ll fix everything, well almost.

Disclaimer: worked on ba.com in the ‘90’s

[ Parent | on HN ]

Re:British Airways: Suspect code that hacked fliers ‘found’ by robjan on Tuesday September 11, 2018 @06:27AM (#17958454)

It's not a third party script. It's a copy of modernizr hosted on their own server. Someone has either hacked their CMS (Teamsite) or it's an insider.

[ Parent | on HN ]

Re:British Airways: Suspect code that hacked fliers ‘found’ by darkport on Tuesday September 11, 2018 @05:20PM (#17963469)

How do you know they use TeamSite? A similar hack occurred against TicketMaster. I wonder if they use TeamSite as well. Maybe a 0day?

[ Parent | on HN ]

Re:British Airways: Suspect code that hacked fliers ‘found’ by ID1452319 on Tuesday September 11, 2018 @09:47AM (#17959630)

How can you tell it is Teamsite?

[ Parent | on HN ]

Re:British Airways: Suspect code that hacked fliers ‘found’ by PunchTornado on Tuesday September 11, 2018 @08:34AM (#17959106)

I love it how big companies still use legacy CMS like Teamsite thinking it is too expensive to move to something modern.

[ Parent | on HN ]

Re:British Airways: Suspect code that hacked fliers ‘found’ by ams6110 on Tuesday September 11, 2018 @08:49AM (#17959217)

If you have a large customer-facing website retail website, redoing the whole thing in something "modern" (which will only be "modern" for a year or so) is actually very expensive. Have you ever migrated a non-trivial website from one platform to another?

[ Parent | on HN ]

Re:British Airways: Suspect code that hacked fliers ‘found’ by gaius on Tuesday September 11, 2018 @09:54AM (#17959690)

Uhh, yeah, it wasn’t such a bad choice 20 years ago. I had no idea they were still using it lol. Interwoven we called it back then.

[ Parent | on HN ]

Re:British Airways: Suspect code that hacked fliers ‘found’ by invalidusernam3 on Tuesday September 11, 2018 @06:20AM (#17958435)

I would guess third party payment gateway and tracking/analytics. It's doubtful that BA would undertake the task of creating bespoke systems for either of those

[ Parent | on HN ]