News for hackers. Stuff that matters.
Re:Booking.com hackers increase attacks on customers by smueller1234 on Friday December 01, 2023 @02:00PM (#38490731)
Nice catch! That was indeed something we found about a decade ago when I worked there. I don't recall what the security folks tried to do about it.

Generally, though, more and more hotels shifted from faxes to API integrations via channel managers. But that's a whole extra step in sophistication.

Re:Booking.com hackers increase attacks on customers by juliogreff on Saturday December 02, 2023 @04:03AM (#38497195)
I worked on some of these systems as well. Credit card details haven't been sent by emails for many many years, and I believe the last fax Booking ever sent was somewhere in 2018 or 2019, the whole fax system was decommissioned. By the time I left I believe they were still showing CC details to hotels via the extranet or an app though. A virtual CC thingy exists, but like someone said upthread, hotels are very set in their ways and often behind the times.
Re:Booking.com hackers increase attacks on customers by smueller1234 on Saturday December 02, 2023 @09:59AM (#38499031)
Oh hilarious! The business logic for getting optimal routing for faxes was... quirky. Picking the right source country/line/carrier to get the best quality line while getting the lowest cost and balancing capacity. In the old days all held in a complex queue in a MySQL db (sigh). I recall getting paged out of bed a number of times as an escalation to get it all working again after we hit yet another lock contention issue in MySQL.

Good times!