Go Back  FlyerTalk Forums > Travel&Dining > Travel News
Reload this Page >

Student Allegedly Hacks Apple Passbook for Free Flights

Community
Wiki Posts
Search

Student Allegedly Hacks Apple Passbook for Free Flights

Thread Tools
 
Search this Thread
 
Old Apr 7, 2014, 7:37 pm
  #16  
 
Join Date: Nov 2002
Location: New York City
Posts: 4,002
The article mentions at the end that you would be committing fraud and theft if you did this. Just as you could potentially steal someone's credit card or identity or otherwise commit fraud to get a ticket, you might be able to manage this method too, but you are still criminally liable if you do.

So big deal that you have a slightly different fraudulent option, with a somewhat less than 100% chance of working.
WillTravel is offline  
Old Apr 7, 2014, 8:39 pm
  #17  
 
Join Date: Nov 2013
Posts: 4,374
Originally Posted by WillTravel
The article mentions at the end that you would be committing fraud and theft if you did this. Just as you could potentially steal someone's credit card or identity or otherwise commit fraud to get a ticket, you might be able to manage this method too, but you are still criminally liable if you do.
Well, someone must be the victim of credit card or ID theft. No one is necessarily the victim of a fake boarding pass.
davie355 is offline  
Old Apr 7, 2014, 8:52 pm
  #18  
 
Join Date: Feb 2013
Location: LA/NY/CHI
Programs: AA EXP, AS 100K, Hyatt Globalist, Marriott Plat
Posts: 1,876
Originally Posted by davie355
Well, someone must be the victim of credit card or ID theft. No one is necessarily the victim of a fake boarding pass.
Well, wouldn't the airline be? These days we tend to think that just because they are big companies, their loses won't matter
jona970318 is offline  
Old Apr 7, 2014, 9:08 pm
  #19  
 
Join Date: Aug 2011
Location: ECP
Programs: DL Diamond
Posts: 1,658
Originally Posted by jona970318
Well, wouldn't the airline be? These days we tend to think that just because they are big companies, their loses won't matter
As opposed to big banks like Chase, Amex, BofA, etc who are the biggest victims of credit card fraud... Both pretty large and faceless.

I think the perception of less harm being inflicted is because you can only occupy an otherwise unsold seat--else the rightful owner would also have a boarding pass for the seat and they'd check the manifest and kick you back to Y, if not off the plane entirely for attempting to defraud them.

This doesn't make the behavior right by any means [and I'd never do it], but if you'd never pay for a business class seat (so no loss in revenue), the seat is otherwise unoccupied, and you just made somebody's day in Y with an empty neighbor, what is the airline out? One extra J class meal--which was apparently catered, anyway--and a little champagne? I agree, they are, but that certainly doesn't rise to the level of harm caused by credit card/identify thieves IMO.
DC777Fan is offline  
Old Apr 21, 2014, 6:39 am
  #20  
 
Join Date: Jul 2013
Posts: 16
Talking

Originally Posted by Snacky
Funny story about a clever "whiz-kid", who's claiming that some simple hacking is all it takes to get free flights, involving boarding pass generation on his iPhone, and a small social engineering effort.

http://www.tomsguide.com/us/iphone-h...ews-18562.html


Snacky

i think there are still a lot of gaps and bugs and the booking systems don't work perfectly. so a lot of stories don't even get published
Sabrina20 is offline  
Old May 30, 2014, 4:23 am
  #21  
 
Join Date: Aug 2004
Location: OSL/IAH/ZRH (time, not preference)
Programs: UA1K, LH GM, AA EXP->GM
Posts: 38,265
Originally Posted by Sabrina20
i think there are still a lot of gaps and bugs and the booking systems don't work perfectly. so a lot of stories don't even get published
I think that a lot more 'stories' get published than actual exploits exist which are remotely workable.

As it is extremely easy to claim that there are "dark figures in the thousands" or "China has entire teams that work on exploits" or "the cartels spend millions.." without providing any shred of links or credible data.

And if you claim a grey area to exist, it is still considered a "worthwhile report" by many despite the absence of any evidence.
weero is offline  
Old May 30, 2014, 11:55 pm
  #22  
 
Join Date: Nov 2013
Posts: 4,374
The slides are online (thanks angatol for the link - spoiler alert, sort of.)
davie355 is offline  
Old May 31, 2014, 1:03 am
  #23  
 
Join Date: Dec 2009
Location: WAS
Posts: 3,010
Originally Posted by davie355
The slides are online (thanks angatol for the link - spoiler alert, sort of.)
Thanks for the link. Something I've been trying to find out lately is if US airlines have implemented signatures for boarding passes--mobile or otherwise. If so, then the approach outlined here shouldn't work. If not, then it would definitely get you past security with no problem.
cmn.jcs is offline  
Old May 31, 2014, 5:28 am
  #24  
 
Join Date: Jan 2013
Location: MUC/SFO/GDN
Posts: 109
Guys, help me understand this - he has a way to forge a ticket. OK, this can be done easily enough, even without the Passbook. But how he would like to go through verification at the gate where, I assume, PNRs from boarding passes are matched to the airine database?
Tsun is offline  
Old May 31, 2014, 6:44 am
  #25  
 
Join Date: Feb 2010
Location: US
Programs: (PM)AA SPG (Marriott), Hilton
Posts: 1,040
Originally Posted by fL1Pm0d3
Hopefully this does not set back the option of using the phone as a boarding pass.
+1. How is the TSA going to react to this at the checkpoint? If the stated claims are valid, this may not get you on the aircraft, but could get someone not flying through to the sterile side. If they get through with nothing harmful, who cares, but TSA isn't thinking that way these days. If the claims don't pan out, there could still be a bad reaction to the possibility of this.

Acceptance of mobile boarding passes could be suspended until they have terminals that query back to the airline database in real time or an offline means of validating the pass at the checkpoint. If they reject mobile passes, those wanting to fake it will have to start using fake paper boarding passes again instead of the high-tech forgeries.
reft is offline  
Old May 31, 2014, 12:47 pm
  #26  
FlyerTalk Evangelist
 
Join Date: Jan 2006
Posts: 11,439
Originally Posted by Tsun
Guys, help me understand this - he has a way to forge a ticket. OK, this can be done easily enough, even without the Passbook. But how he would like to go through verification at the gate where, I assume, PNRs from boarding passes are matched to the airine database?
He couldn't.
planemechanic is offline  
Old Jun 1, 2014, 5:42 pm
  #27  
 
Join Date: Jan 2013
Location: 대한민국 (South Korea) - ex-PVG (上海)
Programs: UA MM / LT Gold (LT UC), DL SM, AA PLT (AC), OZ, KE; GE and Korean SES (like GE); Marriott Gold
Posts: 1,995
No one is necessarily the victim of a fake boarding pass.
How about the elite missing an upgrade?
relangford is offline  


Contact Us - Manage Preferences - Archive - Advertising - Cookie Policy - Privacy Statement - Terms of Service -

This site is owned, operated, and maintained by MH Sub I, LLC dba Internet Brands. Copyright © 2024 MH Sub I, LLC dba Internet Brands. All rights reserved. Designated trademarks are the property of their respective owners.