{"id":4973,"date":"2015-10-15T13:23:59","date_gmt":"2015-10-15T13:23:59","guid":{"rendered":"http:\/\/acendas.sitesbysix.com\/?p=4973"},"modified":"2015-10-15T13:23:59","modified_gmt":"2015-10-15T13:23:59","slug":"dont-just-toss-your-old-boarding-pass-heres-why","status":"publish","type":"post","link":"https:\/\/acendas.com\/corporate\/dont-just-toss-your-old-boarding-pass-heres-why\/","title":{"rendered":"Don’t just toss your old boarding pass, here’s why"},"content":{"rendered":"

Original post KrebsOnSecurity<\/a><\/p>\n

The next time you\u2019re thinking of throwing away a used boarding pass with a barcode on it, consider tossing the boarding pass into a document shredder instead. Two-dimensional barcodes and QR codes can hold a great deal of information, and the codes printed on airline boarding passes may allow someone to discover more about you, your future travel plans, and your frequent flyer account.<\/p>\n

Earlier this year, I heard from a longtime KrebsOnSecurity reader named Cory who said he began to get curious about the data stored inside a boarding pass barcode after a friend put a picture of his boarding pass up on Facebook. Cory took a screen shot of the boarding pass, enlarged it, and quickly found a site online that could read the data.<\/p>\n

\"An<\/a>

An older Delta boarding pass with a bar code that does not include a frequent flyer number. Source: IATA.<\/p><\/div>\n

\u201cI found a website that could decode the data and instantly had lots of info about his trip,\u201d Cory said, showing this author step-by-step exactly how he was able to find this information.<\/p>\n

\u201cBesides his name, frequent flyer number and other [personally identifiable information], I was able to get his record locator (a.k.a. \u201crecord key\u201d) for the Lufthansa flight he was taking that day,\u201d Cory said. \u201cI then proceeded to Lufthansa\u2019s website and using his last name (which was encoded in the barcode) and the record locator was able to get access to his entire account. Not only could I see this one flight, but I could see ANY future flights that were booked to his frequent flyer number from the Star Alliance.\u201d<\/p>\n

The access granted by Lufthansa\u2019s site also included his friend\u2019s phone number, and the name of the person who booked the flight. More worrisome, Cory now had the ability to view all future flights tied to that frequent flyer account, change seats for the ticketed passengers, and even cancel any future flights.<\/p>\n

The information contained in the boarding pass could make it easier for an attacker to reset the PIN number used to secure his friend\u2019s Star Alliance frequent flyer account. For example, that information gets you past the early process of resetting a Star Alliance account PIN at United Airline\u2019s \u201cforgot PIN\u201d Web site.<\/p>\n

After that, the site asks for the answer to a pre-selected secret question. The question in the case of Corey\u2019s friend was \u201cWhat is your Mother\u2019s maiden name?\u201d That information can often be gleaned by merely perusing someone\u2019s social networking pages (e.g., does your aunt or uncle on your mom\u2019s side have your mother\u2019s maiden name as their last name? If so, are they friends with you on Facebook?)<\/p>\n

\"The<\/a>

The readout from the barcode on Cory\u2019s friend\u2019s boarding pass (redacted).<\/p><\/div>\n

United Airlines seems to treat its customers\u2019 frequent flyer numbers as secret access codes. For example, if you\u2019re looking for your United Mileage Plus number, and you don\u2019t have the original document or member card they mailed to you, good luck finding this information in your email correspondence with the company. When United does include this code in correspondence, all but the last three characters are replaced with asterisks. The same is true with United\u2019s boarding passes. However, the full Mileage Plus number is available if you take the time to decode the barcode on a boarding pass.<\/p>\n

Interested in learning what\u2019s in your boarding pass barcode? Take a picture of the barcode with your phone, and upload it to this site. This blog on the same topic from several years back includes some helpful hints on how to decode the various information fields that get dumped by the barcode reader.<\/p>\n

Finally, the standards for the boarding pass barcodes are widely available and have been for years. Check out this document (PDF) from the International Air Transport Association (IATA) for more on how the barcode standards work and have been implemented in various forms.<\/p>\n","protected":false},"excerpt":{"rendered":"

Original post KrebsOnSecurity The next time you\u2019re thinking of throwing away a used boarding pass with a barcode on it, consider tossing the boarding pass into a document shredder instead. Two-dimensional barcodes and QR codes can hold a great deal of information, and the codes printed on airline boarding passes […]<\/p>\n","protected":false},"author":5,"featured_media":4945,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[29],"tags":[31,101,94,34,76],"class_list":["post-4973","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-articles","tag-blog","tag-boarding-pass","tag-flights","tag-october","tag-security"],"yoast_head":"\nDon't just toss your old boarding pass, here's why - Corporate<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/acendas.com\/corporate\/dont-just-toss-your-old-boarding-pass-heres-why\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Don't just toss your old boarding pass, here's why - Corporate\" \/>\n<meta property=\"og:description\" content=\"Original post KrebsOnSecurity The next time you\u2019re thinking of throwing away a used boarding pass with a barcode on it, consider tossing the boarding pass into a document shredder instead. Two-dimensional barcodes and QR codes can hold a great deal of information, and the codes printed on airline boarding passes […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/acendas.com\/corporate\/dont-just-toss-your-old-boarding-pass-heres-why\/\" \/>\n<meta property=\"og:site_name\" content=\"Corporate\" \/>\n<meta property=\"article:published_time\" content=\"2015-10-15T13:23:59+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/acendas.com\/corporate\/wp-content\/uploads\/sites\/3\/2015\/08\/7970924_s.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"450\" \/>\n\t<meta property=\"og:image:height\" content=\"299\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/acendas.com\/corporate\/dont-just-toss-your-old-boarding-pass-heres-why\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/acendas.com\/corporate\/dont-just-toss-your-old-boarding-pass-heres-why\/\"},\"author\":{\"name\":\"\",\"@id\":\"\"},\"headline\":\"Don’t just toss your old boarding pass, here’s why\",\"datePublished\":\"2015-10-15T13:23:59+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/acendas.com\/corporate\/dont-just-toss-your-old-boarding-pass-heres-why\/\"},\"wordCount\":696,\"publisher\":{\"@id\":\"https:\/\/acendas.com\/corporate\/#organization\"},\"image\":{\"@id\":\"https:\/\/acendas.com\/corporate\/dont-just-toss-your-old-boarding-pass-heres-why\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/acendas.com\/corporate\/wp-content\/uploads\/sites\/3\/2015\/08\/7970924_s.jpg\",\"keywords\":[\"blog\",\"boarding pass\",\"flights\",\"october\",\"Security\"],\"articleSection\":[\"Articles\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/acendas.com\/corporate\/dont-just-toss-your-old-boarding-pass-heres-why\/\",\"url\":\"https:\/\/acendas.com\/corporate\/dont-just-toss-your-old-boarding-pass-heres-why\/\",\"name\":\"Don't just toss your old boarding pass, here's why - Corporate\",\"isPartOf\":{\"@id\":\"https:\/\/acendas.com\/corporate\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/acendas.com\/corporate\/dont-just-toss-your-old-boarding-pass-heres-why\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/acendas.com\/corporate\/dont-just-toss-your-old-boarding-pass-heres-why\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/acendas.com\/corporate\/wp-content\/uploads\/sites\/3\/2015\/08\/7970924_s.jpg\",\"datePublished\":\"2015-10-15T13:23:59+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/acendas.com\/corporate\/dont-just-toss-your-old-boarding-pass-heres-why\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/acendas.com\/corporate\/dont-just-toss-your-old-boarding-pass-heres-why\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/acendas.com\/corporate\/dont-just-toss-your-old-boarding-pass-heres-why\/#primaryimage\",\"url\":\"https:\/\/acendas.com\/corporate\/wp-content\/uploads\/sites\/3\/2015\/08\/7970924_s.jpg\",\"contentUrl\":\"https:\/\/acendas.com\/corporate\/wp-content\/uploads\/sites\/3\/2015\/08\/7970924_s.jpg\",\"width\":450,\"height\":299},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/acendas.com\/corporate\/dont-just-toss-your-old-boarding-pass-heres-why\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/acendas.com\/corporate\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Don’t just toss your old boarding pass, here’s why\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/acendas.com\/corporate\/#website\",\"url\":\"https:\/\/acendas.com\/corporate\/\",\"name\":\"Corporate\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/acendas.com\/corporate\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/acendas.com\/corporate\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/acendas.com\/corporate\/#organization\",\"name\":\"Corporate\",\"url\":\"https:\/\/acendas.com\/corporate\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/acendas.com\/corporate\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/acendas.com\/corporate\/wp-content\/uploads\/sites\/3\/2022\/07\/Acendas_Logo_Color.png\",\"contentUrl\":\"https:\/\/acendas.com\/corporate\/wp-content\/uploads\/sites\/3\/2022\/07\/Acendas_Logo_Color.png\",\"width\":354,\"height\":79,\"caption\":\"Corporate\"},\"image\":{\"@id\":\"https:\/\/acendas.com\/corporate\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"\",\"url\":\"https:\/\/acendas.com\/corporate\/author\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Don't just toss your old boarding pass, here's why - Corporate","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/acendas.com\/corporate\/dont-just-toss-your-old-boarding-pass-heres-why\/","og_locale":"en_US","og_type":"article","og_title":"Don't just toss your old boarding pass, here's why - Corporate","og_description":"Original post KrebsOnSecurity The next time you\u2019re thinking of throwing away a used boarding pass with a barcode on it, consider tossing the boarding pass into a document shredder instead. Two-dimensional barcodes and QR codes can hold a great deal of information, and the codes printed on airline boarding passes […]","og_url":"https:\/\/acendas.com\/corporate\/dont-just-toss-your-old-boarding-pass-heres-why\/","og_site_name":"Corporate","article_published_time":"2015-10-15T13:23:59+00:00","og_image":[{"width":450,"height":299,"url":"https:\/\/acendas.com\/corporate\/wp-content\/uploads\/sites\/3\/2015\/08\/7970924_s.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Written by":"","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/acendas.com\/corporate\/dont-just-toss-your-old-boarding-pass-heres-why\/#article","isPartOf":{"@id":"https:\/\/acendas.com\/corporate\/dont-just-toss-your-old-boarding-pass-heres-why\/"},"author":{"name":"","@id":""},"headline":"Don’t just toss your old boarding pass, here’s why","datePublished":"2015-10-15T13:23:59+00:00","mainEntityOfPage":{"@id":"https:\/\/acendas.com\/corporate\/dont-just-toss-your-old-boarding-pass-heres-why\/"},"wordCount":696,"publisher":{"@id":"https:\/\/acendas.com\/corporate\/#organization"},"image":{"@id":"https:\/\/acendas.com\/corporate\/dont-just-toss-your-old-boarding-pass-heres-why\/#primaryimage"},"thumbnailUrl":"https:\/\/acendas.com\/corporate\/wp-content\/uploads\/sites\/3\/2015\/08\/7970924_s.jpg","keywords":["blog","boarding pass","flights","october","Security"],"articleSection":["Articles"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/acendas.com\/corporate\/dont-just-toss-your-old-boarding-pass-heres-why\/","url":"https:\/\/acendas.com\/corporate\/dont-just-toss-your-old-boarding-pass-heres-why\/","name":"Don't just toss your old boarding pass, here's why - Corporate","isPartOf":{"@id":"https:\/\/acendas.com\/corporate\/#website"},"primaryImageOfPage":{"@id":"https:\/\/acendas.com\/corporate\/dont-just-toss-your-old-boarding-pass-heres-why\/#primaryimage"},"image":{"@id":"https:\/\/acendas.com\/corporate\/dont-just-toss-your-old-boarding-pass-heres-why\/#primaryimage"},"thumbnailUrl":"https:\/\/acendas.com\/corporate\/wp-content\/uploads\/sites\/3\/2015\/08\/7970924_s.jpg","datePublished":"2015-10-15T13:23:59+00:00","breadcrumb":{"@id":"https:\/\/acendas.com\/corporate\/dont-just-toss-your-old-boarding-pass-heres-why\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/acendas.com\/corporate\/dont-just-toss-your-old-boarding-pass-heres-why\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/acendas.com\/corporate\/dont-just-toss-your-old-boarding-pass-heres-why\/#primaryimage","url":"https:\/\/acendas.com\/corporate\/wp-content\/uploads\/sites\/3\/2015\/08\/7970924_s.jpg","contentUrl":"https:\/\/acendas.com\/corporate\/wp-content\/uploads\/sites\/3\/2015\/08\/7970924_s.jpg","width":450,"height":299},{"@type":"BreadcrumbList","@id":"https:\/\/acendas.com\/corporate\/dont-just-toss-your-old-boarding-pass-heres-why\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/acendas.com\/corporate\/"},{"@type":"ListItem","position":2,"name":"Don’t just toss your old boarding pass, here’s why"}]},{"@type":"WebSite","@id":"https:\/\/acendas.com\/corporate\/#website","url":"https:\/\/acendas.com\/corporate\/","name":"Corporate","description":"","publisher":{"@id":"https:\/\/acendas.com\/corporate\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/acendas.com\/corporate\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/acendas.com\/corporate\/#organization","name":"Corporate","url":"https:\/\/acendas.com\/corporate\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/acendas.com\/corporate\/#\/schema\/logo\/image\/","url":"https:\/\/acendas.com\/corporate\/wp-content\/uploads\/sites\/3\/2022\/07\/Acendas_Logo_Color.png","contentUrl":"https:\/\/acendas.com\/corporate\/wp-content\/uploads\/sites\/3\/2022\/07\/Acendas_Logo_Color.png","width":354,"height":79,"caption":"Corporate"},"image":{"@id":"https:\/\/acendas.com\/corporate\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"","url":"https:\/\/acendas.com\/corporate\/author\/"}]}},"_links":{"self":[{"href":"https:\/\/acendas.com\/corporate\/wp-json\/wp\/v2\/posts\/4973","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/acendas.com\/corporate\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/acendas.com\/corporate\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/acendas.com\/corporate\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/acendas.com\/corporate\/wp-json\/wp\/v2\/comments?post=4973"}],"version-history":[{"count":0,"href":"https:\/\/acendas.com\/corporate\/wp-json\/wp\/v2\/posts\/4973\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/acendas.com\/corporate\/wp-json\/wp\/v2\/media\/4945"}],"wp:attachment":[{"href":"https:\/\/acendas.com\/corporate\/wp-json\/wp\/v2\/media?parent=4973"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/acendas.com\/corporate\/wp-json\/wp\/v2\/categories?post=4973"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/acendas.com\/corporate\/wp-json\/wp\/v2\/tags?post=4973"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}