Dont throw away a used boarding pass with a barcode on it. Always shred it. Two-dimensional barcodes and QR codes hold a great deal of information, and the codes printed on airline boarding passes allow someone to discover more about the person, his/her future travel plans, and frequent flyer account.
Many online websites (like http://online-barcode-reader.inliteresearch.com/default.aspx) are available which can read/decode the data which is stored inside a boarding pass barcode and can reveal lot of information about the trip like name, frequent flyer number, other personally identifiable information, record locator (a.k.a. “record key” for the Lufthansa flight he was taking that day) and through the combination of above details, once can get an access to his entire account details like his past and future flights booked through his frequent flyer number etc. The attacker can perform activities like change seats for the ticketed passengers; cancel any future flights; reset the PIN number with help of “forgot PIN” functionality on the airline's website together with answering pre-selected secret question like Mother's Maident Name etc which is easy to get through social engineering.
Authored by Hussain Ali Ladha
Rate this article: