Low PNR Entropy: I accessed all airline bookings via simple math

Low PNR Entropy: I accessed all airline bookings via simple math(alexschapiro.com)

4 points by bearsyankees 213 days ago | 1 comment

diavarlyani 213 days ago |

Meanwhile in India we have airlines asking for OTP + Aadhaar + blood sample to change a seat, and somehow Avelo just needed 6 random chars. Beautiful write-up, Alex — this is the kind of responsible disclosure we need more of.

diavarlyani 213 days ago |

Meanwhile in India we have airlines asking for OTP + Aadhaar + blood sample to change a seat, and somehow Avelo just needed 6 random chars. Beautiful write-up, Alex — this is the kind of responsible disclosure we need more of.