Live data from Hacker News

American spy hacked Booking.com, company stayed silent

nrc.nl

221–230 of 301 posts

Re: American spy hacked Booking.com, company stayed silent

#221
post #47

Every time I read such articles, I replace the nationalities American with Russian or Chinese just to gauge how the reactions would be.

Please don't take HN threads on generic ideological or nationalistic tangents. They make discussion significantly more shallow (because there's never anything new to say about the most generic and well-worn themes), more tedious (because predictable), and nastier (because the themes are inflammatory and because the mind seems to resort to indignation to amuse itself when there isn't any information to chew on).

https://news.ycombinator.com/newsguidelines.html

Re: American spy hacked Booking.com, company stayed silent

#222
post #84
post #47

Every time I read such articles, I replace the nationalities American with Russian or Chinese just to gauge how the reactions would be.

For edginess’ sake? While I don’t approve of hacking, I expect American spying to have less damaging results than Chinese or Russian spying.

Please don't take HN threads further into nationalistic flamewar. I'm sure that wasn't your intention but intention isn't the high-order bit here.

https://news.ycombinator.com/newsguidelines.html

Re: American spy hacked Booking.com, company stayed silent

#223
post #134
post #47

Every time I read such articles, I replace the nationalities American with Russian or Chinese just to gauge how the reactions would be.

I'm not saying America is innocent, but those are materially different things with different motivations and risks. The reactions would rightly be different.

The problem is that if America is able to do such a hack, other state actors are more than capable to do the same, however, we may just not know about it as they covered their tracks better.

Re: American spy hacked Booking.com, company stayed silent

#224
post #70
post #59

Earlier quoted context omitted.

> I'll always book direct once I find one. Sometimes booking direct is expensive and the hotels most of them have a shitty website.

Booking takes a 20% cut of the reservation, so I expect every hotel to gladly you offer a 10% off the booking.com price.

15% or more, depending on how many icons you want to be drawn next to your hotel name. So, with most small and medium hotels that don't have a detached hired team of managers, you can find a direct e-mail, wink-wink, nudge-nudge, and get a manual booking with 5-7-10% discount. Of course, all booking services prohibit such unequal discounts in their agreements, but it is unenforceable, as the hotel can invent any complex reward system for anyone at any time. Booking services know pretty well that their profits depend on eyeball domination, that's why they buy all the ads everywhere, and flood the web with “official” hotel pages in numerous catalogues. Hotel website is pretty much always lost below those. Of course, big hotel networks with their own marketing departments and unique partnership agreements with public and corporate services work differently, and the price you get is what they already want from you.

What is trivially detectable, though, is cancelled bookings that result in immediate unavailability of the same room for the same period. If you book through a service first, then try to get a discount from a hotel, there is a much higher chance that you get “Naaah”. No one would really bother about a single case, but your case might not be that single case.

As for “booking guarantees” given by a “big, well-known service”, read the fine print in the user agreement. It the hotel that is responsible for everything. A decent hotel treats all visitors equally, and tries to double-check for possible problems in advance. A shady place that only needs to get by for a season or two, inflates scores by squeezing positive reviews, and overbooks isn't really afraid of losing a contract. Moreover, that doesn't happen instantly, because booking services get money from commissions, and want their numbers to increase, not to decrease. Also, Booking.com office for some area is, most likely, 3-5 people handling papers and making calls during work hours, they won't personally swat the place to help any client.

Re: American spy hacked Booking.com, company stayed silent

#225
post #202

Earlier quoted context omitted.

Why would anyone build something like that in Perl? I could only see it being done “just because”. Wasn’t Perl specifically designed for the quickly code it once and not change it again case?

Perl was python before python was python, and booking.com is old.

On the server it was the predecessor to Node.js, back when the alternative was a C program :)

Re: American spy hacked Booking.com, company stayed silent

#226
post #169

Earlier quoted context omitted.

They are definitely black hats. Intelligence services operating in foreign countries (physically or digitally) are by definition criminals, in that they are breaking the local laws where they are operating / accessing. That they are doing it for a 'good cause' (often debatable) is somewhat irrelevant, that is a risk/reward calculation that the country/agency/spy needs to make themselves. If a a friendly country of th…

>the CIA hacks NL companies and the Dutch RIVM hacks American ones and they share information/metadata The AIVD is the Dutch intelligence service, the RIVM is the public health institute. I don't think even the most out-there of Dutch conspiracy theorists have accused the RIVM of hacking American companies on behalf of the CIA...

Yeah but if you want to fly under the radar...

Re: American spy hacked Booking.com, company stayed silent

#228
post #202

Earlier quoted context omitted.

Why would anyone build something like that in Perl? I could only see it being done “just because”. Wasn’t Perl specifically designed for the quickly code it once and not change it again case?

Perl was python before python was python, and booking.com is old.

I thought the Netherlands was weird in that there is a large group of Perl programmers who never decided to move on. It is its own ecosystem

Its kind of like how Japan stayed on flip phones for forever and even bolted on smartphone features to their flip phones.

Re: American spy hacked Booking.com, company stayed silent

#229
post #185

Earlier quoted context omitted.

> Booking offered better prices than the hotels themselves In this case, you can contact the hotel and ask for a better offer. Works sometimes.

I've tried this many times and the hotel usually says "I guess you should book it online then"

Yeah it makes no sense to me but this happens every time I try to book a room directly. I've even offered to pay slightly more just to book directly as it's hard to trust these online sites, they still refuse.

Re: American spy hacked Booking.com, company stayed silent

#230

Is it worth a shot to file a complain with SEC? Booking is a public company and must disclose any substantial information.

The dutch privacy authority, with GDPR in hand, can fine them up to 2-4% of their annual revenue for not disclosing the data breach: such disclosures are a GDPR requirement.
Post reply on HN