Post a boarding pass on Facebook, get your account stolen

Post by stephen_g » Sat, Sep 23, 2017, 12:07 PM UTC

bogomipz wrote: post #79

>"When you want to brag about your final destination, be careful of what you post on Facebook and Instagram. Leave your boarding passes (and other barcodes) for yourself (and get a shredder)." It's funny that for a piece intended to warn other's on identity security the author had no problem reproducing the the unredacted boarding pass picture in question, which incidentally also tells us that he is a member of the O…

Post by cesarb » Sat, Sep 23, 2017, 12:12 PM UTC

djsumdog wrote: post #13

sersi wrote: post #11

And this is also why I almost never give my real birth date when registering on websites (except on financial websites or websites where I'm legally obligated to) and I never ever give real answers to the security question.. My typical answer for a security question is something like "39arsrc uyrsrsaulsr8832r" and that's saved in a password manager Security questions weakens the security of an account, they are easil…

"Your mother's maiden name has numbers in it?" (bank teller, DMV person, etc.) "You .. give real answers for your security questions? Seriously?" I do the same thing, real birthday if it's financial or employee related, but for everything else, I'm a few years older on another date. I often pick a security question that I don't have a real legit answer to as well.

Post by bogomipz » Sat, Sep 23, 2017, 12:15 PM UTC

stephen_g wrote: post #91

bogomipz wrote: post #79

>"When you want to brag about your final destination, be careful of what you post on Facebook and Instagram. Leave your boarding passes (and other barcodes) for yourself (and get a shredder)." It's funny that for a piece intended to warn other's on identity security the author had no problem reproducing the the unredacted boarding pass picture in question, which incidentally also tells us that he is a member of the O…

There isn’t a Oneworld club. With Oneworld you can only join individual airline’s loyalty program (I think he’s in the BA one judging by the BASILV). Then all the airline programs in the Oneworld alliance have a mapping between their tiers and the Oneworld set, so you can work out the equilivalence between airlines. So a Qantas Gold teir maps to BA’s silver tier and get the same perks on each other’s airlines (BA has…

Post by masklinn » Sat, Sep 23, 2017, 12:18 PM UTC

littlehood wrote: post #59

KGIII wrote: post #50

I am not a lawyer, but I think most of the author's actions would be considered illegal in the US. While he didn't do any harm, his actions were still probably a violation of at least the CFAA. Anyhow, Aztec code? It looks, the one on the watch, pretty much like a QR Code. I've never seen the Aztec code before today. It makes me wonder how many of these barcode things we really need. A quick Google didn't reveal any…

Aztec is more compact than QR - does not need margin and because it's optimised for lowercase letters (used a lot for urls). Also has tunable error correction.

Post by alkhatib » Sat, Sep 23, 2017, 12:19 PM UTC

cesarb wrote: post #93

djsumdog wrote: post #13

Earlier quoted context omitted.

"Your mother's maiden name has numbers in it?" (bank teller, DMV person, etc.) "You .. give real answers for your security questions? Seriously?" I do the same thing, real birthday if it's financial or employee related, but for everything else, I'm a few years older on another date. I often pick a security question that I don't have a real legit answer to as well.

I never quite got this "mother's maiden name" thing. Isn't your mother's maiden name... your mother's current name, minus the extra surname she got when she married? Why is this treated as a hard-to-discover information?