Post a boarding pass on Facebook, get your account stolen

Not the first time airlines have had poor security with boarding passes:

https://medium.com/@da/need-a-last-minute-flight-45af88ec8df... https://www.wired.com/2016/08/fake-boarding-pass-app-gets-ha... https://puckinflight.wordpress.com/2012/10/19/security-flaws... http://www.washingtonpost.com/national/experts-warn-about-se...

And what the OP article is basically copying: https://www.theverge.com/2017/1/10/14226034/instagram-boardi...

I don't see this changing anytime soon (although there are some tests to move towards facial recognition).

33c3 talk related to this topic: https://www.youtube.com/watch?v=n8WVo-YLyAg - "Where in the World Is Carmen Sandiego?"

It's amazing that with the algorithmic power Facebook brings to bear on every photo you upload, finding faces etc., that they can't spare a few cycles for security.

It would be simple to run barcode detection over any post and blur the result (maybe prompt the user just in case they actually wanted to post one?).

Almost any barcode is assumed to be private information, even a barcode on a store receipt can be used for return fraud in certain circumstances.

Saying 'don't post barcodes online' is all well and good, but that message will never reach the general public.

> Almost any barcode is assumed to be private information

I don't think that's really the case, I've deliberately embedded QR codes in images on Facebook. Your feature would be very annoying if it could not be toggled off.

I get it, be aware of what you post on facebook, but does this not rub anyone else the wrong way?

Imagine you break into your friend's car, and rewrire the stereo system so the left speaker doesn't work. Then, you say, "yo, I broke into your car and rewired things. The locks on this car are faulty, better let the car manufacturer know. I should contact them myself and collect my bug bounty." And when your friend, a decent chap, thinks you're joking, and finds out you're not kidding, is his response supposed to be, "Oh shit, you're right. You could have just [rewired my speaker system]. This is crazy." or instead, would he no longer be your friend, and probably report you to the police?