Qantas investigating reports customers have access to other passengers' information on app
Qantas investigating reports customers have access to other passengers' information on app
Qantas is investigating reports of customers having access to other passengers' information on their app.
Qantas is investigating reports of customers having access to other passengers' information on their app.
In a statement issued this morning, the airline said it would provide more information as soon as possible.
"Qantas is investigating reports of an issue impacting the Qantas app this morning," a spokesperson for their airline said.
The scale of the issue has not yet been confirmed.
Luckily I can't afford to travel anywhere so this won't affect me, but probably will others.
Peak of Australian security
It is scary easy to leave a shared variable by a novice programmer or to misunderstand caching and cache collisions by the same group. It is part of learning, the scary part is that most profit driven companies see it as cost of doing business and have them on the front lines of production code. In order to push out code faster and cheaper QA and unit testing suffers and the consumers are the ones that end up with the highest risk.
Some companies reputations do get affected to the point it affects business or partnerships (see Wyze cameras and their removed recommendations from tech sites) but something needs to change and regulation is light on fines for companies doing this over and over (along with data breaches).
Is it still true that posting a picture of your boarding pass on social media is enough to let strangers get your passport number and phone number from the Qantas website?
Broken access control is currently the number one vulnerability on the OWASP top 10 too. Seems like a pretty basic thing to get past whatever checks and reviews they have.