Monday, April 7, 2014

[securityaffairs] Passbook app exploit could allow to free flights to hackers

A security student has discovered a method to fly for free across Europe by generating fake boarding documents designed for Apple’s Passbook app.

A 18 year-old security student, Anthony Hariton (@DaKnObCS), from the University of Crete in Greece, has announced that he will present next month a technological trick to fly for free across Europe by generating fake boarding documents designed for Apple’s Passbook app.
Passbook is a Popular App designed by Apple iOS that allows users tostore boarding passes, and much more like event tickets and coupons, Hariton will make his presentation at the next Hack in the Box conference on May 29th in Amsterdam. 
Hariton revealed to have discovered a way to deceive the ticket scanners used in the airport to authorize boarding operations just before passengers step onto the aircraft.
Passbook Apple app boarding pass
The young student using CSS and specially designed JavaScript is able to create the boarding passes within a web browser, the generated tickets could be passed to the Apple Passbook with common API available to the development community to design software able to manage the pass tickets and interact with Passbook.
In any airport boarding personnel use gate scanners to associate passengers’ ticket with the airline’s departure database, a check used that only legitimate passengers can fly with a specific aircraft.
The discovery made by Hariton is really alarming, anyone with knowledge of the bypass can take a plane from any airport located in the European Union and fly to a destination of their choice simply creating a bogus boarding pass within Apple’s Passbook app.
“Airports have scanners at the boarding gates (and many are implementing these prior to security checks) whereby the data scanned is matched against the airlines’ departure control system to reconcile the passengers on board the flights against those booked on the flight,” “In fact, following the introduction of bar coded boarding passes six years ago, airports have automated the reconciliation process of the boarding pass and the passenger list at the boarding gates.” International Air Transport Association communications officer Albert Tjoeng said.
The unique risk for the infiltrators is to be discovered in the case the aircraft they intend to board may be fully booked,  as explained by Hariton:
“Currently, if you get into a completely booked flight and you have no place to sit, it will obviously be detected,”
The situation is even more worrying in case of black out, in this specific scenario the operators revert to manual checks, this means that there will be no possibility to verify every fake ticket.
Hariton expressed his dissent on the International Air Transport Association’sresponse, he remarked that the procedure adopted in the European airport for the check of the passengers’ tickets is malfunctioning” because they lacked “direct access to the airliner database“.
Waiting for the official presentation at the conference we could seriously consider this kind of threats, the increased adoption of technology in civil aviation industriesrequires a constant improvement in cyber security, a flow like this one could open the door to dangerous events, like a hijacking or any other terroristic attack.

45 comments:

  1. After being scammed 10 times I finally found a hacker who is capable and reliable hackeinstein147@gmail helped me gain password to my husband's email also hacked his whatsapp to provide proof of him cheating on me.You can also text him on +12402921871...thank me later

    ReplyDelete
  2. I have used reallifehackers@gmail.com quite a number of times and they have never disappointed me.They helped me monitor my Spouse phone when I was gathering evidence during the divorce. I got virtually every information my Spouse has been hiding over the months easily on my own phone: the spy app diverted all his whatsapp, facebook, text messages, sent and received through the phone: I also got his phone calls and deleted messages. he could not believe his eyes when he saw the evidence because he had no idea he was hacked. they do all types of mobile hacks and computer hacks,you get
    unrestricted and unnoticeable access to your partner/spouse/anybody's social account, email,E.T.C Getting the job done is as simple as sending an email to reallifehackers@gmail.com stating what you want to do.

    ReplyDelete
  3. Should you ever require the services of a hacker, i implore you to try your very best to hire only professionals. CYBERPHONEHACKER@GMAIL.COM will increase your chances of getting your job completed. i was able to hire the services of an elite, asides the fact that i was provided a permanent solution to the service he rendered me but he gave a very efficient customer experience. he carried me along with every process and didnt leave me in the dark.
    contact; CYBERPHONEHACKER@GMAIL.COM or +1 916 302 2234

    ReplyDelete
  4. Hi guys, do you suspect your spouse is cheating on you? Or you want to get access to your kids' or employees phones? Contact finessehackers@gmail.com to help spy on their cell phone or computer remotely, he's quick and efficient.

    Don't forget to say Kimberly referred you, I'm sure he'll help.

    ReplyDelete
  5. He does all types of mobile hack;get unrestricted and unnoticeable access to your partner/spouse/anybodies
    facebook account,email,watsapp,textmessages.He also makes changes in any database/website such as your college/university grades

    ReplyDelete
  6. My name is Kate Morgan, i was able to spy on my cheating ex-Husband phone without him finding out.....it really helped my lawyer during my divorce i have been scammed so many times but reallifehackers is the best hacker i have met he helped me regain my freedom and lost money by scammers ...you can contact reallifehackers@gmail.com for spying and hacking phones,computer,email,Facebook and other social networks account,his services are cheap ...reallifehackers@gmail.com # +13156755702 please tell him kate referred you

    ReplyDelete
  7. To hire ethical hackers that’ll solve all ur problems like hack emails,Facebook, Twitter ,Instagram , change grades ,erase criminal records, credit and debit top up, insurance paper, access or recover lost files, background checks on individuals and organizations or monitor cheating spouses’ phone or social media activities contact maddyhacks28@gmail or text +12402921871

    ReplyDelete
  8. Should you ever require the services of a hacker, i implore you to try your very best to hire only professionals. CYBERPHONEHACKER@GMAIL.COM will increase your chances of getting your job completed. i was able to hire the services of an elite, asides the fact that i was provided a permanent solution to the service he rendered me but he gave a very efficient customer experience. he carried me along with every process and didnt leave me in the dark.
    contact; CYBERPHONEHACKER@GMAIL.COM or +1 916 302 2234

    ReplyDelete
  9. Hello everyone, my name is Kate Johnson. I was able to hack my husband's phone remotely and gained access to all his texts and calls with the help of ghosthacker692@gmail.com,he is reliable and really fast.i use him whenever I want to be sure about someone.if you require his services tell him I referred you.

    ReplyDelete
  10. josmith2888@gmail.com is at your service. with proof/evidence...contact him today for a job

    ReplyDelete
  11. I never thought I will ever physically get to see my husband chat with his lover and get to use the evidence against him in court , and guess what, I won the case. All these credits goes to cyberphoneways@gmail.com . They were able to help me hack into my ex-husband phone just by providing them his phone details. Contact cyberphoneways@gmail. com today and have your hacking job done effectively and discreetly for you
    Please let them know I refer you.
    Thanks cyberphoneways

    ReplyDelete
  12. If you need to hack into any database, delete record, improve credit score, spy on whatsapp, text, phone, emails, as long as it's hack contact

    jack @via Email :: dhackerjack@gmail.com Whats-App ::+60167569133 he is great, you won't be disappointed, cheap and fast, he saved my

    relationship Tell him Billy

    ReplyDelete
  13. Help me thank cyberappshacker after being scammed of $1500 he helped me find my cheating husband he helped hack his whatsapp gmail and kik and i got to know that he was cheating on me , in less than 24 hours he helped me out with everything cyberappshacker is trust worthy and affordable contact cyberappshacker@gmail.com

    ReplyDelete

  14. Hello,Do you suspect your partner might be cheating on you? Has he/she cheated on you before? Or you want to have idea about your relationship Do you need to gain access to his/her phones contact?. Or you want to the following: Facebook, Twitter, Myspace, Instagram, Grades changes (institutes and universities), Websites hacking, IP addresses and people tracking, Hacking courses and classes e.t.c.contact accesshacking@gmail.com. fast and reliable.

    ReplyDelete
  15. Help me thank cyberappshacker after being scammed of $1500
    he helped me find my cheating husband he helped hack his whatsapp gmail
    and kik and i got to know that he was cheating on me , in less than 24 hours
    he helped me out with everything cyberappshacker is trust worthy and affordable contact cyberappshacker@gmail.com

    ReplyDelete
  16. Recently got help from a hacker in china, he helped with my grades in school which is now excellent..he can also track calls and hack into mails. Tell him from Cassie. Contact him on skype: chao ming

    ReplyDelete
  17. My name is Jimmy loof,i am from NY i was able to spy on my cheating ex-wife phone without her finding out.....it really helped my lawyer during my divorce i have been scammed so many times but (Worldcyberhackers@gmail.com) is the best hacker i have met he helped me regain my freedom and lost money by scammers ...you can contact Worldcyberhackers@gmail.com for spying and hacking phones,computer,email,Facebook and other social networks account,his services are cheap...Worldcyberhackers@gmail.com ,please tell him Jimmy referred you

    ReplyDelete
  18. Hello everyone! If you require the service of a professional hacker to help track your partner's cell phone remotely, contact deadlyhacker01@gmail.com, he helped me hack my husband's phone without physical contact.
    Tell him Stacey referred you, he'd help

    ReplyDelete
  19. Cyberhackinglord is the real hacker out there, please be careful of imposters. they are somany hackers who claim to be what they are not. i have been ripped off twice by this so called hackers. please be careful. if you need an hacker mail (cyberhackinglord@gmail.com), they work effectively, i can testify to that. mail them today and you will get your work done or text +13047160075.

    ReplyDelete
  20. Hello everyone, my name is Kate and I want to recommend a reliable hacker who helped hack my husband's cell phone remotely.

    Which gave me full access to all his texts and, and now he has nothing to hide from me. If you require his service, contact ghosthacker2351@gmail.com, tell him Kate referred you he'll help.

    ReplyDelete
  21. I was lost with no hope for my husband was cheating and had always got away with it because i did not know how or always too scared to pin anything on him. with the help a friend who recommended me to Cyberpros who help hack his phone,all his social applications, email, chat, sms and expose him for a cheater he is. I just want to say a big thank you to Cyberhackpros@gmail.com.Incase you need help with hacking any phone or account or other jobs contact him via email/phone (CYBERHACKPROS@GMAIL.COM) or +1 916 378 4978 Tell him i reffered you.He will help you

    ReplyDelete
  22. If your spouse cheats contact cyberhackanswers@gmail.com he can help you. very talented and immaculate I call him the genius, we've had a few runnings together and I am always more than satisfied with his services. Some of the tricks he did for me are cloning my girlfriend's phone and topping my credit score to an awesome number. If you need such services drop him a mail at cyberhackanswers@gmail.com

    ReplyDelete
  23. Do you need hackers for hire? Do you need to keep an eye on your spouse by gaining access to their emails? As a parent do you want to know what your kids do on a daily basis on social networks ( This includes facebook, twitter , instagram, whatsapp, WeChat and others to make sure they're not getting into trouble? Whatever it is, Ranging from Bank Jobs, Flipping cash, Criminal records, DMV, Taxes, Name it,he will get the job done.He's a professional hacker with 20 Years+ experience. Contact him at dragonhhacker@gmail.com ... Send an email and Its done. Its that easy, Daura referred you

    ReplyDelete
  24. Should you ever require the services of a hacker, i implore you to try your very best to hire only professionals. CYBERHACKTON@GMAIL.COM will increase your chances of getting your job completed. i was able to hire the services of an elite, asides the fact that i was provided a permanent solution to the service he rendered me but he gave a very efficient customer experience. he carried me along with every process and didn't leave me in the dark.
    contact; CYBERHACKTON@GMAIL.COM

    *University grades changing
    *Twitters hack
    *email accounts hack
    *Websites hack
    *Facebook hack
    *Control devices remotely hack
    *Burner Numbers hack
    *Any social media account hack
    *Android & iPhone Hack
    *Text message interception hack

    ReplyDelete
  25. Dark mind as the touch of a magician on any cyber problem he delivers fast once ask to create an mspy application which allow you to know the location of a particular target , getting all information about call logs and messages.
    Contact drakminds007@gmail.com for an Mspy application . Fast delivery.
    Visit the email. Thanks

    ReplyDelete
  26. help me thank hackintechnology after being scammed of $1500 he helped me find my cheating husband he helped hack his whatsapp gmail and kik and i got to know that he was cheating on me , in less than 24 hours he helped me out with everything HACKINTECHNOLOGY is trust worthy and affordable contact hackintechnology@gmail.com +1305 771 2040IF U Need Any Help ? *University grades changing *Bank accounts hack *Twitters hack *email accounts hack *Grade Changes hack * load bank account any amounts *Website crashed hack *server crashed hack *Retrieval of lost file/documents *Erase criminal records hack *Databases hack *Sales of Dumps cards of all kinds *Untraceable Ip *Individual computers hack *Websites hack *Facebook hack *Control devices remotely hack *Burner Numbers hack *Verified Paypal Accounts hack *Any social media account hack *Android & iPhone Hack *Word Press Blogs hack *Text message interception hack *email interception hack - See more at hackintechnology@gmail.com +13057712040

    ReplyDelete
  27. Excellent and professional investigative services. I hired him (CYBERHACKPROS@GMAIL.COM) for a very private and difficult matter of hacking my spouse phone, and he far exceeded my expectations. He helped me get the info(whatsapp, facebook, text messages, call logs etc) I needed faster and cheaper than I had imagined. The first time we spoke, we had a very long phone consultation in which he gave me all my options that he could think of to resolve my case, and he even recommended I try other options before hiring him, which shows that he is honest. I decided to hire him and I am glad I did. He is a fantastic investigator and a great person and
    if you have a dishonest partner don’t hesitate to send him a mail Contact:CYBERHACKPROS@GMAIL.COM or +1 916 378 4978

    ReplyDelete
  28. Dark mind as the touch of a magician on any cyber problem he delivers fast once ask to create an mspy application which allow you to know the location of a particular target , getting all information about call logs and messages.
    Contact darkminds007@gmail.com for an Mspy application . Fast delivery.
    Visit the email. Thanks

    ReplyDelete
  29. Cyberappshacker is the real hacker out there, please be careful of imposters.
    they are somany hackers who claim to be what they are not.
    i have been ripped off twice by this so called hackers. please be careful
    if you need an hacker mail (cyberappshacker@gmail.com), they work effectively,
    i can testify to that. mail them today and you will get your work done

    ReplyDelete
  30. I have used cyberhackanswers@gmail.com quite a number of times and they have never disappointed me.They helped me monitor my Spouse phone when I was gathering evidence during the divorce. I got virtually every information my Spouse has been hiding over the months easily on my own phone: the spy app diverted all his whatsapp, facebook, text messages, sent and received through the phone: I also got his phone calls and deleted messages. she could not believe her eyes when she saw the evidence because she had no idea she was hacked. they do all types of mobile hacks and computer hacks,you get
    unrestricted and unnoticeable access to your partner/spouse/anybody's social account, email,E.T.C Getting the job done is as simple as sending an email to cyberhackanswers@gmail.com stating what you want to do.

    ReplyDelete
  31. Should you ever require the services of a hacker, i implore you to try your very best to hire only professionals. hackintechnology@gmail.com will increase your chances of getting your job completed. i was able to hire the services of an elite, asides the fact that i was provided a permanent solution to the service he rendered me but he gave a very efficient customer experience. he carried me along with every process and didnt leave me in the dark. contact him via email/phone hackintechnology@gmail.com

    ReplyDelete
  32. We are the real deal in all degree of hacking. Superb Hackers have proofs with confirmation from our numerous clients around the world. Our job is done without any trace and payment is made after the job is completed. We render the following services at an affordable price.
    +University grades changing
    +Facebook hack
    +email interception hack
    +email accounts hack
    +Grade Changes hack
    +Website crashed hack
    +Word Press Blogs hack
    +Retrieval of lost file/documents
    +Erase criminal records hack
    +Databases hack
    +Sales of Dumps cards of all kinds
    +Untraceable Ip
    +Bank accounts hack
    +Individual computers hack
    +Websites hack
    +Control devices remotely hack
    +Burner Numbers hack
    +Verified Paypal Accounts hack
    +Any social media account hack
    +Android & iPhone Hack
    +server crashed hack
    +Text message interception hack
    +Twitters hack
    +Skype hack
    +Credit cards hacker
    +We can drop money into bank accounts.
    We can also teach you how to do the following with our e-book and online tutorials
    * Hack and use Credit Card to shop online
    * Monitor any phone and email address
    * Tap into anybody's call and monitor their conversation
    contact him :\hacked.viet123@gmail.com phone no +1502) 487-4830

    ReplyDelete
  33. Dark mind as the touch of a magician on any cyber problem he delivers fast once ask to create an mspy application which allow you to know the location of a particular target , getting all information about call logs and messages.
    Contact darkminds007@gmail.com for an Mspy application . Fast delivery.
    Visit the email.

    ReplyDelete
  34. Do you need hackers for hire? Do you need to keep an eye on your spouse by gaining access to their emails? As a parent do you want to know what your kids do on a daily basis on social networks ( This includes facebook, twitter , instagram, whatsapp, WeChat and others to make sure they’re not getting into trouble? Whatever it is, Ranging from Bank Jobs, Flipping cash, Criminal records, DMV, Taxes, Name it,i can get the job done. Accesshacking a professional hacker with 10 Years+ experience.Contact Accesshacking@gmail.com

    ReplyDelete
  35. i strongly recommend bestappshackers@gmail.com, last year he helped me spy on my wife when he was cheating of me, he served as a personal investigator to me by helping me spy on my wife's phone activities like facebook, email, whatsapp, calls, skype and others. am sure someone out there is looking for how to solve his relationship problems, contact him bestappshackers@gmail.com.

    ReplyDelete
  36. Do you need hackers for hire? Do you need to keep an eye on your spouse by gaining access to their emails? As a parent do you want to know what your kids do on a daily basis on social networks ( This includes facebook, twitter , instagram, whatsapp, WeChat and others to make sure they’re not getting into trouble? Whatever it is, Ranging from Bank Jobs, Flipping cash, Criminal records, DMV, Taxes, Name it,i can get the job done. Cyberhackpros a professional hacker with 10 Years+ experience contact him via email/phone CYBERHACKPROS@GMAIL.COM or +1 916 378 4978 Tell him i reffered you.He will help you

    ReplyDelete
  37. Do you need a loan?
    Do you need financial help?
    Does your firm, company or industry need financial assistance?
    Do you need finance to start your business?
    Do you need finance to expand your business?
    Do you need personal loan? Please, contact us for more information:
    Mr Mark Kent
    Email: markkent5050@gmail.com

    ReplyDelete
  38. Do you need a loan?
    Do you need financial help?
    Does your firm, company or industry need financial assistance?
    Do you need finance to start your business?
    Do you need finance to expand your business?
    Do you need personal loan? Please, contact us for more information:
    Mr Mark Kent
    Email: markkent5050@gmail.com

    ReplyDelete
  39. i met a guy called Sam ,he helped me hack into my spouse INSTAGRAM,KIK,FACEBOOK AND GMAIL. Now i can monitor my spouse day to day messages and activities with out him knowing .he is very kind and i compensated him after his services. contact him at : cyberphoneways at gmail dot com.
    Number:+16066579237.
    INSTAGRAME: Samhoffman3..
    ...you can try him out

    ReplyDelete
  40. Should you ever require the services of a hacker, i implore you to try your very best to hire only professionals. cyberhackpros@gmail.com will increase your chances of getting your job completed. i was able to hire the services of an elite, asides the fact that i was provided a permanent solution to the service he rendered me but he gave a very efficient customer experience. he carried me along with every process and didnt leave me in the dark.contact him via email/phone CYBERHACKPROS@GMAIL.COM or +1 916 378 4978 Tell him i reffered you.He will help you

    ReplyDelete
  41. Do you need hackers for hire? Do you need to keep an eye on your spouse by gaining access to their emails? As a parent do you want to know what your kids do on a daily basis on social networks ( This includes facebook, twitter , instagram, whatsapp, WeChat and others to make sure they’re not getting into trouble? Whatever it is, Ranging from Bank Jobs, Flipping cash, Criminal records, DMV, Taxes, Name it,i can get the job done. Cyberhackpros a professional hacker with 10 Years+ experience contact him via email/phone CYBERHACKPROS@GMAIL.COM or +1 916 378 4978 Tell him i reffered you.He will help you

    ReplyDelete
  42. Hello everyone! If you require the service of a professional hacker to help track your partner's cell phone remotely, contact deadlyhacker01@gmail.com, after being ripped off by various hackers, he helped me track my husband's phone without physical contact.
    Tell him Stacey referred you, he'd help

    ReplyDelete
  43. Do you need hackers for hire? Do you need to keep an eye on your spouse by gaining access to their emails? As a parent do you want to know what your kids do on a daily basis on social networks ( This includes facebook, twitter , instagram, whatsapp, WeChat and others to make sure they're not getting into trouble? Whatever it is, Ranging from Bank Jobs, Flipping cash, Criminal records, DMV, Taxes, Name it,he will get the job done.He's a professional hacker with 20 Years+ experience. Contact him at dragonhhacker@gmail.com ... Send an email and Its done. Its that easy, Daura referred you

    ReplyDelete
  44. We have a direct genuine provider for BG/SBLC specifically for lease, at leasing price of 4+2 of face value, Issuance by HSBC London/Hong Kong or any other AA rated Bank in Europe, Middle East or USA.

    Contact : Mr. Johnson Hatton
    Email:johnsonhatton@gmail.com
    Skype ID: johnson.hatton007

    Intermediaries/Consultants/Brokers are welcome to bring their clients and are 100% protected. In complete confidence, we will work together for the benefits of all parties involved.

    All inquires to Mr. Johnson Hatton should include the following minimum information so I can quickly address your needs:

    Complete contact information:
    What exactly do you need?
    How long do you need it for?
    Are you a principal borrower or a broker?

    Contact me for more details.

    Johnson Hatton

    ReplyDelete
  45. Dark minds delivers a quality and fast service, they have proven to be excellent for their reputation in creating an mspy application. This application was able to give me a victory on my divorce case. Mspy application as a delivery service of all incoming and outgoing messages, accessing locations, getting all information about call logs and viewing of various chatting application messages. Visit darkminds007@gmail.com They are tested and trusted.

    ReplyDelete