37C3: Lightning Talks

Your locale preferences have been saved. We like to think that we have excellent support for English in pretalx, but if you encounter issues or errors, please contact us!

Air France-KLM 6-char short code
2023-12-28 , Saal Granville
Language: English

Air France-KLM 6-char short code
What could go wrong?
What did go wrong more...


Air France-KLM was vulnerable because they used 6-char short codes in links for text messages. No security question was needed to read detailed trip data, including names, ticket prices, and sometimes passport data and visa data.
How large was the breach?
What more was 'interesting'?
Is it now fixed?
List of failures and questions.

See also: Presentation (1.1 MB)