Transport Airlines

Boarding passes with unencrypted barcodes could reveal PreCheck tipoff

Excerpt from The Verge

Oct 25, 2012 6:29 am

Skift Take

The TSA claims its security measures are “seen and unseen.” Well, the breach in this “seen” part should be fixed.

— Dennis Schaal

Register Now for the Skift Global Forum

An aviation enthusiast has detailed a potential security vulnerability involving the barcodes found on flight boarding passes. Currently, the barcodes are unencrypted, allowing anyone with a scanner to read the details of a given flight, such as passenger information and destination. The most troubling aspect is that those looking at the information are also able to determine whether they’ve been selected to pass through the controversial full body scanners.

In his blog post, John Butler describes how the final number on a scanned boarding pass indicates the eligibility for the TSA’s PreCheck program. One beep after a scan, for instance, means there’s no PreCheck and that the passenger will have to pass through a scanner, while three beeps confirms PreCheck status. Ultimately, it’s feasible that anyone armed with the information could alter the “one” to a “three” and modify the boarding pass accordingly, especially since the TSA barcode scanners don’t check against real time information.

Read the Complete Story →

Tags: ,

Next Up

More on Skift

The 9/11 Memorial and Museum Has a Few Lessons About the Future of Tourism
5 Travel Brands Winning on Social Media for the Week Ending September 19, 2014
Concur and SAP Emails to Employees Cover the Future in an SAP Context
Register Now for a Webinar on “The Rise of the Silent Traveler”