3 ms·
Has anyone heard of an exploit that sets people's flights to use the attackers frequent flyer number, thus collecting their miles?
by crb 9y ago
Has anyone heard of an exploit that sets people's flights to use the attackers frequent flyer number, thus collecting their miles?
- kkm 9y agoInteresting thought, would be really curious to see the outcome for that. AFAIK, the link that Emirates is sharing allowed me to add my own miles number. What I am not sure is, if there is a check at the backend (Emirates side) which compares the miles number with ticket holder email ID.
- vwcx 9y agoNo, because in most cases the program requires the passenger's name to match the FF account name.
- TheSpiceIsLife 9y ago> the program requires Except in the event of exploit of vulnerability...
- sksksk 9y agoa lot of FF programmes allow transferring of miles
- jorams 9y agoThis[1] talk linked in the article mentions that it is happening, and that the name check is mostly useless because you can often just change the name attached to the frequent flyer number. Of course, things may have changed, but they probably haven't. [1]: https://media.ccc.de/v/33c3-7964-where_in_the_world_is_carmen_sandiego https://media.ccc.de/v/33c3-7964-where_in_the_world_is_carme...