I showed an airline clerk that one of their systems were insecure (VIP lounge thingy). I got access by playing around with a QR code generator, and the way I sh

I showed an airline clerk that one of their systems were insecure (VIP lounge thingy). I got access by playing around with a QR code generator, and the way I showed that it was insecure was to talk him through the process of getting in. I almost ended up in a cell. Until the boss came. I could see directly that he was my tribe. The hacker kind. I talked him through it, after which he gave the others a stern talking to, shook my hand and bought me lunch. He said they were a bit shaky because apparently people were getting into the checked in area with the same technique. Up until very recently you got in to "secure places" by presenting any qr code that was in the valid format. "Does this look valid? Well, yes. Let's not bother actually validating it".