5 ms·

What a truly horrifying partnership. Let's fill up our departure lounge with a bunch of big-headed bloggers. Brilliant!

• dsl 13y ago
  ...or people who can set a breakpoint in Burp Suite. t.reward = "http://fly.aa.com/klout/api/reward/ + t.id; var n = t.score >= 55 ? c("free-pass") : c("50-off"); store.set("StoredUser", { id: t.id, score: t.score, nick: t.nick, reward: t.reward })
  • narsil 13y ago
    Nice. I'm happy this loophole exists, if only for the chance to be surrounded by the latter group.
  • drstewart 13y ago
    Even better: http://fly.aa.com/klout/api/reward/ http://fly.aa.com/klout/api/reward/ A JSON dump of all the rewards codes.
    • Vivtek 13y ago
      That's the kind of thing that'll get the US Attorneys on you these days.
  • beedogs 13y ago
    excellent. This should be worth more than a Klout score, anyway.
  • deleted 13y ago
    [deleted]
  • vidarh 13y ago
    While that looks bad, it's only really bad if they don't validate it against Klout in some way afterwards. Or if they actually care. After all the point of this "reward" is to advertise AA and their lounges. As long as the abuse isn't massive, it shouldn't matter much to them. I deal with quite a few voucher programs at work, and a lot of the time validating that the requirements are met is not ever on the agenda, as people who "beat" the system also bring in more potential customers