Sponsor Message:
Civil Aviation Forum
My Starred Topics | Profile | New Topic | Forum Index | Help | Search 
Too Easy To Hack+Cancel Ryanair PAX's Flights?  
User currently offlineBirdwatching From Germany, joined Sep 2003, 3830 posts, RR: 51
Posted (5 years 1 month 4 weeks 1 day 10 hours ago) and read 6784 times:

I just booked a Ryanair flight and when I pulled up the reservation to review my flight details, I noticed how easy it is to access a booking... anybody's booking, really. Let's say I know somebody, whose name I don't even know, is flying on a certain day. Like a college from work, or my girlfriend's ex, or anybody. I open the "manage your booking" form on ryanair.com, use option #3...
All I need is the date, the person's email address (which is really easy to find out), and the departure and arrival city.
With this data, I can log in and see that person's complete name, see their booking (if they are checking bags and other details)... and I can CANCEL the flight!!!

What's up with that??? Pretty weak system, right?

Soren  santahat 


All the things you probably hate about travelling are warm reminders that I'm home
10 replies: All unread, jump to last
 
User currently offlineNEMA From United Kingdom, joined Feb 2006, 724 posts, RR: 0
Reply 1, posted (5 years 1 month 4 weeks 1 day 10 hours ago) and read 6715 times:

Thanks for the heads up on a site where i think you might have just triggered something off!!


There isnt really a dark side to the moon, as a matter of fact its all dark!
User currently offlineBirdwatching From Germany, joined Sep 2003, 3830 posts, RR: 51
Reply 2, posted (5 years 1 month 4 weeks 1 day 10 hours ago) and read 6717 times:



Quoting NEMA (Reply 1):
you might have just triggered something off!!

Yeah like I'm the first person on earth who noticed this?

Soren  santahat 



All the things you probably hate about travelling are warm reminders that I'm home
User currently offlineEI320 From Ireland, joined Dec 2007, 1447 posts, RR: 0
Reply 3, posted (5 years 1 month 4 weeks 1 day 10 hours ago) and read 6645 times:

You're right, it's definitely a little too easy to access bookings. Never really noticed it before though. A confirmation number should be necessary to access booking information IMO. It doesn't take a genius to get someones email address and to find out where and when the person in question is going on holiday!

User currently offlineDAL763ER From United States of America, joined Oct 2008, 553 posts, RR: 0
Reply 4, posted (5 years 1 month 4 weeks 1 day 9 hours ago) and read 6499 times:

But would you pay to cancel someone's reservation? Even so, they'd be e-mailed instantly...


Where aviation is not the side show, it's the main show!!!
User currently offlineMEA-707 From Netherlands, joined Nov 1999, 4353 posts, RR: 35
Reply 5, posted (5 years 1 month 4 weeks 1 day ago) and read 6103 times:

I considered (not seriously !!) doing things like that to the new boyfriend of my ex but I realized when the actual person complains about ghost changes, they might track IP numbers and you can really get in trouble if they find out you use other peoples identity, that might withheld most people from messing up the travels of their bosses.


nobody has ever died from hard work, but why take the risk?
User currently offlineWukka From United States of America, joined Jan 2005, 1017 posts, RR: 16
Reply 6, posted (5 years 1 month 4 weeks 23 hours ago) and read 6046 times:

It would be interesting to see the ramifications of doing something like that, and whether or not they could track-back to the source.

Care to give it a shot, Soren?  Wink



We can agree to disagree.
User currently offlineScouseflyer From United Kingdom, joined Apr 2006, 3398 posts, RR: 9
Reply 7, posted (5 years 1 month 4 weeks 23 hours ago) and read 5955 times:



Quoting Wukka (Reply 6):
It would be interesting to see the ramifications of doing something like that, and whether or not they could track-back to the source.

You can bet that Ryanair will find a way to charge someone for this!

On a similar matter, I remember being able to check-in for an EasyJet flight on the terminals at Geneva without using the confirmation number - It foudn my reservation using my post code and flight details - don't know if that's still the case and obviously you wouldn't get past security if you didn't have a passport that matched your boarding card but much mischief could be caused!


User currently offlineDbcc From Switzerland, joined Nov 2007, 65 posts, RR: 0
Reply 8, posted (5 years 1 month 4 weeks 10 hours ago) and read 4878 times:



Quoting Wukka (Reply 6):
It would be interesting to see the ramifications of doing something like that, and whether or not they could track-back to the source.

If you do it from an Internet Cafe, or use a Wireless Access Point that is open, all they will find is an IP address, and can't link it to anybody.

If you know who, when, from where and where to, you know already what the site will reveal to you, and that is exactly what you know already. BUT, the ability to cancel the reservation is the most problematic. Cancel it 10 minutes before the person gets to the airport, and they probably won't see the e-mail.


User currently offlineDAL763ER From United States of America, joined Oct 2008, 553 posts, RR: 0
Reply 9, posted (5 years 1 month 4 weeks 10 hours ago) and read 4754 times:

People...you have to pay to cancel the reservation!! They'd track you down with the credit card used...


Where aviation is not the side show, it's the main show!!!
User currently offlineBirdwatching From Germany, joined Sep 2003, 3830 posts, RR: 51
Reply 10, posted (5 years 1 month 4 weeks 8 hours ago) and read 4604 times:



Quoting DAL763ER (Reply 9):
People...you have to pay to cancel the reservation!! They'd track you down with the credit card used...

Ok I see, but you can do either of the following:

- find out the person's full name and flight details, including the date and exact timings of their return

- check the person in, using a bogus document number, then the gate agent might not let the person board or the security checkpoint might not let the person go airside if the number doesn't match, especially if you select a non european nationality

Soren  santahat 



All the things you probably hate about travelling are warm reminders that I'm home
Top Of Page
Forum Index

This topic is archived and can not be replied to any more.

Printer friendly format

Similar topics:More similar topics...
Too Easy To Spot Air Marshals? posted Mon May 3 2004 16:27:26 by Mizzou65201
Ryanair Pax To Be Charged 7EUR In Riga Airport posted Wed Dec 28 2011 05:31:23 by smbukas
SIA To Cancel TPE-LAX Flights posted Tue Mar 25 2008 02:50:58 by Flying Belgian
FRG: Able To Handle Regular Pax Flights? posted Thu Oct 4 2007 09:21:53 by Pe@rson
Taiwan's EVA Air To Cease Pax Flights To Paris posted Sat Sep 29 2007 14:03:11 by LIPZ
KE To Resume TLV Pax Flights In April 2008 posted Wed Aug 8 2007 12:58:32 by El Al 001
Scenic (US) To Stop Pax Flights-Return To Airtours posted Wed May 17 2006 16:32:45 by FATFlyer
Ryanair To Offer 100,000 Free Flights... posted Tue May 16 2006 20:31:17 by RICARIZA
IB To Cancel More BCN Flights posted Tue Feb 28 2006 00:38:56 by Bolu340
Pax Flights To Return To Manston posted Wed Feb 1 2006 15:02:53 by Gkirk