Passbook hacked. Are airline tickets expensive for you? For a Cretan student at the University of Crete, it seems they are not. With iPhone and a simple hack, he can trick any modern airport into getting a free first class seat, please, on a flight of his choice.
Anthony Hariton, an 18-year-old computer science student at the University of Crete, claims to have discovered a security flaw in the iOS Passbook app that allows him to get free airline tickets across Europe.
The student is preparing “Exploiting Passbook to Fly for Free” which he will present at a hacking conference next month. The presentation of the vulnerability will show theoretically how someone can create fake boarding passes using a computer and an iPhone. With the fake boarding pass, he can pass through all the airport security checks and eventually “park” in the first seat of the flight of his choice.
The Passbook for iOS lets you scan items like movie tickets, gift cards, boarding passes, and more, and store them in one place. Once the app has saved the boarding pass, all travelers have to do is show it on their phone, without having to print it out.
This is exactly what Hariton seems to have exploited, allegedly using the Passbook app to create plausible boarding passes.
The vulnerability will be presented at HITB SecConf 2014
Source: secnews.gr
