The Airline then encodes that information in a barcode that is on the boarding pass it issues. The problem is, the passenger and flight information encoded in
barcode is not encrypted in any way. Using a web site I decoded my
boarding pass for my upcoming trip...
What terrorists or really anyone can do is use a website to decode
the barcode and get the flight information, put it into a text file,
change the 1 to a 3, then use another website to re-encode it into a
barcode. Finally, using a commercial photo-editing program or any
program that can edit graphics replace the barcode in their boarding
pass with the new one they created. Even more scary is that people can
do this to change names. So if they have a fake ID they can use this
method to make a valid boarding pass that matches their fake ID. The
really scary part is this will get past both the TSA document checker,
because the scanners the TSA use are just barcode decoders, they don’t
check against the real time information. So the TSA document checker
will not pick up on the alterations. This means, as long as they sub in 3
they can always use the Pre-Check line.
Additional details at the
Puckinflight aviation blog
It's an important article. That's why I hope someone helps him edit it because it was really difficult to read.
ReplyDelete