Lost Luggage Becomes Web Security Audit

Description

A news-style meme image shows several IndiGo airplanes parked at an airport, with one large plane in the foreground and others visible behind it. The bold caption at the bottom reads: "Bengaluru software engineer hacks IndiGo airline's website to find his lost luggage after staff did not help". Smaller text below says: "The man had travelled from PAT - BLR from indigo 6E-185." The developer humor comes from a customer-support failure escalating into an improvised web-security investigation, where a passenger apparently gets better results from the website than from the airline process.

Common Tags

WebSecurity HackingTechniques SecurityVulnerabilities DataPrivacy SensitiveDataExposure BrokenAccessControl SecurityMisconfiguration BrowserDevTools CustomerSupport CorporateIrony RealWorldConsequences TechIndustrySatire

Comments

Anonymous ★ Top Pick Nothing motivates a penetration test like baggage support returning HTTP 404.

Anonymous ★ Top Pick

Nothing motivates a penetration test like baggage support returning HTTP 404.
dev_meme 4y

How Can u write Above Photo like that?
1. @mvolfik 4y
  
  There's two spaces at the beginning of the post that are a link to the image, which is stored on external server. And what we see is a preview
  
  @mvolfik 4y
  
  I'm not sure if it's possible to do this manually or you need a bot that uses the API to send such messages though
@beton_kruglosu_totchno 4y

Did they succeed tho?
@avaik 4y

if someone is interested in this "hack" details, here you go: https://mobile.twitter.com/_sirius93_/status/1508423479594733568
1. @AmindaEU 4y
  
  thanks all, https://mobile.twitter.com/_sirius93_/status/1508432531183779840
@beton_kruglosu_totchno 4y

>presses F12 >hacks by that measure my jail time is long overdue
1. @RiedleroD 4y
  
  nono, he doesn't just press F12 he presses Ctrl+Shift+i 🙃
  
  @beton_kruglosu_totchno 4y
  
  imagine the audacity
  
  @RiedleroD 4y
  
  I don't have to imagine
  
  @feedable 4y
  
  manjaro
  
  @RiedleroD 4y
  
  no, base arch
  
  @feedable 4y
  
  nice
@AmindaEU 4y

Was the luggage found?
1. @RiedleroD 4y
  
  yes, the luggage was swapped with someone elses' and the 'hacker' found out the other person's phone number (via html inspect 🤦), called them and fixed the luggage problem
  
  @RiedleroD 4y
  
  that was after they called the airport multiple times btw - the airport didn't even bother calling the other person