How we tried to book a train ticket and ended up with a databreach with 245,000 records
zerforschung.org
Dieser Artikel ist auch auf deutsch erschienen To celebrate Franco-German friendship, German Transport Minister Wissing and his French counterpart Beaune came up with something special: 30,000 free Interrail tickets per country for travel in Germany and France for young adults between 18 and 27. Codename: “Passe France Allemagne” However, many things went wrong when the Interrail passes were distributed. In the following, we want to take you on a journey through the stages of the not-so-well-implemented ticket and show you how you could still get a pass after registration ended. And while we’re on the tracks, we’ll also have a look at a security breach in a similar project at the EU level. Implemented by the same agency - which left the data of about 245,000 registrations almost unprotected on the web. Please stand clear of the doors – we’re departing! 🚄🚃🚃🚃🚃
  • rknuu@beehaw.orgOP
    8·
    1 year ago

    While the breach is unfortunate, I always enjoy these kind of posts where a seemingly innocent exploration on what a site is doing and “what if” questioning becomes a chain of “holy crap, what did we just find”. Just shows that your data can be just one curl statement away from being lost.

  • median_user@lemmy.one
    4·
    1 year ago

    It does seem like things are getting slowly better in the sense that, ten years ago, this post would probably end with them being completely ignored or receiving some kind of legal threat. But it would be much nicer if companies could just stop. leaking. personal. data.