{"guid":"a39bddee-bc44-59aa-8198-2bd67db53102","title":"Air France-KLM 6-char short code","subtitle":null,"slug":"37c3-lightningtalks-58027-air-france-klm-6-char-short-code","link":"https://pretalx.c3voc.de/37c3-lightningtalks/talk/YWW3XY/","description":"Air France-KLM 6-char short code\nWhat could go wrong?\nWhat did go wrong more...\n\nAir France-KLM was vulnerable because they used 6-char short codes in links for text messages. No security question was needed to read detailed trip data, including names, ticket prices, and sometimes passport data and visa data.\nHow large was the breach?\nWhat more was 'interesting'?\nIs it now fixed?\nList of failures and questions.","original_language":"eng","persons":["Benjamin W. Broersma"],"tags":["37c3","58027","2023","Security",""],"view_count":1227,"promoted":false,"date":"2023-12-28T16:50:00.000+01:00","release_date":"2023-12-28T00:00:00.000+01:00","updated_at":"2026-04-12T15:00:05.091+02:00","length":315,"duration":315,"thumb_url":"https://static.media.ccc.de/media/congress/2023/58027-a39bddee-bc44-59aa-8198-2bd67db53102.jpg","poster_url":"https://static.media.ccc.de/media/congress/2023/58027-a39bddee-bc44-59aa-8198-2bd67db53102_preview.jpg","timeline_url":"https://static.media.ccc.de/media/congress/2023/58027-a39bddee-bc44-59aa-8198-2bd67db53102.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/congress/2023/58027-a39bddee-bc44-59aa-8198-2bd67db53102.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/37c3-lightningtalks-58027-air-france-klm-6-char-short-code","url":"https://media.ccc.de/public/events/a39bddee-bc44-59aa-8198-2bd67db53102","conference_title":"37C3: Lightning Talks \u0026 Clips","conference_url":"https://media.ccc.de/public/conferences/37c3-meta","related":[],"recordings":[{"size":23,"length":315,"mime_type":"video/webm","language":"eng","filename":"37c3-meta-58027-eng-Air_France-KLM_6-char_short_code_webm-hd.webm","state":"new","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2023-12-28T21:37:05.141+01:00","recording_url":"https://cdn.media.ccc.de/congress/2023/clips/webm-hd/37c3-meta-58027-eng-Air_France-KLM_6-char_short_code_webm-hd.webm","url":"https://media.ccc.de/public/recordings/72430","event_url":"https://media.ccc.de/public/events/a39bddee-bc44-59aa-8198-2bd67db53102","conference_url":"https://media.ccc.de/public/conferences/37c3-meta"},{"size":11,"length":315,"mime_type":"video/webm","language":"eng","filename":"37c3-meta-58027-eng-Air_France-KLM_6-char_short_code_webm-sd.webm","state":"new","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2023-12-28T21:24:01.984+01:00","recording_url":"https://cdn.media.ccc.de/congress/2023/clips/webm-sd/37c3-meta-58027-eng-Air_France-KLM_6-char_short_code_webm-sd.webm","url":"https://media.ccc.de/public/recordings/72415","event_url":"https://media.ccc.de/public/events/a39bddee-bc44-59aa-8198-2bd67db53102","conference_url":"https://media.ccc.de/public/conferences/37c3-meta"},{"size":8,"length":315,"mime_type":"video/mp4","language":"eng","filename":"37c3-meta-58027-eng-Air_France-KLM_6-char_short_code_sd.mp4","state":"new","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2023-12-28T21:20:43.073+01:00","recording_url":"https://cdn.media.ccc.de/congress/2023/clips/h264-sd/37c3-meta-58027-eng-Air_France-KLM_6-char_short_code_sd.mp4","url":"https://media.ccc.de/public/recordings/72410","event_url":"https://media.ccc.de/public/events/a39bddee-bc44-59aa-8198-2bd67db53102","conference_url":"https://media.ccc.de/public/conferences/37c3-meta"},{"size":3,"length":315,"mime_type":"audio/opus","language":"eng","filename":"37c3-meta-58027-eng-Air_France-KLM_6-char_short_code_opus.opus","state":"new","folder":"opus","high_quality":false,"width":0,"height":0,"updated_at":"2023-12-28T21:20:22.638+01:00","recording_url":"https://cdn.media.ccc.de/congress/2023/clips/opus/37c3-meta-58027-eng-Air_France-KLM_6-char_short_code_opus.opus","url":"https://media.ccc.de/public/recordings/72409","event_url":"https://media.ccc.de/public/events/a39bddee-bc44-59aa-8198-2bd67db53102","conference_url":"https://media.ccc.de/public/conferences/37c3-meta"},{"size":4,"length":314,"mime_type":"audio/mpeg","language":"eng","filename":"37c3-meta-58027-eng-Air_France-KLM_6-char_short_code_mp3.mp3","state":"new","folder":"mp3","high_quality":false,"width":0,"height":0,"updated_at":"2023-12-28T21:19:34.639+01:00","recording_url":"https://cdn.media.ccc.de/congress/2023/clips/mp3/37c3-meta-58027-eng-Air_France-KLM_6-char_short_code_mp3.mp3","url":"https://media.ccc.de/public/recordings/72407","event_url":"https://media.ccc.de/public/events/a39bddee-bc44-59aa-8198-2bd67db53102","conference_url":"https://media.ccc.de/public/conferences/37c3-meta"},{"size":17,"length":315,"mime_type":"video/mp4","language":"eng","filename":"37c3-meta-58027-eng-Air_France-KLM_6-char_short_code_hd.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2023-12-28T21:19:02.822+01:00","recording_url":"https://cdn.media.ccc.de/congress/2023/clips/h264-hd/37c3-meta-58027-eng-Air_France-KLM_6-char_short_code_hd.mp4","url":"https://media.ccc.de/public/recordings/72405","event_url":"https://media.ccc.de/public/events/a39bddee-bc44-59aa-8198-2bd67db53102","conference_url":"https://media.ccc.de/public/conferences/37c3-meta"}]}