Skip to content
Thoughtful, detailed coverage of everything Apple for 34 years
and the TidBITS Content Network for Apple professionals

Why Posting Boarding Pass Photos Is a Bad Idea

Many people are blasé about posting photos that include personally identifiable information, but it’s a dangerous thing to do. If you can, set aside some time for a long, thoroughly entertaining read by the hacker known as “Alex.” You’ll learn how he figured out former Australian prime minister Tony Abbott’s passport number and phone number from an Instagram post Abbott made that included a boarding pass. That it was going to be a fun read became apparent early on, when Alex comments:

For security reasons, we try to change our Prime Minister every six months, and to never use the same Prime Minister on multiple websites. (Except Kevin Rudd, but that was one time and we were kinda going through some stuff. )

Alex walks the reader through exactly how he went from seeing a photo of Abbott’s boarding pass to figuring out that the Qantas website stored the traveler’s passport and phone number in the HTML code of the booking management page, readily accessible to anyone by right-clicking and choosing Inspect Element. Once he found this data, he started to worry about whether or not he had committed a crime, how to notify Tony Abbott of the situation, the best way to alert Qantas to the security breach (it’s fixed now), and if he could get permission to write about it.

Long story short, he achieved all this without going to prison. But seriously, read the post and think about what you upload for the world to see. Because the person who finds what you post might not be as ethical as the hacker known as “Alex.” 

Tony Abbott's boarding pass

Read original article

Subscribe today so you don’t miss any TidBITS articles!

Every week you’ll get tech tips, in-depth reviews, and insightful news analysis for discerning Apple users. For over 33 years, we’ve published professional, member-supported tech journalism that makes you smarter.

Registration confirmation will be emailed to you.

This site is protected by reCAPTCHA. The Google Privacy Policy and Terms of Service apply.

Comments About Why Posting Boarding Pass Photos Is a Bad Idea

Notable Replies

  1. Why would anybody want to post the photo of the boarding pass for the whole world to see? I don’t get it.

  2. Seriously! Did you see the screenshot in the article where he showed that over 120,000 posts on Instagram have the #boardingpass hashtag?

  3. Such a fascinating and entertaining read! Thanks for linking. Laughed out loud several times…

  4. “We like to change out PM every 6mths for security reasons…” – lol! :laughing:

Join the discussion in the TidBITS Discourse forum


Avatar for ace Avatar for ryoichi Avatar for paulmackey90 Avatar for jimthing