Hacker News Reader

throwaway019254

> Monday (November 21st) the airline was made aware of the issue

> Wednesday (November 23rd) resolution has already been tested and deployed

That's a pretty nice response time - compared to some big companies that are asking security researchers to not disclose vulnerability for six months.

View on HN

Yeah is really refreshing, I was expecting the worst like the OP getting banned/sued by the airline and detained by the TSA.

If I was the author, I'd be kept up at night by the idea of being kidnapped in the middle of the night and whisked off to some black site, however likely or unlikely that is.

Especially since the vuln was in a third-party system so the airline couldn't push a fix themselves.

Depends on if it was a security issue or a config issue. From the end user's perspective they can look the same.

This was a bug in the WiFi portal’s api. No need for the airline to fix anything. It simply affected their customers.

Good job!

Reply on news.ycombinator.com