Air France-KLM 6-char short code\nWhat could go wrong?\nWhat did go wrong more...\n\nAir France-KLM was vulnerable because they used 6-char short codes in links for text messages. No security question was needed to read detailed trip data, including names, ticket prices, and sometimes passport data and visa data.\nHow large was the breach?\nWhat more was 'interesting'?\nIs it now fixed?\nList of failures and questions.\nabout this event: https://pretalx.c3voc.de/37c3-lightningtalks/talk/YWW3XY/