Ryanair Shrugs Off Discovery That Others Can Edit Your Flight Booking; Says It's Your Problem

from the oh-really-now? dept

European discount airline Ryanair is somewhat famous for their near total lack of concern about customer happiness. The airline, at times, seems almost gleeful about the complaints it gets from customers. Still, it seems to go pretty far to completely shrug off a security hole that allows others to edit your bookings (found via Glyn Moody). Basically, some researchers discovered that if you know someone's email address and the date (and locations) that they're planning to fly, you can access their account and even adjust and manipulate the bookings. That's because the site apparently does not use passwords, but just those bits of information. What's really stunning is Ryanair's response:
"Your 'experts' are talking complete rubbish. If someone's lunatic ex-partner wants to access a flight booking and pay for priority boarding or extra baggage for the person they just split up from then they all have a lot more to worry about than a simple amended flight booking. It is everyone's individual responsibility to keep their personal information personal."
That's from Ryanair spokesman Daniel de Carvalho. Anyone taking bets on how long until someone changes one of de Carvalho's own flight bookings?
Hide this

Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.

Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.

While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.

–The Techdirt Team

Filed Under: booking, hacking, passwords
Companies: ryanair

Reader Comments

Subscribe: RSS

View by: Time | Thread

  1. identicon
    Cowardly Anon, 3 Feb 2011 @ 10:34am


    Obviously people should just make a new email for when they wish to fly suing Ryanair.....

Add Your Comment

Have a Techdirt Account? Sign in now. Want one? Register here

Subscribe to the Techdirt Daily newsletter

Comment Options:

  • Use markdown. Use plain text.
  • Make this the First Word or Last Word. No thanks. (get credits or sign in to see balance)    
  • Remember name/email/url (set a cookie)

Follow Techdirt
Sponsored Promotion
Public Money, Public Code - Sign The Open Letter at publiccode.eu
Essential Reading
Techdirt Deals
Report this ad  |  Hide Techdirt ads
Techdirt Insider Chat
Recent Stories

This site, like most other sites on the web, uses cookies. For more information, see our privacy policy. Got it

Email This

This feature is only available to registered users. Register or sign in to use it.