Airlines deny responsibility for information leak   

多家航空公司信息泄露漏洞被公布 回應(yīng):均不賣帳

記者昨天在烏云網(wǎng)上看到，僅1月29日一天就有5條涉及航空公司的漏洞得到公司確認(rèn)，內(nèi)容涉及：航空公司B2C系統(tǒng)淪陷，千萬機票信息可以查看；民航出入境API系統(tǒng)邏輯缺陷，導(dǎo)致出入境實時數(shù)據(jù)泄露；航空公司內(nèi)部員工郵箱賬號和密碼泄露，可登錄公司內(nèi)部郵件系統(tǒng)。不過，漏洞的細(xì)節(jié)并未進(jìn)入到公開流程，還處于保密階段。 [查看全文]

(ECNS) -- Several Chinese airlines have denied being responsible for a leak of passenger information, China National Radio reported on Monday.

The leaked data include user names, ID numbers, mobile numbers, and airline information, posing a critical threat to consumer safety, according to a report by WooYun.org, a renowned third-party Internet security platform.

The airline companies have confirmed the news, but denied responsibility, saying that the data were leaked through other channels and not their websites. 

China Eastern Airlines said information must have been hacked into via third parties seeing as its own payment system does not have any security flaws.

Xiamen Airlines said it has stopped using the targeted ticketing system for two years, explaining that the WooYun report "overstated the data leak."

TravelSky Technology, a leading provider of information technology solutions for China's air travel and tourism industries, was also accused of security problems. Bo Manhui, company general manager, noted that their database is thoroughly encrypted and that they regularly check for any hidden flaws on their website.

Wu Di, a co-director at WooYun, insisted that their report gave an accurate picture of the situation.

Management vulnerability, including information sold by insiders, could result in leaks, while flaws in online systems could also cause trouble, Wu said.

Zhao Wu, an expert with 360 Safe Global, stressed that online vulnerability would still exist despite developments in network security, allowing hacking to occur.