Finding Tony Abbott's passport number and entering the Do Not Get Arrested Challenge 2020

Presented at CrikeyCon VII (2021), March 6, 2021, 4:45 p.m. (45 minutes)

I found Tony Abbott's passport number in the HTML of Qantas' "manage booking" page. The manner in which I found it did not possess ANY intent to subvert the Commonwealth of Australia. Wanting to do the right thing, I spent the next six months participating in the Do Not Get Arrested Challenge 2020, in which I try to tell the government about this in precisely the manner which avoids instant jail. Anyone thinking about participating in the 2021 challenge, my #1 tip is: do not do a crime. Things this talk is about: Boarding pass security, what happens when there isn't boarding pass security, the consequences of my actions, calling everyone in Australia one-by-one, desperately struggling to contact the right person for the disclosure of cyber treason, my Twitter DMs

Presenters:

• "Alex" / mangopdf   as "Alex" 'mangopdf'
  "Alex" is an Australian citizen with no convictions of cyber treason. Their hobbies include origami and Following the Law. They work on a Red Team, committing metaphorical crimes, and writing really really detailed confession letters. On the side, they organise purplecon, a gentle, pastel, inclusive security conference, but it's unclear whether the whole thing is like a joke, or what. Follow them on SoundCloud at https://mango.pdf.zone. In 1633 "Alex" was excommunicated by the Catholic Church for insisting the Earth revolves around the sun.

Similar Presentations:

• DEF CON 24 (2016) / How to get good seats in the security theater? Hacking boarding passes for fun and profit.