Now TV:【新聞極客】旅遊網站存保安漏洞 個人資料或外洩

After the incident of Worldwide Package Travel Service Ltd (縱橫遊, WWPKG), public raises concerns about the security of their personal data obtained by travel agencies. NOW TV invited VXRL researchers, Anthony Lai and Alan Ho, to test the security of the websites of local travel agencies. We discovered that many of the websites have insufficient privacy protection when transmitting sensitive personally identifiable information (PII) including name and passport number. We demonstrated that it is possible for an attacker to steal sensitive information from users of these websites using a fake Wi-Fi.