Quote:
Originally Posted by comcor
It hadn't actually worked the last couple of times I used it anyway.
|
There have frequently been reader issues when you remove the card. With practice it works. There where issues back March/April 2010 but thats long resolved
Quote:
IMO It's more secure than entering the order ID. At least you have to have the original credit card to get them.
You could almost certainly pick up someone else's order just by incrementing the order ID. I doubt there are any complicated algorithm's for generating them based on checksum conditions etc. and that's before you get into the fact that emails are passed around unencrypted.
|
You can't fake the reservation id's they are secure, the first three digits comprise a security code the remainder are a sequence number (not sequential either) which you can play with. That feature was added about a year ago for security, It is not a checksum and it isn't random but its independent of the remaining digits, so hack away
To pick up tickets you used to be able to use the card. It was trivial to fake a card to collect the tickets. I can't explain in public the way to break the system but it would be easy enough.
The UK system requires a alphanumeric code and card you are tied to a specific station. Its disappointing to see this change but equally I'm told there is an ongoing war on fraud