The leak of the source code of web services "Aeroflot"

Unknown published on GitHub the source codes of Aeroflot web applications · including the code responsible for charging bonuses and creating gift certificates. Leakage due to negligence —...

The leak of the source code of web services "Aeroflot"

Unknown published on GitHub the source codes of Aeroflot web applications, including the code responsible for charging bonuses and creating gift certificates. The leak occurred due to negligence - the server with the Docker container registry was accessible to everyone via HTTP without authorization and encryption.

(source of images - The Register )

Containers were used to deploy services of the site aeroflot.ru. User data, fortunately, was not affected.

The researcher who published the source code hopes that Aeroflot will start paying more attention to information security.

Update 1: The company replied that these containers have not been used for several years and do not contain actual data. However, this is doubtful , since some files were changed in August of this year.

Tags:

Tags

#Unknown published on GitHub the source codes of Aeroflot web applications #including the code responsible for charging bonuses and creating gift certificates. Leakage due to negligence —...

Read Next

Euro-Office: alternative to Microsoft for Europe

Euro-Office: alternative to Microsoft for Europe

The European office suite Euro-Office ensures compatibility with Microsoft formats and digital sovereignty. Test the preview on GitHub, join the development. For IT specialists and organizations.

ChatGPT Courses 2026: Top Programs for IT

ChatGPT Courses 2026: Top Programs for IT

Neural Network Courses Comparison 2026: Skypro, Stepik, PROFIFUTURE. Salaries from 80 thousand rub., prompt engineering skills and API. Choose a program for a career in AI — read the review.

AI Infrastructure Wrapper: 2026 Trends for Developers

AI Infrastructure Wrapper: 2026 Trends for Developers

How stateful agents are changing the approach to AI development. Methods for controlling non-deterministic systems and safe integration into enterprise. Learn first.

AI Forms a Profile from Dialogues: Risks and Benefits

Learn how neural networks collect user data from conversations, creating personal portraits. Analysis of benefits in medicine and privacy threats. Read about the future of AI memory.

DiffQuant: Sharpe optimization in a differentiable simulator

DiffQuant: Sharpe optimization in a differentiable simulator

Learn how DiffQuant optimizes Sharpe ratio directly through PyTorch graph taking costs into account. iTransformer, hybrid loss, mirror augmentation. Results on BTC: Sharpe +1.73 OOS. For ML engineers in trading.

OpenAI Anthropic Conflict: Leaders and AI

OpenAI Anthropic Conflict: Leaders and AI

Learn how the decade-long conflict between Altman, Brockman, and Amodei affects AI development, safety, and defense contracts. Analysis for IT specialists.

Universal Quantum: $100 million to unite quantum chips and a threat to giants

Universal Quantum: $100 million to unite quantum chips and a threat to giants

Why did the British startup Universal Quantum raise $100 million for modular quantum chips? Analysis of bypassing physical barriers, SPAC traps, and a bet on Europe. Read.

Split Deck in MTG: fix for mana flood

Split Deck in MTG: fix for mana flood

Split the MTG deck into lands and spells for stable play. Detailed rules, examples from Edge of Eternities, mill/draw balance. Ideal for casual and tournaments.

Ballistics modeling with Cx(M) and ρ(h) in Python

Ballistics modeling with Cx(M) and ρ(h) in Python

Numerical solution of external ballistics problem with Cx depending on Mach and air density on altitude. RK4, Python code, results: 29 km range. For developers.

DRAGOn: test of RAG systems on dynamic data

DRAGOn: test of RAG systems on dynamic data

Learn about DRAGOn — an open methodology for testing Russian-language RAG. Dynamic corpora, logical tasks, leaderboard. Deploy tests on your own data for senior developers.