Qantas App issues?

[smckay]

Definitely an ongoing issue. I was just able to access someone’s boarding pass for a flight departing in a few hours.

Me too. I’ve just had 2 name changes in 5 minutes

 

[RSD]

I'm still me so I'm not going anywhere, and it looks like I'm going to have to contact them to get them to apply my DSC so as I am back being Gold again!

 

[smckay]

Hope this one hangs around

 

[60165636]

In the last 5 minutes I have cycled through 4 different peoples' accounts and boarding passes - definitely NOT resolved.

 

[Point Ventures]

I hope Eliza gets her Standby Seat

 

[logicallysynced]

This one’s a bit concerning too

 

[SeatBackForward]

Alana, Xiaoming, Eliza...we need backstories for these people, c'mon AFF lets give these people the stories they deserve!

 

[knightfall88]

i can even see other customers details without logging in to my own account

 

[smckay]

Logged out by the app. Logged back in again.
Who pays for a seat???

 

[airlinemn]

Back at it again.

It literally lets you do everything from bid to an upgrade to cancel to change seats.

Hopefully no evil person out there cancels my rewards J seat to LAX and rebook it for themselves!

 

[knightfall88]

if something happens to my bookings..

 

[encryptededdy]

It would be interesting to understand why it's happening to some and not to others - that is, what's the commonality of those affected.

My completely uneducated opinion/guess is that it's likely to be some sort of cache misconfiguration on Qantas servers (or them misconfiguring whatever cloud solution they're using in front)

• It would explain why it's only one page - they probably want to cache the data used on the main page to reduce server load of people loading up the app
• If only iOS users are experiencing this, then maybe only the iOS app has been updated to use the cache
• I would hope that any actions that actually "write" anything and would otherwise require log-in don't actually work, but who knows.
  • Maybe the cached response includes an auth token to log you into MMB etc. in case you click one of those buttons?
  • Otherwise I'd generally expect every other API call to fail (e.g. transferring points)
  • If you're in another user's account and click manage booking, is that webview session actually logged into their QFF account (top right)?
• It explains why most people are seeing screens of people with upcoming flights / boarding pass - if it was random, then you'd expect 99+% of QFF members to not have a currently active boarding pass
  • People with a flight soon are more likely to open the app, therefore their data is more likely to be cached

 

[smckay]

I think QF are in for a lot of static over this. I’ve got a lot of bookings and points currently and I don’t want any one seeing them and being able to change.
The people I was seeing had flights booked in September so it’s not a ‘today’ thing

 

[airlinemn]

What would be the process to follow if someone had a random cancel their booking?

 

[Cloud9]

I think QF are in for a lot of static over this. I’ve got a lot of bookings and points currently and I don’t want any one seeing them and being able to change.
The people I was seeing had flights booked in September so it’s not a ‘today’ thing

Yeah, but whether or not Qantas give a f*ck is a different matter...

 

[Point Ventures]

Back at it again.

It literally lets you do everything from bid to an upgrade to cancel to change seats.

Hopefully no evil person out there cancels my rewards J seat to LAX and rebook it for themselves!

Including view/edit APIS data which includes Passport Number and DOB

 

[smckay]

Yeah, but whether or not Qantas give a f*ck is a different matter...

Oh they will be very sorry
After 3.75 hours on hold
Multiple OS call centre staff asking what is the actual problem
HBA unable to authorise anything without a Senior
All Seniors currently ‘busy’

 

[Franky]

Yeah, but whether or not Qantas give a f*ck is a different matter...

I had a quick look at the Privacy Commissioner's potential role in this, however it seems they are only responsible for government departments.

 

[SeatBackForward]

I had a quick look at the Privacy Commissioner's potential role in this, however it seems they are only responsible for government departments.

I'm sure the Qantas board are already talking to their old boys buddy pals over at medibank to see how they can make sure their third luxury yacht is protected from this event.

 

[smckay]

I had a quick look at the Privacy Commissioner's potential role in this, however it seems they are only responsible for government departments.

The Daily Scaregraph in their story about Bonza stated QF had Govt support.
“The precedent has been set, M’Lord”