The Daily Star's FREE newsletter is spectacular! Sign up today for the best stories straight to your inbox Sign up today! Thank you for subscribing See our privacy notice Invalid Email

(Image: GETTY)

It is a well known fact one of the most frustrating parts of travel is all the waiting around we do before our flight leaves.

Once we've checked in and gone through security, the two-or-so hours in-between seem to drag on forever. So, you decide to make all your pals jealous about your impending holiday by posting a picture of your boarding pass, passport with a magazine and/or book in some sort of aesthetic arrangement to social media.

Yet, it may be time to reconsider if it's really worth giving your friends a bit of envy.

By posting a picture of your boarding pass, you could be revealing a dangerous amount of personal information.

Cybercrime and computer security specialist, Brian Krebs recently wrote about a reader of his blog, KrebsOnSecurity, who investigated how much information he could extract from a boarding pass his friend uploaded to Facebook.

“I found a website that could decode the data and instantly had lots of info about his trip,” the reader, Cory, said.

“Besides his name, frequent flyer number and other [personally identifiable information], I was able to get his record locator (a.k.a. “record key”) for the Lufthansa flight he was taking that day. I then proceeded to Lufthansa’s website and using his last name (which was encoded in the barcode) and the record locator was able to get access to his entire account."

"Not only could I see this one flight, but I could see ANY future flights that were booked to his frequent flyer number from the Star Alliance.”

Brian wrote the access granted by the airline's site also gave Cory the ability to view, edit and cancel all future flights associated with that account.

(Image: GETTY)

By posting a picture of your boarding pass, you may also be making it easier for someone to reset your passwords.

"That information [from the boarding pass] gets you past the early process of resetting a Star Alliance account PIN at United Airline’s 'forgot PIN' website,” Brian wrote.

“After that, the site asks for the answer to a pre-selected secret question. The question in the case of Cory’s friend was “What is your Mother’s maiden name?” That information can often be gleaned by merely perusing someone’s social networking pages (e.g., does your aunt or uncle on your mum’s side have your mother’s maiden name as their last name? If so, are they friends with you on Facebook?)”

Unless you want your flights changed a a whole lot of personal information divulged, it may be time to reconsider posting that not-so-humble brag.