Instead, the booking code (aka PNR Locator, a 6-digit alphanumeric string such as 8EI29V) is used to access and change travelers' information." The researchers also highlighted the very same issue found by Rotem in the Amadeu system: a lack of brute-force protection. ...