It can voyeurize ticket ID information

Snapshot QR code software in Apple Store profile screenshots.

Don't forget to tear off the QR code when the train ticket is discarded. It may reveal your identity information.


The real-name system ticket leaked identity card information and became a passenger's concern.

Recently, real-name train tickets quietly changed their face, hiding four ID numbers. The good news has not spread yet. The bad news is circulating on the Internet. When you install free software and take a photo with your mobile phone, the ID number is “recovered”.

The Commercial Daily reporter experimentally proved that the two-dimensional code is the culprit of the real-name system train ticket "leakage."

Face change real-name train ticket ID number hidden 4

On June 1st, trains and high-speed trains began to implement real-name ticket purchases. On the ticket surface, the passenger's name and ID number are clear at a glance.

It may reveal identity information, which has become a "security hole" in real-name train tickets. It has also become a hidden concern for many passengers. Tickets are not thrown away.

Fortunately, the train station ticketing system was upgraded, and the real-name train ticket changed its face.

On July 9th, Zhengzhou citizen Miss Li bought a Zhang Zhengxi high-speed rail ticket. The face of the ticket has changed, and the four digits of the birth month and date of the ID number have been replaced by "".

"Without four key figures, the ID card information will not be revealed." Miss Li secretly pleased that even if the ticket was lost, the ID card information will not be revealed.

“We have just received news that the ticketing system was upgraded two days ago. Several ID numbers were hidden on the high-speed rail and train tickets. This should be based on the protection of passengers’ personal information.” said Zhengzhou Railway Station News Center staff. . *

Vulnerability mobile phone swept QR code to "leak"

Regrettably, the news that the real-name train ticket changed face has not yet spread, and the new “security hole” on the train ticket was exposed.

The Internet is widely circulated, and the smart phone installed with a software can take out the ID number hidden on the high-speed rail ticket. The “leakage” is the QR code on the ticket.

Only need a software, the mobile phone can be transformed into a "decoder"?

Henan Business Daily reporter experimental verification rumors:

First of all, use iphone4 to download and install two-dimensional code decoding free software.

Then, the mobile phone starts the program, shoots at a high-speed rail ticket, and takes a picture about 10cm from the high-speed rail ticket. The software's green frame quickly locks the QR code, autofocus, and shoot. That agility is no less than the digital camera's smile-finding function.

In the end, three or four seconds later, the software reads out the two-dimensional code information: ID number, train ticket number, and driving time are all displayed on the screen of the mobile phone.

Secret why the two-dimensional code can leak

Why the two-dimensional code on train tickets leaked passenger information, the train station staff also did not understand.

The instructions for the free download of the QR code decoding software are explained very clearly: the QR code records data symbol information in a black and white pattern distributed in a plane (in a two-dimensional direction) using a certain geometric pattern. Through the image input device or photoelectric scanning device automatically read to achieve automatic processing of information. The two-dimensional code can express information simultaneously in both horizontal and vertical directions, so it can express a large amount of information in a small area.

A mobile phone equipped with a two-dimensional code decoding software is equivalent to a machine that scans two-dimensional codes, just like a scanner in a supermarket, and easily scans and decodes the information in these two-dimensional codes. For real-name train tickets, the two-dimensional code precisely contains such information as the ID number.

Do not pass QR code when throwing train tickets

If you discard your used real-name train tickets at will, you risk divulging personal information. Once the real-name system train tickets flow into the wrong hands, personal information may be leaked, giving criminals an opportunity.

It is hard to hope that the ID number will be "encrypted." The cell phone will be photographed and the ID number will appear. This really makes people worry.

The Commercial Daily suggested that we should not take any light on the security of real-name train tickets. Before throwing train tickets, we should also forget to tear down the two-dimensional code to prevent personal information from being stolen.