{
  "id": 19633019,
  "title": "London hotel put admin login for booking website on whiteboard behind the front desk",
  "url": "https://urgent.news/2026/11/12/london-hotel-put-admin-login-for-booking-website-on-whiteboard-behind",
  "topic": "science",
  "section": "Science",
  "published": "2026-11-12T09:30:00.000Z",
  "source": {
    "name": "The Register Science",
    "slug": "the-register-science",
    "url": "https://www.theregister.com/security/2026/11/12/london-hotel-put-admin-login-for-booking-website-on-whiteboard-behind-the-front-desk/5308889"
  },
  "original_language": "en",
  "account": "In a surprising incident, a hotel in London displayed its Booking.com administrative login details on a whiteboard located behind the front desk for everyone to see. Neycho Tepavicharov, co-founder of Flashcloud, noticed this lapse in security while staying at the hotel. The whiteboard displayed the login username and password in plain English, making it easy for anyone passing by to view the information. With these credentials, a malicious individual could potentially manipulate reservations, access guests' personal details, or send deceptive messages, leading to scams. Tepavicharov alerted the hotel manager about the situation, who was shocked and appreciative of the warning. The manager promptly changed the hotel's security practices and even transferred the website to Tepavicharov's hosting service, Flashcloud. The incident highlights the importance of assigning unique login credentials to each user and implementing multi-factor authentication to enhance security. Tepavicharov emphasizes that shared logins often end up written in easily accessible places, such as whiteboards, and recommends using a password manager instead.",
  "summary": "You could check out more than your room",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}