{
  "id": 19633415,
  "title": "London hotel put admin login for booking website on whiteboard behind the front desk",
  "url": "https://urgent.news/2026/11/12/london-hotel-put-admin-login-for-booking-website-on-whiteboard-behind-19633415",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-11-12T09:30:00.000Z",
  "source": {
    "name": "The Register",
    "slug": "the-register",
    "url": "https://www.theregister.com/security/2026/11/12/london-hotel-put-admin-login-for-booking-website-on-whiteboard-behind-the-front-desk/5308889"
  },
  "original_language": "en",
  "account": "In a recent incident at a London hotel, administrative login details for a booking website were displayed on a whiteboard located behind the front desk, accessible to anyone who passed by. Neycho Tepavicharov, co-founder of Flashcloud, a Delaware-based web hosting company, noticed this security lapse during his stay. The whiteboard displayed a plain English listing of the Booking.com administrative username and password, making it easy for anyone to observe and potentially misuse. Tepavicharov explained that with this login, an attacker could change or cancel reservations, access guest details, or send fake payment confirmations. He promptly informed the hotel manager about the risk, who was \"mortified and very grateful\" upon learning of the oversight. The hotel promptly changed its security practices and transferred its website to Tepavicharov's hosting service. Tepavicharov emphasized the importance of assigning dedicated credentials to each user, implementing multi-factor authentication, and storing passwords in a password manager rather than publicly displaying them.",
  "summary": "You could check out more than your room",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}