Hacking Ticketmaster(spectrum.ieee.org)
spectrum.ieee.org
Hacking Ticketmaster
http://spectrum.ieee.org/tech-talk/telecom/security/hacking-ticketmaster
6 comments
There are plenty of good reasons for selling tickets at lower-than-necessary prices on a first-come, first-served basis. If tickets were sold at market price (or auctioned off), they would tend to go to more affluent--and likely then older--customers. If they were sold by lottery, then they would be distributed to random customers.
However, ticket sellers want to sell to younger customers who are more likely to become loyal fans, buy merchandise, promote to friends, etc. The low prices help attract younger customers who likely are not as well off, and the first-come, first-serve policy tends to weed out customers who only have a marginal interest (and thus would not serve as loyal fans).
This isn't to say that this business model is the best; just to point out that there are more considerations than the volume of tickets sold or fairness in the sales.
However, ticket sellers want to sell to younger customers who are more likely to become loyal fans, buy merchandise, promote to friends, etc. The low prices help attract younger customers who likely are not as well off, and the first-come, first-serve policy tends to weed out customers who only have a marginal interest (and thus would not serve as loyal fans).
This isn't to say that this business model is the best; just to point out that there are more considerations than the volume of tickets sold or fairness in the sales.
I'm curious, is there a lottery-based alternative to TicketMaster? Or an option to use lottery rather than FCFS within TicketMaster?
If not, I think that would be a great project for a handful of enterprising engineers. There would be some legal and payment-related related problems to solve, I'm sure, as well as whatever barriers are supporting TicketMaster's current monopoly. But if there were ever a foothold for a new contender to take them on, this seems like it.
If not, I think that would be a great project for a handful of enterprising engineers. There would be some legal and payment-related related problems to solve, I'm sure, as well as whatever barriers are supporting TicketMaster's current monopoly. But if there were ever a foothold for a new contender to take them on, this seems like it.
a) The barriers supporting Ticketmaster's current monopoly are pretty significant - mainly, exclusivity deals with venues. Ironically, the most successful challenge thus far has come from LiveNation... which managed to one-up Ticketmaster in some markets by owning both venues and artists. (And is now trying to merge with Ticketmaster, pending fairly blatant antitrust issues).
b) Interesting sidenote: in its day, Ticketmaster was the tech-savvy upstart, aggressively competing on both the business and tech side with the then-dominant Ticketron. (That's not to say that they're not a monopolist ripe for the picking...)
b) Interesting sidenote: in its day, Ticketmaster was the tech-savvy upstart, aggressively competing on both the business and tech side with the then-dominant Ticketron. (That's not to say that they're not a monopolist ripe for the picking...)
I don't understand how this counts as fraud. Ticket master got paid for their tickets by the purchasers right?
Today at Old Navy they were offering 20% off my jeans if I gave them my email address. Should I go to jail for giving them an invalid one?
Today at Old Navy they were offering 20% off my jeans if I gave them my email address. Should I go to jail for giving them an invalid one?
That's exactly the rub, proving that this is fraud, or creating new legislation that make it fraud, is very difficult.
I hope you at least agree that they do not provide a service of any kind? They grab a limited resource and resell it, while adding no value whatsoever. They just grab it first and capitalize on the difference between the long-term and short-term best market prices for tickets.
I'd say the best solution to the problem is simply to take the thing partially offline again. Botnets can always out-crowd users, but you can't outcrowd actual people.
I hope you at least agree that they do not provide a service of any kind? They grab a limited resource and resell it, while adding no value whatsoever. They just grab it first and capitalize on the difference between the long-term and short-term best market prices for tickets.
I'd say the best solution to the problem is simply to take the thing partially offline again. Botnets can always out-crowd users, but you can't outcrowd actual people.
OK, I'm being tongue-in-cheek here, but aren't they providing value by making the market more efficient? ;) That is, they're providing a service to the music industry and the artists it represents by enabling ticket prices to reflect their true value rather than some artificially-capped value.
I don't really believe this of course, but from a 10,000 ft view, it's not such a different argument from the one hedge fund folks would make to justify the "value" they create. Yes, I realize the two situations are different, but there's still a point to be made somewhere in there.
I don't really believe this of course, but from a 10,000 ft view, it's not such a different argument from the one hedge fund folks would make to justify the "value" they create. Yes, I realize the two situations are different, but there's still a point to be made somewhere in there.
If their customers are not satisfied, it is a problem for the online ticket sellers, and at least one service the Wiseguys are providing is that the ticket sellers must keep innovating to figure out a better way to serve their customers.
Why don't the ticket sellers just eliminate the middle-men (the Wiseguys) and just do what they are doing?
Pretty simple why it's illegal. They made up fake people, contact info, and email addresses that weren't tied to real people. The terms of the site don't allow that and when you are buying tens of thousands of tickets, people tend to notice.
Since when it making up fake contact info illegal? It is not a criminal offense to breech the terms of a website (unless the offense is criminal in the first place).
There must be more to this story.
There must be more to this story.
Buried in the details of the indictment, they show Wiseguys had a reciprocating agreement with downstream broker clients to provide virgin credit cards used in the bulk ticket purchases. i.e. Give me a clean card with a high($100k+) limit, and pay an X% "service charge", then I'll buy you any tickets you want using my scalper-bot-net.
I'm not sure what the exact rules are for requiring a real identity to be linked to a corporate credit card. In this case, the broker's corp cards were not being used in the same way a typical employee would expense a purchase to the business. Rather, Wiseguys was just making up fake identities, and providing their own employees real identities for cards(this was the mistake that got them noticed). All of this is pretty straight forward financial fraud on the banking side of things, and not Ticketmaster's ToS.
I'm not sure what the exact rules are for requiring a real identity to be linked to a corporate credit card. In this case, the broker's corp cards were not being used in the same way a typical employee would expense a purchase to the business. Rather, Wiseguys was just making up fake identities, and providing their own employees real identities for cards(this was the mistake that got them noticed). All of this is pretty straight forward financial fraud on the banking side of things, and not Ticketmaster's ToS.
I have the same question as when this story: http://news.ycombinator.com/item?id=648578 was posted.
Why would anyone ever do this while operating from the United States? There are countries with much laxer law enforcement. And, as a bonus, $6 million/person will go a lot farther in most of those countries.
Why would anyone ever do this while operating from the United States? There are countries with much laxer law enforcement. And, as a bonus, $6 million/person will go a lot farther in most of those countries.
[deleted](1)
Stuff like this was part of the reason some artists (including Springsteen) started experimenting with "paperless ticketing" (i.e. they check the purchaser's ID at the gate, so it's basically impossible, or at least significantly harder, to resell tickets).
Jeeze...sleazebags hacking sleazebags.
I saw the headline and thought "cool!", but then read the article and was disappointed -- I'd been hoping for some kind of stick-it-to-the-man, fight-the-monopoly sort of thing...sigh.
Personally, I've just got ticketmaster.com mapped to an invalid IP address in /etc/hosts -- reminds me not to give them any money (or traffic, for that matter).
I saw the headline and thought "cool!", but then read the article and was disappointed -- I'd been hoping for some kind of stick-it-to-the-man, fight-the-monopoly sort of thing...sigh.
Personally, I've just got ticketmaster.com mapped to an invalid IP address in /etc/hosts -- reminds me not to give them any money (or traffic, for that matter).
Perhaps ticket sellers should keep the very best seats and auction them off, uncapping their price. The rest could be put in a lottery, and kept open for two weeks or so. Then, only fans who win tickets pay money for them, for a low and accessible price. That would be far fairer than the current first-come first-served, overload the server system. You could also introduce a delay between closing the lottery and announcing the results, giving you time to scan for bot submissions.