>http://www.net-security.org/secworld.php?id=14733
>> An extremely well attended talk by Hugo Teso, a security consultant at n.runs AG in Germany, about the
>> completely realistic scenario of plane hijacking via a simple Android app has galvanized the crowd
>> attending the Hack In The Box Conference in Amsterdam today.

The airlines are famous for running old code. They were just about to start planning for replacement of 70s' Fortran code by turn of the century, when their business started going down, companies tanked... and of course, replacing software with something more up-to-date is the last thing you want to do when times get tough. Besides, the old stuff has several advantages: it's battle tested, everyone knows the ropes, and it doesn't require development.

Once I had to do an import from some data that were published (for the suppliers) on some internal web pages of a retail chain. There was export to excel, to xml and one more format... looking for a shortcut (i.e. automating the process - skip the tricky part where the user has to download it somewhere and then doesn't know where it is and what's it called), I looked into the html, to extract a direct link. And guess what - there were comments about that being "exported from the Fortan system on the mainframe".

All code is old code.