Comment by bangaladore

It is my opinion that you do not need to responsibly disclose "security by obscurity"

Additionally, what is irresponsible here? Its not like this gives you the capability to clone tickets without first having a ticket in the first place.