Here is a bizzaredly misguided coverage of this whole Christopher Soghoian boarding pass affair. Guess what he did wrong? He just didn't disclose it right!
Indeed, security industry needs such advice. The message is clear: next time, if you happen to come across (or create) a tool to fake boarding passes, don't post it online. Just use it!