Security flaws in how airline boarding passes encode passenger approval information could open a loophole for terrorists, researchers have warned, after exploring the barcodes printed on US passes.