Boarding Pass Silliness
2012-10-24 15:32:26.208758+00 by
Dan Lyke
1 comments
Boarding pass bar codes contain unencrypted information about which security screening a passenger will receive:
If you have a team of four people [planning an attack], the day before the operation when you print the boarding passes, whichever guy is going to have the least screening is going to be the one wholl take potentially problematic items through security, said Soghoian, now a senior policy analyst at the American Civil Liberties Union. If you know whos getting screened before you walk into the airport, you can make sure the right guy is carrying the right bags.
The entire security system depends on the randomness, he said. If people can do these dry runs, the system is vulnerable. We at the ACLU are not fans of profiling we think it doesnt work and has civil liberties issues. The watch-list approach doesnt ensure security.
Via How the TSA has, again, failed on simple technology.
[ related topics:
Interactive Drama Movies Aviation Work, productivity and environment
]
comments in ascending chronological order (reverse):
#Comment Re: made: 2012-10-25 01:09:03.213296+00 by:
meuon
[edit history]
I've been in that meeting. Pointy haired PhD with a funny name says: It's not plain text, it's coded. Everyone else checks the box. The 20-sumthin with a smart phone got told to keep his mouth shut in meetings or he'd get fired, he's making $12 an hour and has a new car payment and a girlfriend.
Me: I pick fights with PhD's for entertainment value...
You should see the crap they pass off as "secure" for the smart grid.
I want a t-shirt that says:
- Base64encoded is NOT encrypted.
- Why do all of your systems have the same default logins and passwords.
- Including the SQL server...
- Credentials should not be mixed with data in XML files.