Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

TSA Master Keys

schneier.com

Post reply on HN
Print view View original

21–30 of 149 posts

Re: TSA Master Keys

#21

Post by nly »

flavor8 wrote: post #11
tempodox wrote: post #6

Not only is this another impressive demonstration of incompetence, but by disseminating the idea that people's luggage could be “secure” and “backdoored” at the same time, they're actually destroying what security has existed before. They should pivot to be the “Transport Endangerment Agency”.

Most luggage isn't really secure in the first place. It takes less time to open up a suitcase with a good knife than it does to unzip many suitcases. The idea that a little padlock will protect your suitcase from thieves is laughable. Like physical mail, the system is based on trust, and trying to patch security onto it is difficult.

Well, this is nothing new. Most widely-accessible/affordable physical security is only there to introduce enough of a hindrance so insurance companies will actually pay out if when the worst happens.

Re: TSA Master Keys

#22

Post by coldpie »

harkyns_castle wrote: post #2

Seems to still be a lot being done in the name of security theater in the US, and just wasting dollars on the TSA, for what appears to be very little effect. Who's really profiting there? Is it just for the employment of people that otherwise wouldn't have a job? Or are the majority of citizens there really made to feel more secure by having them? I'd have to say some defense contractor is getting a bit fatter off th…

> Seems like a ridiculous waste of money.

The people paying for it (US citizens and those who travel into or through the US) would surely see it as a waste. But the people profiting don't, and the people profiting are the same people who make the laws mandating them.

I opt out of the naked scanners every time I fly. Just tell the TSA clown trying to herd you into the naked scanner the magic phrase "I'm opting out." After a 5 minute wait, some other clown will come over and molest you, and then you're free to go.

I do this as a little protest against a system I see as stupid and illegal. If everybody opted out, the system would get so backed up that they would have to change their policies. I'm doing my part, and I encourage you to do yours next time you fly. (Unless you're not white, in which case you should probably just keep your head down :-/ )

Re: TSA Master Keys

#23

Post by rogeryu »

So luggage handlers can open my suitcase, put in some drugs, and at the other end I can get caught for having drugs in my luggage?

They should setup a service where you checkin your luggage, they check it for drugs or illegal stuff, they seal it, and at arrival you get your suitcase with the guarantee that it had no drugs at checkin.

Re: TSA Master Keys

#24

Post by hellbanner »

My google-fu is lacking, but recently (last year?) an inmate escaped thanks to their cellmate who was a master jeweler & had a full kit in his cell. A photograph of the guard's keys was smuggled in and the jeweler cut a key for the inmate to escape.

Re: TSA Master Keys

#25

Post by harkyns_castle »

Spooky23 wrote: post #16
harkyns_castle wrote: post #2

Seems to still be a lot being done in the name of security theater in the US, and just wasting dollars on the TSA, for what appears to be very little effect. Who's really profiting there? Is it just for the employment of people that otherwise wouldn't have a job? Or are the majority of citizens there really made to feel more secure by having them? I'd have to say some defense contractor is getting a bit fatter off th…

The upshot of TSA is that because it's a single government organization, it's easy to identify the costs and quality of operations. Pre-TSA, we were wasting the same or more amount of money on private contractors of dubious quality. But you didn't really know how much, as the cost was spread across thousands of airline/airport authorities/municipal government combinations.

Definitely a way to find a silver lining hehe. Maybe we're getting better at shining a light on things, and they'll crawl back into the slime over a generation or two.

Re: TSA Master Keys

#26

Post by mtgx »

rogeryu wrote: post #23

So luggage handlers can open my suitcase, put in some drugs, and at the other end I can get caught for having drugs in my luggage? They should setup a service where you checkin your luggage, they check it for drugs or illegal stuff, they seal it, and at arrival you get your suitcase with the guarantee that it had no drugs at checkin.

Don't give them anymore business model ideas.

Re: TSA Master Keys

#27

Post by tptacek »

Was it ever possible to have a secure lock held by tens of thousands of people with a secure master key, even if the authentic master keys were never revealed?

Re: TSA Master Keys

#28

Post by mtgx »

flavor8 wrote: post #11
tempodox wrote: post #6

Not only is this another impressive demonstration of incompetence, but by disseminating the idea that people's luggage could be “secure” and “backdoored” at the same time, they're actually destroying what security has existed before. They should pivot to be the “Transport Endangerment Agency”.

Most luggage isn't really secure in the first place. It takes less time to open up a suitcase with a good knife than it does to unzip many suitcases. The idea that a little padlock will protect your suitcase from thieves is laughable. Like physical mail, the system is based on trust, and trying to patch security onto it is difficult.

At least then you can claim someone tampered with it. What if they steal your laptop from your baggage. Can you still claim you had it in there? Unless they open it right before the cameras (and they'll know where those are), you won't be able to do that.

Re: TSA Master Keys

#29

Post by piquadrat »

aneidon wrote: post #13
flavor8 wrote: post #11

Earlier quoted context omitted.

Most luggage isn't really secure in the first place. It takes less time to open up a suitcase with a good knife than it does to unzip many suitcases. The idea that a little padlock will protect your suitcase from thieves is laughable. Like physical mail, the system is based on trust, and trying to patch security onto it is difficult.

Sure, but if someone cuts your suitcase open with a knife it'll be much more obvious than if they used the master key to open it and then zipped it shut again.

Maybe if you cut it, but that's not even necessary

https://youtu.be/zMTXzQ0Vqn8?t=106

Re: TSA Master Keys

#30

Post by jonknee »

I had a TSA lock and it lasted exactly one trip. They searched the bag (found a note inside) and didn't lock the case back up, I never saw the lock again. Ridiculous.
Post reply on HN