Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

TSA Master Keys

schneier.com

Post reply on HN
Print view View original

31–40 of 149 posts

Re: TSA Master Keys

#31

Post by harkyns_castle »

coldpie wrote: post #22
harkyns_castle wrote: post #2

Seems to still be a lot being done in the name of security theater in the US, and just wasting dollars on the TSA, for what appears to be very little effect. Who's really profiting there? Is it just for the employment of people that otherwise wouldn't have a job? Or are the majority of citizens there really made to feel more secure by having them? I'd have to say some defense contractor is getting a bit fatter off th…

> Seems like a ridiculous waste of money. The people paying for it (US citizens and those who travel into or through the US) would surely see it as a waste. But the people profiting don't, and the people profiting are the same people who make the laws mandating them. I opt out of the naked scanners every time I fly. Just tell the TSA clown trying to herd you into the naked scanner the magic phrase "I'm opting out." A…

I'd do it if I have cause to fly into the States again, but I can't help but think its not really going to help much. From my youthful experiences at being a knob, I'd say don't piss off food makers/deliverers, or airline staff. I once annoyed a Qantas security lady, and I noticed it for a fair few trips afterwards. Then again, with wealthy interests controlling the US, I can't really see what will help at this stage. Its a descent into corruption and mess, but I can't judge how quickly it'll crumble.

Re: TSA Master Keys

#32

Post by stingraycharles »

hellbanner wrote: post #24

My google-fu is lacking, but recently (last year?) an inmate escaped thanks to their cellmate who was a master jeweler & had a full kit in his cell. A photograph of the guard's keys was smuggled in and the jeweler cut a key for the inmate to escape.

I think this is the story you are talking about: http://www.news.com.au/national/killer-escaped-prison-after-...

Re: TSA Master Keys

#33

Post by drjesusphd »

coldpie wrote: post #22
harkyns_castle wrote: post #2

Seems to still be a lot being done in the name of security theater in the US, and just wasting dollars on the TSA, for what appears to be very little effect. Who's really profiting there? Is it just for the employment of people that otherwise wouldn't have a job? Or are the majority of citizens there really made to feel more secure by having them? I'd have to say some defense contractor is getting a bit fatter off th…

> Seems like a ridiculous waste of money. The people paying for it (US citizens and those who travel into or through the US) would surely see it as a waste. But the people profiting don't, and the people profiting are the same people who make the laws mandating them. I opt out of the naked scanners every time I fly. Just tell the TSA clown trying to herd you into the naked scanner the magic phrase "I'm opting out." A…

I do the same. Keep up the good fight!

Re: TSA Master Keys

#34

Post by leephillips »

rogeryu wrote: post #23

So luggage handlers can open my suitcase, put in some drugs, and at the other end I can get caught for having drugs in my luggage? They should setup a service where you checkin your luggage, they check it for drugs or illegal stuff, they seal it, and at arrival you get your suitcase with the guarantee that it had no drugs at checkin.

If the authorities want to frame you they don't have to go to so much trouble. The officer just uses the drugs in his pocket. The problem is the laws, clearly.

Re: TSA Master Keys

#35

Post by Jtsummers »

harkyns_castle wrote: post #15
cryoshon wrote: post #4

Earlier quoted context omitted.

https://en.wikipedia.org/wiki/Michael_Chertoff#Body_scanners "Michael Chertoff has been an advocate of enhanced technologies, such as full body scanners.[25] His lobbying firm Chertoff Group (founded 2009) represents manufacturers of the scanners.[26][27]" "Michael Chertoff (born November 28, 1953) is an American attorney who was the second United States Secretary of Homeland Security under Presidents George W. Bush…

It's bizarre it can happen. Surely the wheels have to fall off that out of control cart soon.

You'd think, but year after year we get stories like this. Sometimes it catches up with people [1], many times it seems they get away with it [2]. The main difference seems to be how much money they're worth, if they're elected or just "regular" employees, and how good their connections are.

[1] https://en.wikipedia.org/wiki/Darleen_Druyun

[2] http://www.forbes.com/sites/judystone/2015/02/17/the-sham-of... - goes into more, but the relevant part is about 2/3 down. Search for "Rick Scott pushed".

Re: TSA Master Keys

#36

Post by gambiting »

mtgx wrote: post #28
flavor8 wrote: post #11

Earlier quoted context omitted.

Most luggage isn't really secure in the first place. It takes less time to open up a suitcase with a good knife than it does to unzip many suitcases. The idea that a little padlock will protect your suitcase from thieves is laughable. Like physical mail, the system is based on trust, and trying to patch security onto it is difficult.

At least then you can claim someone tampered with it. What if they steal your laptop from your baggage. Can you still claim you had it in there? Unless they open it right before the cameras (and they'll know where those are), you won't be able to do that.

Sure you can. I know a few people who lost their luggage - in those situation they just claimed the maximum value the airline would pay, so they suddenly had 5 laptops and jewelry in their luggage. I'm not saying that's a morally right thing to do(it isn't) but the airline will just take your word for it.

Re: TSA Master Keys

#37

Post by k33l0r »

piquadrat wrote: post #29
aneidon wrote: post #13

Earlier quoted context omitted.

Sure, but if someone cuts your suitcase open with a knife it'll be much more obvious than if they used the master key to open it and then zipped it shut again.

Maybe if you cut it, but that's not even necessary https://youtu.be/zMTXzQ0Vqn8?t=106

I've been through the training for airport security officers (not in the US, though) and that's one of the techniques they taught us. Also most baggage locks are ridiculously easy to pick with basic tools (literally a 15-30 minute lesson) even if you don't have the master keys available.

Re: TSA Master Keys

#38

Post by kabdib »

tptacek wrote: post #27

Was it ever possible to have a secure lock held by tens of thousands of people with a secure master key, even if the authentic master keys were never revealed?

This. One thing that kills escrow systems dead is the complacent spread of authority.

You start with critical keys that are closely held. Over time other parties express the need for access ("Okay, if you promise to be good"). Nothing bad happens (that anyone can prove...) so over time more entities are brought into the circle of trust. Eventually the dog-catcher has access to your stuff.

There's no way these keys haven't already broadly leaked (I mean, before these pictures).

Re: TSA Master Keys

#39

Post by Tepix »

brk wrote: post #5

I doubt these images really did all that much for people who wanted a set of TSA keys. The locks themselves are widely available and it's easy to reverse engineer a key if you have the lock (especially multiple copies of the lock to destroy and test on). If anything, this just made it easier for casual lazy people to get a set of images for keys they'll never make :)

Source needed.

Re: TSA Master Keys

#40

Post by 0xCMP »

aneidon wrote: post #13
flavor8 wrote: post #11

Earlier quoted context omitted.

Most luggage isn't really secure in the first place. It takes less time to open up a suitcase with a good knife than it does to unzip many suitcases. The idea that a little padlock will protect your suitcase from thieves is laughable. Like physical mail, the system is based on trust, and trying to patch security onto it is difficult.

Sure, but if someone cuts your suitcase open with a knife it'll be much more obvious than if they used the master key to open it and then zipped it shut again.

No, for instance anything with a zipper can pretty much be opened with a pen instead of a knife. Just poke through and it will unzip. Depending on the zipper quality you should be able to just rezip it.
Post reply on HN