Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

TSA Master Keys

schneier.com

Post reply on HN
Print view View original

81–90 of 149 posts

Re: TSA Master Keys

#81

Post by jsprogrammer »

nly wrote: post #21
flavor8 wrote: post #11

Earlier quoted context omitted.

Most luggage isn't really secure in the first place. It takes less time to open up a suitcase with a good knife than it does to unzip many suitcases. The idea that a little padlock will protect your suitcase from thieves is laughable. Like physical mail, the system is based on trust, and trying to patch security onto it is difficult.

Well, this is nothing new. Most widely-accessible/affordable physical security is only there to introduce enough of a hindrance so insurance companies will actually pay out if when the worst happens.

You think I'd rather file an insurance claim than prevent my stuff from being taken?

Re: TSA Master Keys

#82

Post by samstave »

scurvy wrote: post #68

There's a comment in the original post about bags with firearms requiring a non-TSA lock. Has anyone travelled with a firearm as a maneuver to secure their luggage? Seems lengthy, but probably works. I'd imagine you need to check-in in a different area and not the front desk? Edit: I just watched the YouTube video posted below. Looks like we're just dealing with a flawed system.

Look at this video I made a while back about handgun locks...

https://youtu.be/BjkRVNFkjaw

Re: TSA Master Keys

#83

Post by antsar »

jsprogrammer wrote: post #80
chrisBob wrote: post #62

Earlier quoted context omitted.

His suggestion about seals is the most valid point. None of the locks are really locks. A TSA compliant lock that records the time when it was opened might be useful, but otherwise a seal provides a lot more value. The zip tie idea is fine except that my checked bag is the only place I can put something capable of cutting one.

I'd argue the seal provides little value as the TSA will need to break it if they wish to search the luggage. Once the seal is broken, the luggage may be tampered with. Perhaps if the TSA resealed the luggage they searched?

The seal is to detect any tampering. Why should TSA tampering be exempt from this?

Re: TSA Master Keys

#84

Post by harkyns_castle »

mangamadaiyan wrote: post #60
pfooti wrote: post #42

Earlier quoted context omitted.

I also opt out every time. At one point the FSM came to me in a dream and told me that I shalt not go through a pornoscanner. And who am I to doubt the word of noodle?

I don't know why you're getting downvoted. Any religion is as good as the other, and you're just going by what your religion's deity told you. Nothing wrong with that, as far as I can see.

Well, the religion is nonsense. Not that that differentiates itself from others. Love one another, as you would have banks do to you.

Re: TSA Master Keys

#85

Post by brianwawok »

gmaslov wrote: post #76
kitd wrote: post #63

Earlier quoted context omitted.

Can you reverse engineer a master key from one sample lock though? Genuine question, IDK.

The way I understand master keys work is that the lock has two "breaks" in each pin, instead of just one. So each pin has two positions that allow the lock to open, and you don't know which one belongs to the master key. I think at least two locks would be required, and depending on how many pins and possible positions there are, more might be needed in case of a collision.

I mean a lock comes with 1 key right? If you make a second key that opens it, but shares nothing with the default key - you may have a winner.

Re: TSA Master Keys

#86

Post by dragontamer »

jsprogrammer wrote: post #80
chrisBob wrote: post #62

Earlier quoted context omitted.

His suggestion about seals is the most valid point. None of the locks are really locks. A TSA compliant lock that records the time when it was opened might be useful, but otherwise a seal provides a lot more value. The zip tie idea is fine except that my checked bag is the only place I can put something capable of cutting one.

I'd argue the seal provides little value as the TSA will need to break it if they wish to search the luggage. Once the seal is broken, the luggage may be tampered with. Perhaps if the TSA resealed the luggage they searched?

Custom print the seal.

http://www.andfel.com/security-seals.html

Re: TSA Master Keys

#87

Post by AUmrysh »

explorigin wrote: post #79
Vexs wrote: post #59

I'm kinda surprised that key number 2 on the imgur mirror is a dimple lock. Those are generally used for more high security things than crap tsa travel locks; they're expensive too. Key 4 doesn't surprise me though. https://imgur.com/a/JQD7l

Dimple locks are not at all for high-security, they are less common though. They can easily be defeated with a deep-drilled blank wrapped in aluminum foil.

Many dimple locks can be picked with just some tension on the cylinder and a ball pick. The common cheap Bell brand lock at wal-mart or amazon [1] is easily picked like this. All you do is stick the ball pick in the back of the keyway, apply your tension, and wiggle the pick around the keyway as you pull it out. You might have to insert it a few times, but I've been able to reliably open one of those in about 10 seconds.

1: http://www.amazon.com/Bell-Sports-7015777-CATALYST-U-Lock/dp...

Re: TSA Master Keys

#88

Post by harkyns_castle »

cryoshon wrote: post #20
[deleted] wrote: post #9

Earlier quoted context omitted.

[deleted]

Naive response on multiple levels. An ad hominem implies that the criticism is superficial or irrelevant to the main issue. Money is the main cause from a realist point of view, not an accessory. Money waiting to be made is the first item in the chain of causation for many (most?) government projects. The outline: problem in government that can be solved -> contractor group identifies problem -> contractor group cont…

I'm guessing Brazil.

Re: TSA Master Keys

#89

Post by jsprogrammer »

antsar wrote: post #83
jsprogrammer wrote: post #80

Earlier quoted context omitted.

I'd argue the seal provides little value as the TSA will need to break it if they wish to search the luggage. Once the seal is broken, the luggage may be tampered with. Perhaps if the TSA resealed the luggage they searched?

The seal is to detect any tampering. Why should TSA tampering be exempt from this?

I'm saying that if the TSA tampers with your luggage and breaks the seal, it will happen at the beginning of your trip. This allows anyone seeing your luggage after the TSA tampered with it to also tamper with it without you (or the TSA) ever being able to know if an unauthorized individual also tampered with it (since they can effectively piggyback off the TSA's authorization).

Re: TSA Master Keys

#90

Post by Spooky23 »

grandalf wrote: post #44
Spooky23 wrote: post #16

Earlier quoted context omitted.

The upshot of TSA is that because it's a single government organization, it's easy to identify the costs and quality of operations. Pre-TSA, we were wasting the same or more amount of money on private contractors of dubious quality. But you didn't really know how much, as the cost was spread across thousands of airline/airport authorities/municipal government combinations.

Are you sure it was the same amount of money? Before the TSA, airport security agents were very minimally trained and there were no expensive body scanner machines. I would not be surprised if the TSA version of airport security cost 10x the previous version.

Don't underestimate the cost of bodyshop-style arrangements. The guy fumbling through your luggage may have been making $8/hour, but the billing for it could have easily been 8-15x the salary.
Post reply on HN