Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

How to own an airline in 3 easy steps and grab the TSA nofly list along the way

maia.crimew.gay

Post reply on HN
Print view View original

61–70 of 677 posts

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#61

Post by mananaysiempre »

Rhinozz wrote: post #52
toss1 wrote: post #46

Earlier quoted context omitted.

Good to see that; thanks for digging deeper. I hope he has done this behind the scenes and the holes are patched, because I'm sure that by now, someone with worse intent has already followed those footsteps...

In the aforementioned Daily Dot article: > CommuteAir added that the server, which was taken offline prior to publication after being flagged by the Daily Dot, did not expose any customer information based on an initial investigation. As a side note, maia uses it/its pronouns.

If TFA (may not be accessible right now) is to be believed, “the” server is a very generous understatement of the size of the exposed infrastructure, and customer information was very much accessible if not accessed per maia’s words. So seeing a statement like this from the CommuteAir PR people actually makes me feel less reassured, not more. (The attacking side looks better so far—maia itself is not a “watch the world burn” type, judging from its breach history, even if its writing makes you wonder whether the absurdist parody is deliberate or the author is in fact slightly manic. Kind of like Justine Tunney.)

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#62

Post by stolen_biscuit »

ryandrake wrote: post #14
thrtythreeforty wrote: post #2

Headline buries the real lede a bit in my opinion; the author has gotten a snapshot of the no-fly list from 2019. Presumably the system under attack processes more up-to-date versions of it regularly. Corresponding news story: https://www.dailydot.com/debug/no-fly-list-us-tsa-unprotecte...

I wonder which no-fly list it is. Is it a government no-fly list that would contain suspected international criminals and terrorists, or an airline's private no-fly list that would contain people who cause a ruckus on flights, drunks, anti-maskers, and so on. Maybe one shared between airlines? I would imagine that second list has grown substantially since 2020 given all the craziness airlines have had to deal with si…

read the article before speculating? it answers that question

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#63

Post by calvinmorrison »

jeffchien wrote: post #38
calvinmorrison wrote: post #13

Earlier quoted context omitted.

Top secret stazi lists should absolutely be shared. It's why we have 'we have right to know' laws, so the government can't just lock people up in a jail and disappear them.

I think you may not be reading the parent comment correctly. They're saying that those on the list have a right to privacy, therefore outright leaking the list is wrong. Being able to find out whether or not you are on the list is not incompatible with maintaining others' right to privacy.

I am reading it correctly. They do not have a right to privacy, because we all have the right to know who the government is keeping on lists. Regardless the line of thinking reeks with hypocrisy - the government of the United States has been doing nothing but trampling privacy, yet when it comes to top secret government surveillance state programmes they hold it close to their chests

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#64

Post by Eleison23 »

mrsuprawsm wrote: post #27
codetrotter wrote: post #17

Earlier quoted context omitted.

> if “they” is being added to style guides as a way to refer to a singular human without implying any gender Hasn’t it always been the case that you could use “they” as a way to refer to a singular human without implying any gender? I seem to recall that “they” has been in use in that manner long before non-binary arguments were something I’d heard about.

>Hasn’t it always been the case that you could use “they” as a way to refer to a singular human without implying any gender? Yes, since Shakespearean times. For example: "I saw someone walking down the street the other day, they were carrying a guitar" -> a normal use of they as the 3rd person singular pronoun.

[dead]

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#65

Post by ectopod »

eli wrote: post #56
rqtwteye wrote: post #42

Earlier quoted context omitted.

I wish we just used “they” always. I am fine with people not wanting certain pronouns but I find it very tedious to track different pronouns in my head. Especially in a professional setting gender shouldn’t matter at all.

I wish everyone was just named James. I had a good friend named James and it’s much easier to call everyone that than to learn a bunch of individual names.

The whole point of pronouns is to reduce cognitive overhead. If pronouns become something you have to remember for each person then you might as well drop them from the language and use names all the time.

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#66

Post by _yb2s »

toss1 wrote: post #22
_yb2s wrote: post #9

Earlier quoted context omitted.

Am I missing something? It seems Maia didn't share the data at all, and only offers to if someone can demonstrate they will use it responsibly. Moreover, depending on the contents of the list, this likely offers proof of what is generally suspected, that the no fly list is a form of discrimination and authoritarian overreach, targeting people that haven't been convicted of a crime but are "suspected" due to race, rel…

>>demonstrate they will use it responsibly. The problem is to define "demonstrate" and the criteria. Remember the gatekeeper is now an unemployed gal who "know lot's of things about cyber security" according to her main page. Seems likely a competent bad actor could easily impersonate a well-meaning reporter... Yes, security through obscurity isn't security, but this also seems incredibly irresponsible for any "secur…

I think the point here is to expose the nofly list as an unethical and/or illegal government program by leaking it to journalists that can evaluate and summarize it's contents, not to help them secure it better.

White hat hacking assumes that the hacked party is doing normal or ethical business, and that helping them secure it would be generally beneficial.

Also, I'm pretty confident that Maia, as a famous hacker and cybersecurity expert, isn't going to be easily duped by someone impersonating a journalist, and knows how to verify such things.

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#67

Post by [deleted] »

ectopod wrote: post #65
eli wrote: post #56

Earlier quoted context omitted.

I wish everyone was just named James. I had a good friend named James and it’s much easier to call everyone that than to learn a bunch of individual names.

The whole point of pronouns is to reduce cognitive overhead. If pronouns become something you have to remember for each person then you might as well drop them from the language and use names all the time.

[deleted]

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#68

Post by Rhinozz »

tzs wrote: post #41
codetrotter wrote: post #17

Earlier quoted context omitted.

> if “they” is being added to style guides as a way to refer to a singular human without implying any gender Hasn’t it always been the case that you could use “they” as a way to refer to a singular human without implying any gender? I seem to recall that “they” has been in use in that manner long before non-binary arguments were something I’d heard about.

"They" has been used as a singular pronoun as far back as the late 1300s, but for the case where you didn't know the gender of the person or the gender was not relevant. Using it for someone whose gender is gender is known but is not male or female is much newer. Here's an article with details [1]. The problem of what pronoun to use for someone who is neither male or female is not new, of course. That article says: >…

I'll add that while the OED dates the singular they to the mid-14th century (betw. 1335-1361), use as to avoid gendering an individual is found from ca. 1450; the OED also gives earlier attestations for them (1429) and their (1398) of the same usage.

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#69

Post by javajosh »

eli wrote: post #56
rqtwteye wrote: post #42

Earlier quoted context omitted.

I wish we just used “they” always. I am fine with people not wanting certain pronouns but I find it very tedious to track different pronouns in my head. Especially in a professional setting gender shouldn’t matter at all.

I wish everyone was just named James. I had a good friend named James and it’s much easier to call everyone that than to learn a bunch of individual names.

[flagged]

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#70

Post by Arnavion »

throwntoday wrote: post #45
ben_w wrote: post #31

Earlier quoted context omitted.

Same way you learn nouns in German. (Die/der/das are genders).

I took Japanese :S ドイツ語はぜんぜんわからない

"The German language doesn't understand?" :)

(wa should be ga. wa means German is the subject that is doing the not-understanding.)

Post reply on HN