Live data from Hacker News

How to own an airline in 3 easy steps and grab the TSA nofly list along the way

maia.crimew.gay

241–250 of 677 posts

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#241
post #236

Earlier quoted context omitted.

Isn't that your parser's problem? I don't think true CSV has any special characters other than comma, quote, and CRLF.

How do I name my child CRLF?

earn Musk money, you can name your child WTF you want

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#242
post #208

Earlier quoted context omitted.

I find it particularly amusing that you used the wrong pronoun while scolding me to use the correct pronouns for her. If that doesn't prove the impracticality of using "it" as a pronoun, I don't know what does. It breaks the rules of English that we all understand subconsciously, so it's difficult to do without consciously thinking about every single usage of a pronoun in a sentence, which is not how most people type…

I use the word "they" in that context all the time regardless of gender or pronoun. I actually thought about that before using it. It's a common use of the word "they" in casual English.

And most people use "he/she," point being, "you" should of called "it" "it" instead of "they" during "your" own "self"-righteous quip.

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#243
post #106

> Suspected members of the IRA, the Irish paramilitary organization, were also on the list. Oof the international politics always come out in things like this. Twitter also publicizes all of its suspensions and bans. There's a Wikipedia article with a list of all the notable suspensions since 2010. It's interesting to see that, contrary to popular narratives, many of the international groups banned were actually far-…

It's also possible that wikipedia (and the editors there of) are more likely to be far-left aligned / knowledgeable -- thus leaving the far-right unaccounted for.

That said, I also see bans of accounts with few followers regularly being far-right (white supremacist jokes for instance). They may just not be able to gather large followings at this point and / or be on alternative platforms.

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#244

After seeing the title but before clicking on the article, I thought this would be about a legal hack rather than a security hole. More specifically, creating the minimum possible corporation that qualifies as an airline (so that you literally own an airline), and then saying to the government, "hey, we need the nofly list, we're an airline, see?". The actual hack sounds way easier, to be sure, but I still like my ve…

I came here to make the same comment. Also, I now know that .gay is a tld and I'm trying to figure out how to take advantage, registration isn't terribly cheap, but the only restrictions are ones that don't apply to any of my ideas.

Oh man. 1890s.gay would be a good one.

[EDIT]

https://en.wikipedia.org/wiki/Gay_Nineties

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#245

This is clearly on the darker side of gray-hat. Hate to be preachy but anyone seeking to emulate this sort of attack-finding should consider their ethical obligations as a computer scientist and follow best practices for responsible disclosure. It appears this was completely ignored here, including sharing stolen sensitive data of normal people with whoever can plead a case.

Yeah cause we should totally have a top secret no fly list

[deleted]

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#246

Earlier quoted context omitted.

I just had one today that had the last char of a field as '\', which escaped the closing quote and then munged the column count from there.

Isn't that your parser's problem? I don't think true CSV has any special characters other than comma, quote, and CRLF.

I thought it strange too. I saw what the issue was, and just "fixed" it be correcting the data in the CSV. For the lulz, I guess I could have played with the parser's options on deciding what is needed to be escaped. However, the data would have still been incorrect as the '\' is definitely not part of the desired content, so ultimately it was better to correct the input. i would kind of rather the import die than having the potential foot gun of '\' in a field for later sabotage.

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#247

Headline buries the real lede a bit in my opinion; the author has gotten a snapshot of the no-fly list from 2019. Presumably the system under attack processes more up-to-date versions of it regularly. Corresponding news story: https://www.dailydot.com/debug/no-fly-list-us-tsa-unprotecte...

Basically any air charter service (no matter how small) will have access to the no fly list. It's honestly surprising that it's not up to date online within minutes.

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#248

Earlier quoted context omitted.

That's actually exactly what they do. If you are a U.S. citizen or lawful permanent resident, and the TSC determines that you are on the No Fly List, DHS TRIP will send you a letter informing you of your status on the No Fly List and providing the option to submit and receive additional information. https://www.aclu.org/know-your-rights/what-do-if-you-think-y...

Yes... after you submit a form asking why you were denied boarding, as was stated in the opening paragraph. You don't get notified automatically when you are put on the list.

I have been told a few times that I am on the no fly list, so I avoid planes - that, and I am nearly 7 feet tall.

Is my only way to discover if I am allowed on an airplane is to buy a ticket and get subsequently denied on the boarding gate/security? No FOIA request, or anything similar, to circumnavigate this?

Thank you.

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#249

Earlier quoted context omitted.

I think you may not be reading the parent comment correctly. They're saying that those on the list have a right to privacy, therefore outright leaking the list is wrong. Being able to find out whether or not you are on the list is not incompatible with maintaining others' right to privacy.

I am reading it correctly. They do not have a right to privacy, because we all have the right to know who the government is keeping on lists. Regardless the line of thinking reeks with hypocrisy - the government of the United States has been doing nothing but trampling privacy, yet when it comes to top secret government surveillance state programmes they hold it close to their chests

> They do not have a right to privacy

What the fuck is wrong with you? Do you understand the repercussions of it being found someone is on a no-fly list (because we all know the US government makes mistakes).

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#250
post #106

> Suspected members of the IRA, the Irish paramilitary organization, were also on the list. Oof the international politics always come out in things like this. Twitter also publicizes all of its suspensions and bans. There's a Wikipedia article with a list of all the notable suspensions since 2010. It's interesting to see that, contrary to popular narratives, many of the international groups banned were actually far-…

he didn't share his mastodon handle, since that had been prohibited; he just said he had one and you could look on his site for it
Post reply on HN