Live data from Hacker News

How to own an airline in 3 easy steps and grab the TSA nofly list along the way

maia.crimew.gay

331–340 of 677 posts

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#331
post #191
post #183

Earlier quoted context omitted.

> The last notable ban was Paul Graham for simply sharing their Mastodon handle. Paul Graham is a man, not a plural entity.

Singular they predates singular you in the English language by about three hundred years.

How do you know that? I know singular they goes a long way back, but this is an extreme claim that I've never heard before.

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#332
post #106

> Suspected members of the IRA, the Irish paramilitary organization, were also on the list. Oof the international politics always come out in things like this. Twitter also publicizes all of its suspensions and bans. There's a Wikipedia article with a list of all the notable suspensions since 2010. It's interesting to see that, contrary to popular narratives, many of the international groups banned were actually far-…

We detached this subthread from https://news.ycombinator.com/item?id=34446878.

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#333
post #183
post #106

> Suspected members of the IRA, the Irish paramilitary organization, were also on the list. Oof the international politics always come out in things like this. Twitter also publicizes all of its suspensions and bans. There's a Wikipedia article with a list of all the notable suspensions since 2010. It's interesting to see that, contrary to popular narratives, many of the international groups banned were actually far-…

> The last notable ban was Paul Graham for simply sharing their Mastodon handle. Paul Graham is a man, not a plural entity.

Good observation! Hope this wasn't an attempted, and failed, grammar 'correction'?

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#334

I had always assumed that the “no fly” list was a phrase and that it didn’t refer to an actual list, but rather a database with more detailed information than a “can they fly?” Column with a Y/N entry. In pharmacy we have a database we have to access when we suspect there is abuse, fraud, or diversion of controlled substances. The database is regularly updated with current information about prescriptions that were di…

I naively thought a secret list (file) with secret data is not distributed among random developers of random organizations in full but having a private access point where specific persons could be checked for no fly list by those with right for it, audited, with measures to avoid abusing the service. Potentially with training set available for developers separately. There are services where the accuracy of certain data can be validated (i.e. for cars by license plate and other data) so those who query should already possess the data of a particular person when using it and not just browse everyone in the secret list they please.

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#335

Earlier quoted context omitted.

US law is neither a universal law nor an international one. Accessing computer systems owned by a US company based in the US might constitute a violation of US law, but the hacker is based in Switzerland - where US law does not apply. As you can see in the linked Wikipedia article, accessing these systems is probably not illegal in Switzerland, thus, for all intents and purposes, no crime was committed.

Here's an indictment from 2019 for similar activities. It's a crime in the U.S., thus prosecutable in the U.S. The question is whether Swiss authorities cooperate, not the jurisdiction. https://www.justice.gov/usao-wdwa/pr/swiss-hacker-indicted-c...

The jurisdiction is quite questionable. If someone in north Korea would decide I'm guilty of breaking some bizarre law, I couldn't care less. Why would a Swiss citizen care about what the united states think is a crime?

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#336

This guy is a (hobbyist?) security researcher who responsibly alerts companies of vulnerabilities. However are his actions of downloading the no fly list and offering to share with journalists legal? Or does that cross into overreach and criminal activity?

The laws around digital access to networks are archaic and very broad, they were mostly defined in the 80s and 90s. I believe any unauthorized access (i.e. not having consent from the owner/operator) to a private network is technically a crime. Even if the Jenkins server was open, I bet finding and using the S3 credentials would have crossed the line of the law. Those S3 buckets are private and if you didn't have permission to access them, even if you have the credentials because you found them elsewhere, you could be breaking the law.

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#337

I expected to read an article about actually owning an airline in 3 easy steps. :(

I was disappointed too. I wouldn't know what to do with an airline, I never had one, I wouldn't even know which one I'd like, perhaps Virgin Airlines?, but the thought of having one was exciting still.

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#338
post #179

Earlier quoted context omitted.

Seems to making it's prosecutors jobs really easy, by incriminating itself.

Perhaps this is just my autism speaking, but am I the only one who gets completely freaked out by sentences like the above? "It" refers to inanimate objects, things which can't have free will, do crimes, or be prosecuted. It's almost like you're talking about how a lawnmower decided to run a child over and then incriminate itself by boasting about it on social media. It makes no sense! I know she picked that pronoun…

Competing access needs: autists need regularity, ??s ("the category of people who go by it/its") need ... creativity? chaos? uniqueness? Those goals are at direct odds.

(I'm going to presume here that crimew doesn't actually want to be considered an object, because we don't generally respect objects' pronoun choices. So calling them an "it" in the grammatical way would be paradoxically self-defeating; we call objects he/she all the time and they usually don't complain.)

This is also why I will always defend the use of "they" as valid. There has to be at least one universal pronoun.

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#339

Earlier quoted context omitted.

CSV you say? Let's hope Bobby Droptable's cousin Bobby Double Quote Comma-Semicolon don't get in it...

I just had one today that had the last char of a field as '\', which escaped the closing quote and then munged the column count from there.

If I’m not mistaken RFC 4180 says that quotes should be escaped by prepending them with another quote, so “” and not \” (these are not double quotes but my phone won’t let me type normal quotes), but yeah I guess it is a rather perverse value to put in a csv.

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#340

> with pretty much no skill required Seriously? I know like none of the tools or terms they used, like wtf is shodan? In general the author doesn't seem to follow the white hat guidelines, and I'd be worried what they've done is quite illegal (possibly on a federal level if the nofly list is so secret)

I think she used publicly available common tools in this regard without specific knowledge of the airline industry. Even searching the internet is a special skill for those never used a computer or held a smartphone but is a no brainer for those never created a search engine algorithm.
Post reply on HN