Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

How to own an airline in 3 easy steps and grab the TSA nofly list along the way

maia.crimew.gay

Post reply on HN
Print view View original

401–410 of 677 posts

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#401

Post by gggggg5 »

sverhagen wrote: post #398
gggggg5 wrote: post #356

Earlier quoted context omitted.

Since when are passport numbers supposed to be sensitive information? This isn't something you could use for identity fraud in any normal circumstances.

Don't all sorts of person-related details come in handy to stage a social engineering hack? Maybe a caller could demonstrate legitimacy by coughing up a passport number. At this point, it may impress me more than someone having found my SSN (_love you for that, Equifax_). Yet, SSN is still by many institutions considered something that should be stored in the vault.

>Don't all sorts of person-related details come in handy to stage a social engineering hack?

Maybe? But also maybe not really?

Passport numbers change very frequently, nobody uses them to identify people.

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#402

Post by vunicipna »

autoexec wrote: post #302
vunicipna wrote: post #223

Earlier quoted context omitted.

In an attempt to sound like he had noble reasons for leaking hundreds of thousands of unrelated secret documents to journalists, Snowden claimed it was watching James Clapper's congressional testimony in March 2013 that triggered him to start downloading and exfiltrating classified material. This was a lie. He'd actually started collecting his trove of stolen documents many months prior, in mid-2012, coinciding with…

> Snowden claimed it was watching James Clapper's congressional testimony in March 2013 that triggered him to start downloading and exfiltrating classified material. This was a lie. He'd actually started collecting his trove of stolen documents many months prior, in mid-2012, Did he say that the lies to congress were what "triggered to him to start downloading", or was that what finally convinced him to take the trut…

There's no evidence that Snowden brought his supposed 'concerns' to anybody in his chain of command, prior to defecting to Russia. The documents he began stealing in 2012 weren't targeted towards the bulk data collection program - he exfiltrated whatever he could lay his hands on, which of the hundreds of thousands of items were mostly military secrets, and classified information on intelligence work abroad. The claim that this was all driven by watching Clapper testify in committee is a convenient lie, a cover-up for what he was really doing: a massive theft of secrets across the board.

Serial liars do often go back and 'clarify' their lies once called out, it's part of spinning a web of deception. Admitting any wrongdoing, as normal people might do, isn't on the agenda for people like Snowden, all puffed up and full of ego, living off their own bullshit.

Not only did he defect to Russia and enjoy being celebrated there, he also has many people in the US and allies lauding his espionage, filmmakers and journalists gushing over his narrative and airbrushing out inconvenient facts. What a series of accolades for a liar and thief. He seems to revel in this 'wise whistleblower-in-exile' act he's carved out for himself while remaining Putin's pet. This treacherous escapade worked out better than he ever could have imagined.

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#403

Post by komali2 »

lamontcg wrote: post #118
_yb2s wrote: post #9

Earlier quoted context omitted.

Am I missing something? It seems Maia didn't share the data at all, and only offers to if someone can demonstrate they will use it responsibly. Moreover, depending on the contents of the list, this likely offers proof of what is generally suspected, that the no fly list is a form of discrimination and authoritarian overreach, targeting people that haven't been convicted of a crime but are "suspected" due to race, rel…

> Maia didn't share the data at all You literally immediately falsified that assertion: > and only offers to if someone can demonstrate they will use it responsibly. And nobody ever lies of course.

This is why such a list should be public. You don't trust random grey hat hacker at .gay TLD to distribute the list to people who won't do harm with it. I don't trust the government to not distribute it, accidentally or otherwise, to people who want to do harm with it.

In fact, the government does do harm with it, by putting people on it without telling them (they might send a letter, that's not guaranteed), and you only get to find out a few hours before your flight when you get rejected at security.

Furthermore, this particular government fails to properly secure info all the time. Seems the last two presidents have been just leaving classified papers strewn all over the place.

No, I'll trust the gay hackers over the government, thank you very much.

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#404

Post by komali2 »

pc86 wrote: post #230
Rhinozz wrote: post #52

Earlier quoted context omitted.

In the aforementioned Daily Dot article: > CommuteAir added that the server, which was taken offline prior to publication after being flagged by the Daily Dot, did not expose any customer information based on an initial investigation. As a side note, maia uses it/its pronouns.

According to wikipedia maia has used both it/its and she/her at various times, so it seems either is appropriate.

Sure but "he" isn't, which is what OP used.

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#405

Post by tsimionescu »

gg80 wrote: post #339
dylan604 wrote: post #151

Earlier quoted context omitted.

I just had one today that had the last char of a field as '\', which escaped the closing quote and then munged the column count from there.

If I’m not mistaken RFC 4180 says that quotes should be escaped by prepending them with another quote, so “” and not \” (these are not double quotes but my phone won’t let me type normal quotes), but yeah I guess it is a rather perverse value to put in a csv.

Note that virtually no one implements that RFC. CSV is merely a style of file, not a true file format.

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#406

Post by twelve40 »

mrcode007 wrote: post #232
twelve40 wrote: post #207

Earlier quoted context omitted.

yeah, surprised as well. In finance, there is ofac for people forbidden from moving money, but it's also typically used as a service/db instead of passing around csv files to everyone. Very bizarre.

Not sure what service you’re referring to but the file is here: https://www.treasury.gov/ofac/downloads/sdnlist.txt

Have you ever witnessed this file being used by companies moving money stored in S3 as "shitlist2019.txt" for screening incoming transactions in production? Because that's what the article is alluding to.

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#407

Post by rightbyte »

thaumasiotes wrote: post #359
arp242 wrote: post #225

Earlier quoted context omitted.

This is downvoted, but the homepage really does say "hello i am maia arson crimew (it/she)". I'd feel uncomfortable referring to anyone as "it" though, as there are some connotations with that :-/

> the homepage really does say "hello i am maia arson crimew (it/she)". > I'd feel uncomfortable referring to anyone as "it" though In Five Children and It (published in 1902), the "It" of the title is a magical creature. However, one of the characters is a human baby who is always referred to with the pronoun "it". I glossed right over that reading the book as a child, but I found it pretty disturbing rereading as a…

"Child" is gender neutral and was historically neuter when English had genders.

I guess calling a child "it" is impersonal. Calling it "it" to its face is just strange since "it" is 3rd person.

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#408

Post by vunicipna »

zxexz wrote: post #260
vunicipna wrote: post #166

Earlier quoted context omitted.

Reading that wiki page, it sounds like he's on his way to a long stint in prison, or worse. Wouldn't be surprised if he gets black-bagged now that he's attacking critical national infrastructure and encouraging others to do so.

Why do you keep saying "he"? It's pretty easy to respect people's pronouns...

[flagged]

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#409

Post by [deleted] »

dclowd9901 wrote: post #348
karmaMeansCool wrote: post #289

Earlier quoted context omitted.

It's not good that you are uncomfortable when it asks you to talk about it with its preferred pronouns. It's 2023, it's about time you try to do what it ask you to do. When it tells you its preferred pronouns, try as hard as you can to follow it.

No one is obliged to endure morally sane discomfort for the sake of someone else’s comfort. This isn’t “I don’t want to call her him because he’s a she.” The person you’re replying to has a very valid discomfort with reducing a person to an object’s pronoun. Completely understandable and defensible and beyond the apparent needs of the author.

[deleted]

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#410

Post by nailer »

arcastroe wrote: post #127

This guy is a (hobbyist?) security researcher who responsibly alerts companies of vulnerabilities. However are his actions of downloading the no fly list and offering to share with journalists legal? Or does that cross into overreach and criminal activity?

The guy is a woman. https://en.m.wikipedia.org/wiki/Maia_arson_crimew
Post reply on HN