Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

How to own an airline in 3 easy steps and grab the TSA nofly list along the way

maia.crimew.gay

Post reply on HN
Print view View original

521–530 of 677 posts

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#521

Post by xyst »

mkl95 wrote: post #318

TIL https://en.wikipedia.org/wiki/Maia_arson_crimew > In March 2021, crimew was indicted by a grand jury in the United States on criminal charges related to her alleged hacking activity between 2019 and 2021. The charges were unrelated to the hack of Verkada. Her home and her parents' home were raided by the Swiss police at the request of United States authorities, and her electronic devices were seized. People used…

Laws are written to protect multibillion corporations and billionaires. Prove me wrong.

If we truly lived in a sane society, companies with lax security and god awful security policies would be punished.

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#522

Post by aardshark »

Dylan16807 wrote: post #393
Someone wrote: post #382

Earlier quoted context omitted.

There is no “true CSV”. https://en.wikipedia.org/wiki/Comma-separated_values : “The CSV file format is not fully standardized. Separating fields with commas is the foundation, but commas in the data or embedded line breaks have to be handled specially. Some implementations disallow such content while others surround the field with quotation marks, which yet again creates the need for escaping if quotation marks are p…

I think it's valid to argue that you shouldn't be able to put some of commas, quotes, and newlines inside fields at all. And comma versus semicolon. But that doesn't extend to using backslash escapes in something that's legitimately trying to be CSV. That's someone getting confused and implementing a mix of data formats, or trying to be clever and making an extended CSV format.

Every field is quoted. Every field is quote-escaped. That's all you need.

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#523

Post by ceejayoz »

Psychoshy_bc1q wrote: post #399
zxexz wrote: post #260

Earlier quoted context omitted.

Why do you keep saying "he"? It's pretty easy to respect people's pronouns...

who cares?

Someone who continues to deliberately misgender after being told about it - especially using "he" when the person's name (Maia) is traditionally a woman's name - seems to care quite a bit.

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#524

Post by [deleted] »

chaboud wrote: post #263
tastysandwich wrote: post #200

As a software engineer even I sometimes can't help romanticising hacking in my imagination. But so many times it turns out to be just like some company left the front gate wide open and the "hacker" walked in and took a look around. Eg when an airline had a public API where you could get someone's passport number and details just from their boarding pass https://mango.pdf.zone/finding-former-australian-prime-minis...

Private keys checked into code? Password salts that were identical for the entire set? "Random" initialization vectors always created from the same prng seed? Without coders like these, hackers would really have to work for it. (And, yes, I've encountered all of these in my career.)

[deleted]

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#525

Post by philjohn »

zztop44 wrote: post #368
DocTomoe wrote: post #346

Earlier quoted context omitted.

If I was the US government, I would add some fake but legitimate-looking IDs in such lists, different ones for every airline I send the list to, so I can identify who leaked the list ex post facto, and come down with God's Wrath on any airline that leaked theirs. But then, I am not a Bond-esque criminal organization bent for world domination.

This is called “seeding” a list and is standard practice for data brokers. But maybe that’s a sign they’re Bond-esque criminal organizations…

Yup - they're the people ACTUALLY selling your data (and often for pennies)

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#527

Post by noirbot »

gggggg5 wrote: post #401
sverhagen wrote: post #398

Earlier quoted context omitted.

Don't all sorts of person-related details come in handy to stage a social engineering hack? Maybe a caller could demonstrate legitimacy by coughing up a passport number. At this point, it may impress me more than someone having found my SSN (_love you for that, Equifax_). Yet, SSN is still by many institutions considered something that should be stored in the vault.

>Don't all sorts of person-related details come in handy to stage a social engineering hack? Maybe? But also maybe not really? Passport numbers change very frequently, nobody uses them to identify people.

They change frequently? My passport is the longest-lifetime form of ID I'm offered, the absurdity of using Social Security Number as an ID aside. Most passports last for 5-10 years in my experience, and I'm not sure the number changes when you renew it.

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#528

Post by culi »

dang wrote: post #332
culi wrote: post #106

> Suspected members of the IRA, the Irish paramilitary organization, were also on the list. Oof the international politics always come out in things like this. Twitter also publicizes all of its suspensions and bans. There's a Wikipedia article with a list of all the notable suspensions since 2010. It's interesting to see that, contrary to popular narratives, many of the international groups banned were actually far-…

We detached this subthread from https://news.ycombinator.com/item?id=34446878 .

too political?

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#529

Post by culi »

upsidesinclude wrote: post #306
culi wrote: post #270

Earlier quoted context omitted.

It's also a very old method. In fact, he/she is a later evolution of the English language. "He/his" used to be more equivalent to "it/its". It wasn't until ~15th century that the modern "he/him" and "she/her" fully evolved. "They/them" meanwhile was in full use by the 14th century

No one speaks in middle english. Dead language rules and customs are irrelevant to modern language norms. People once walketh befide their mules, but now we gots lambos

Using they/them as a neutral pronoun is not dead and never died...

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#530

Post by culi »

WaxProlix wrote: post #314
upsidesinclude wrote: post #306

Earlier quoted context omitted.

No one speaks in middle english. Dead language rules and customs are irrelevant to modern language norms. People once walketh befide their mules, but now we gots lambos

And yet, pronoun ragers cleave to Olde Anglishe in an attempte to rectifye Ye langge. Sadge.

This train of thought makes no sense. The fact that something originated in Old English doesn't at all mean it's dead. He/She also originated in Old English, just a little later. Should I make fun of people using he/him, she/her pronouns because they're "clinging to Olde Anglishe"? lol
Post reply on HN