Security Analysis of a Full-Body Scanner
radsec.org
Security Analysis of a Full-Body Scanner
1–10 of 65 posts
Re: Security Analysis of a Full-Body Scanner
#2And the USENIX page: https://www.usenix.org/conference/usenixsecurity14/technical...
Re: Security Analysis of a Full-Body Scanner
#3They removed these machines from airports in 2013 but are still using them elsewhere - prisons, gov't offices. So while you may not be able to bomb a plane, you can still take a gun into court. Lovely!
Re: Security Analysis of a Full-Body Scanner
#4From the paper:
"To a degree that surprised us, our attacks benefited from testing on the device itself. Our first attempts at implementing a new attack strategy were often visible to the scanner, and reliable concealment was made possible only by iteration and refinement.
[...]
The effectiveness of such a strategy depends critically on the difficulty of obtaining access to the machine. In addition to the device we purchased, at least one other Secure 1000 was available for sale on eBay for months after we obtained ours. We do not know whether it sold, or to whom."
Re: Security Analysis of a Full-Body Scanner
#5They removed these machines from airports in 2013 but are still using them elsewhere - prisons, gov't offices. So while you may not be able to bomb a plane, you can still take a gun into court. Lovely!
The airports I frequent (in particular San Jose International) are very much still using full-body scanners.
Edit: Do you mean this particular model is no longer in use? If so, are newer models not susceptible to these attacks?
Re: Security Analysis of a Full-Body Scanner
#6They removed these machines from airports in 2013 but are still using them elsewhere - prisons, gov't offices. So while you may not be able to bomb a plane, you can still take a gun into court. Lovely!
Aren't the machines in use today using the same technology? Instead of showing the full image, they are applying pattern matching and only showing suspect regions to the operators. Supposedly to protect privacy...
Re: Security Analysis of a Full-Body Scanner
#7They removed these machines from airports in 2013 but are still using them elsewhere - prisons, gov't offices. So while you may not be able to bomb a plane, you can still take a gun into court. Lovely!
The airports I frequent (in particular San Jose International) are very much still using full-body scanners. Edit: Do you mean this particular model is no longer in use? If so, are newer models not susceptible to these attacks?
Backscatter x-ray technology was removed from airports. [1]
All airports now use millimeter wave technology. [2]
Re: Security Analysis of a Full-Body Scanner
#8From the FAQ:
> Q. Isn’t it bad to publish details of possible attacks?
> We have omitted a small number of sensitive details from our attacks in order to avoid providing recipes that would allow an attacker to reliably defeat the screening process without having access to a machine for testing.
Re: Security Analysis of a Full-Body Scanner
#9These machines are such a blatant violation of our Constitutional rights. We shouldn't be searched like this without probable cause or a search warrant. Whether they are effective or not is irrelevant.
Re: Security Analysis of a Full-Body Scanner
#10Earlier quoted context omitted.
The airports I frequent (in particular San Jose International) are very much still using full-body scanners. Edit: Do you mean this particular model is no longer in use? If so, are newer models not susceptible to these attacks?
Backscatter x-ray technology was removed from airports. [1] All airports now use millimeter wave technology. [2] [1] https://en.wikipedia.org/wiki/Backscatter_X-ray [2] https://en.wikipedia.org/wiki/Millimeter_wave_scanner
Millimeter wave scanners still subject the body to radiation, even though they don't have the work "X-Ray" in the name. Radiation damage to your body is cumulative throughout your life, so if you care about your longevity, you'd be wise to opt-out of subjecting your body to this radiation whenever possible.