Live data from Hacker News

TSA redaction fail: hidden text easily readable via copy & paste

wanderingaramean.com

51–57 of 57 posts

Re: TSA redaction fail: hidden text easily readable via copy & paste

#51
post #4

It's helpful to understand a little bit of how a PDF file works. A PDF file stores a sequence of instructions for what do draw on a page. The instructions are commands, such as "write this text here" or "draw a circle there." When you draw black redaction boxes, you are just appending an instruction to the end of the list ("draw a box here"), but most of the time the previous instructions are all still there. Really,…

Mrs Browl works at a e-discovery company where documents are often redacted depending on which bits are admissible in court; I gather they use TIFF files for exactly the reasons you describe. I suppose the (extremely limited) redaction features in Acrobat stem from the belief that the document is ultimately destined for printing rather than computer reading.

I also work at an e-discovery company and can confirm the use of TIFF files as the court-admissible format for producing any sort of document (especially if it has redactions).

Here is an example of the process to apply redactions to a PDF file (or any sort of electronic document). The document is opened in a third-party native viewer with redaction capabilities (and not in the original application like Arcobat or Office). The end-user draws a black box over the appropriate text using the third-party native viewer. This redaction is saved as a separate layer that can be rendered on top of the native document when viewed in the software, as well as printed out. Finally, when documents need to be produced for court, they are printed out to a TIFF-printer driver, effectively converting them to TIFF and "burning in" the redaction layer. The TIFFs are delivered to the courts and opposing council.

Re: TSA redaction fail: hidden text easily readable via copy & paste

#52
post #48

A responsible citizen would not google the following: "SENSITIVE SECURITY INFORMATION" site:.gov filetype:pdf Less than 2000 such PDFs. A very determined and very irresponsible citizen could have already mirrored all of them.

Well, not from their home IP they wouldn't anyway.

Re: TSA redaction fail: hidden text easily readable via copy & paste

#53
post #14
post #11

Earlier quoted context omitted.

That's such an obvious list I'm not sure if it's from the document itself, or if you just wrote down what it would probably be.

I was a little surprised about Cuba. They're not our favorite government, but I don't see them as a security risk.

The countries on the list are there more for "Screw you" reasons than actual security. That is why Cuba is on the list, and possibly first.

Re: TSA redaction fail: hidden text easily readable via copy & paste

#54
post #35

Here's a version with the redactions lifted and the areas highlighted. http://cryptome.org/tsa-screening.zip

it would be really interesting if the government attempts to go after you for hosting that document.

That's actually hosted by cryptome: http://en.wikipedia.org/wiki/Cryptome

Re: TSA redaction fail: hidden text easily readable via copy & paste

#55
post #22

Earlier quoted context omitted.

The absence of Saudi Arabia is pretty interesting.

Right, didn't half the 9/11 hijackers have Saudi passports? They wouldn't even get secondary.

Yes, but the Saudis are our rich friends so we wouldn't want to bother them with anything like pursuing real justice.

Re: TSA redaction fail: hidden text easily readable via copy & paste

#57
post #47
post #23

Earlier quoted context omitted.

Perhaps they want to keep the formatting, and don't want pages to reflow after they've already been layed out? The Unicode character "█" works well for this purpose.

I remember a similar story from a few years ago where redacted names where discovered from the length of the redacted characters. Turned out it wasn't too difficult to brute force names and see which ones matched the exact size of the redaction.

They should have used a fixed width font.
Post reply on HN