Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Bypassing airport security via SQL injection

ian.sh

Post reply on HN
Print view View original

301–310 of 459 posts

Re: Bypassing airport security via SQL injection

#301

Post by lovecg »

tiagod wrote: post #294
partiallypro wrote: post #239

Earlier quoted context omitted.

Pilots are also now told to not open the cockpit door, no matter what's happening in the cabin and to land the plane. There is a near 0 change you could take control of the plane. I would be more concerned about someone bringing a bomb on board.

What if you hack a system that allows you into the cockpit with no additional checks? That would be crazy...

A random person pretending to be an airline pilot in a room full of airline pilots? I don’t see it happening, they’ll get kicked out in a second.

Re: Bypassing airport security via SQL injection

#302

Post by FireBeyond »

morpheuskafka wrote: post #202
structural wrote: post #138

Earlier quoted context omitted.

The "airlines" that are using something like FlyCASS are themselves smaller operations and typically running on razor thin margins (if not just unprofitable and wishfully thinking that money will suddenly appear and make their business viable). Literally everything on their backend is held together with more duct tape than the average small business. You could be an "airline" by purchasing a couple of older airliners…

I'm curious why a small cargo airline would even need to use the KCM system. If they don't fly passengers, then wouldn't their crew access the aircraft from the cargo ramp (with a SIDA badge) and never need to enter the passenger terminal/sterile area?

They also may need to transit crews to different airports, sometimes on commercial flights.

Re: Bypassing airport security via SQL injection

#303

Post by akkat »

feoren wrote: post #192
okwhateverdude wrote: post #151

Earlier quoted context omitted.

If you don't want to be sat, just mention Jury Nullification. Courts really hate that sanity check on the process. https://en.wikipedia.org/wiki/Jury_nullification

I once got called into jury duty and sat through jury selection. On that day, protesters were outside the courthouse calling awareness to jury nullification, so the judge brought it up. He said something like: "jury nullification is a constitutional right, but you waive those rights when you take the oath of a juror. It is not an option to you." I really wanted to say "but that constitutional right is not my right, i…

I don't know your case, but the term "rape" has been legally expanded a lot from what we might imagine when we hear the word "rape" (forceful sexual act).

Legally it can mean a case where a man met a women in a bar, she was not drunk and wanted to go home with him. She explicitly consented. Later it ends up that she was using a fake ID to get into the bar, she was only 17.9 years old in a state where the age of consent is 18. Or alternatively, the guy recently moved a block over. In his old location the age of consent was less than 18, but now he moved and he committed rape (aka, the opinion that got Richard Stallman to step down).

And no, there is no exception for mistaking the age. https://scholarlycommons.law.wlu.edu/cgi/viewcontent.cgi?art...

Re: Bypassing airport security via SQL injection

#305

Post by 77pt77 »

pbhjpbhj wrote: post #231
77pt77 wrote: post #197

Why do people even attempto to disclose this? These guy are going to end up with some serious federal charges.

They should just leave the system wide open?

Yes!

Time and time again these cancerous institutions have shown that their only interest is in surviving and they attempt that by concealing the flaws and brutally harassing the people that report them.

At this point only useful idiots give them the benefit of the doubt.

Re: Bypassing airport security via SQL injection

#306

Post by pinkmuffinere »

stackskipton wrote: post #287
james_marks wrote: post #279

Earlier quoted context omitted.

SOC2 covers a set of vectors (mostly social/separation of controls from what I’ve seen), and you were attacked on another vector. Maybe the org prioritized poorly and sucks overall, but that doesn’t mean SOC2 or compliance generally is worthless.

>SOC2 covers a set of vectors (mostly social/separation of controls from what I’ve seen) THAT WAS THE PROBLEM. My bad, I thought most hacks were due poor software management but I'm glad SOC2 truly addressed the real problem.

I don’t understand your hostility. Internet strangers are responding to your comments in good faith.

Re: Bypassing airport security via SQL injection

#307

Post by rjh29 »

rachofsunshine wrote: post #94
jerf wrote: post #13

You know it's bad when it's so bad that as I write this no one has even bothered talking about how bad storing MD5'd passwords is. This even proves they aren't even so much as salting it, which is itself insufficient for MD5. But that isn't even relevant when you can go traipsing through the SQL query itself just by asking; wouldn't matter how well the passwords were stored.

This used to be a question on the Triplebyte interview almost verbatim, and a huge percentage of (even quite good) engineers got it wrong. I'd say probably <20% both salted and used a cryptographically-secure hash; MD5 specifically came up all the time. And keep in mind that we filtered substantially before this interview, so the baseline is even worse than that!

Damn. Using salts and avoiding MD5 in favour of SHA-1 was well known even around 2005. Rainbow tables were a thing even then.

Re: Bypassing airport security via SQL injection

#308

Post by more_corn »

stackskipton wrote: post #267
pinkmuffinere wrote: post #154

Earlier quoted context omitted.

“Worthless” is quite a strong claim. There isn’t much work I’ve encountered that’s truly “worthless”, even though bad work can make me quite upset. Anyways, that’s why I would often caveat.

I'll say they are worthless because most of time they are dragging time away from things that could improve security. For example, $LastJob we spent a ton of time on SOC2 compliance and despite having applications with known vulnerabilities, we got hacked and ended up all over the news. Maybe of instead of spending all the time getting SOC2 compliance finished, we could have worked at upgrading those apps. Actually,…

That’s some bad prioritizing there Lou.

Re: Bypassing airport security via SQL injection

#309

Post by d1sxeyes »

shuntress wrote: post #282
reaperducer wrote: post #111

Earlier quoted context omitted.

This exists in some European countries, in Hungary for example you have an identity service (KAU) which authenticates you and operates as an SSO provider across a number of different government properties. The United States has it, too: https://login.gov But with a government as large as America's it's going to take time to get everyone converted to the new system.

The first bullet point on the /partners page of login.gov (regarding who should use it) says: > You are part of a federal agency or a state, local, or territory government I'm talking about a more generic service that any random industry system or individual can use. The way many websites use Google's OAuth without using really using Google's APIs. Things that just want someone else (Google) to handle asking for and…

Not 100% sure how I feel about random companies being able to definitively identify me. I’m sure we’re drifting in that direction anyway, but it feels like it would negatively impact privacy online.

Re: Bypassing airport security via SQL injection

#310

Post by rjh29 »

mvkel wrote: post #298

While this report is embarrassing for all involved, in a practical sense, I'd argue the security of this app was "fine." What I mean: security through obscurity is imo the best situation to be in. You can't attack something if you don't know it exists in the first place. That alone gives this system a leg up over more exposed (but hardened) platforms. Second, convenience always beats secure. Requiring password rotati…

Every person working in security, or even familiar with security, would know how to exploit this. It was a ticking time bomb. And it gives you admin access to the entire system. People could have already have exploited it and we wouldn't even know.
Post reply on HN