Airline security critic raided by Feds!!! - GoFuckYourself.com

ForteCash · 10-31-2006, 10:46 AM

Airline security critic raided by Feds

The Register / Thomas C Greene | October 31 2006

Indiana University graduate student Christopher Soghoian pointed out a flaw in airline security by posting a fake boarding pass generator online, and was rewarded with a visit from FBI agents with a search warrant.

The FBI raided his residence on Saturday, only days after the student posted a PHP script enabling anyone to print a boarding pass for Northwest Airlines.

It's unlikely that a fake pass would enable someone to board a flight they hadn't paid for, but it would suffice to get one into the "secure" area of an airport. Soghoian's example passes would fail at the gate when read electronically. Still, they would likely not be challenged until that point.

The trick involved is not new; indeed, it was publicised by Slate magazine in February 2005. Creating a script enabling any fool to generate a pass was Soghoian's contribution.

The Feds apparently considered this to be going a step further than providing information that's already available, and interpreted it as encouraging bad behaviour, even though Soghoian was clear about the fact that his example passes would not enable one to fly for free. They only demonstrated how easily people on the no-fly lists could find themselves wandering about an airport, if, for example, they were too lazy to get an ID and credit card issued under a different name.

Which brings us to the observation that, yes, airport security is crap, just as Soghoian's pass generator and the Slate article illustrate, and no, it really doesn't matter if people can print their own boarding passes, and even edit them.

In the five years since 9/11, the TSA has failed to catch a single terrorist, and it isn't because they're printing boarding passes. It's because the entire idea of setting up checkpoints at widely-publicised locations and waiting for terrorists to turn up and get caught is idiotic. Those who might be recognised visually aren't flying commercially.

The rest are simply declining to participate as well, or are travelling with authentic, government-issued passports and working credit cards obtained fraudulently - which is hardly more challenging than editing a boarding pass, but pays far better dividends, like actually being permitted to travel.

We note that US Representative Edward Markey (Democrat, Massachusetts) overreacted wildly to news of Soghoian's pass generator and called for his immediate arrest.

"The Bush Administration must immediately act to investigate, apprehend those responsible, shut down the website, and warn airlines and aviation security officials to be on the look-out for fraudsters or terrorists trying to use fake boarding passes in an attempt to cheat their way through security and onto a plane," Markey exclaimed.

He later retracted that bit of political theatre: "Subsequently, I learned that the person responsible...intended to provide a public service by warning that this long-standing loophole could be easily exploited." Markey concluded that: "The Department of Homeland Security should put [Soghoian] to work showing public officials how easily our security can be compromised."

Markey is a member of the House Homeland Security Committee. With the midterm elections approaching, he's naturally eager to show the world that Democrats are just as security-savvy as Republicans claim to be. But he gets it wrong both times. He overstates the risk in the first place, and in the second place overestimates Soghoian's "contribution" to airline security in pointing out a minor flaw that's been known for years.

But so long as security remains a political football, this is the sort of rubbish we will have to listen to (The Register does commend Markey for not waiting until after the election to issue the retraction, as many others in his position would have done).

The homemade boarding pass is no big deal. The risk is minor, and it's mitigated somewhat by the fact that the passes issued by the airlines at check in, where ID is required, look different. This is by design, to give the TSA an opportunity to exercise a bit more care when screening passengers in possession of boarding passes obtained otherwise.

And yes, it would not be terribly difficult to make a facsimile of an airline-issued pass to escape extra scrutiny, but we have to point out that the real threat is undesirable travellers with false identities, proffering authentic travel documents. That's the right way to beat the system, and it's easy. No terrorist worth his salt is going to waste time Photoshopping boarding passes.

In the movies, the scoundrels always have a guy who does counterfeit passports. He's always eccentric, and strangely heliophobic for someone who does close work, but he's invariably a world-class artist. The counterfeits cost thousands of dollars and take several days.

In the real world, with a fake birth certificate, you can get a genuine passport in 24 hours for less than $200. Of course, movies wouldn't be as much fun if we kept that in mind. But when we're doing security, it's wise to remain clear on the differences between Hollywood and reality.

Meanwhile, we hope that Soghoian isn't destined to spend several years in prison for pointing out a security flaw that, ultimately, is irrelevant.

Lazonby · 10-31-2006, 10:54 AM

Idiot.78

Kimo · 10-31-2006, 10:56 AM

oh damn that sux

jacked · 10-31-2006, 11:00 AM

saw that on the news yesterday he was asking for it... to put the idea out there is one thing but to actually put the generator online and available for use is another...

pornguy · 10-31-2006, 11:21 AM

What a fucking moron.

Mr. Romance · 10-31-2006, 11:26 AM

fuckin jerk

Mr. Romance

pocketkangaroo · 10-31-2006, 11:28 AM

That dude is one dumb guy.

interracialtoons · 10-31-2006, 12:13 PM

Hey! It's easy to make a bomb. Use my online bomb generator to see for yourself!

STUUUUUUUUPPPPPPPPIDDDDDDDDDDDDDD MMMOTHERFFFCUKERRRRRRR!!

The Feds paid him a visit...NO SHIT!?!

ForteCash · 10-31-2006, 12:21 PM

this thread is great!

pigman · 10-31-2006, 02:38 PM

Just put everyone in jail!

squishypimp · 10-31-2006, 02:39 PM

that sucks

OG LennyT · 10-31-2006, 02:41 PM

graduate student huh?

good to see that education wasnt wasted

Rochard · 10-31-2006, 02:47 PM

This guy violated a number of different laws and quickly needed to be shut down. There is a difference between "freedom of speech" and assisting people in violating the security of our airports.

At the same time, the guy pointed out a huge flaw in our security systems.

Not sure if this guy should be locked up or rewarded.

acctman · 10-31-2006, 03:44 PM

Slate did almost the same thing... why aren't the being raided? i think sometimes you have to do things like that to get flaws and security holes noticed. Its not like FBI would care if he phoned them and said there was a security loop hole. they'd probably take his if, and say we'll look into it and probably wouldn't at all.

marketsmart · 10-31-2006, 03:44 PM

the hell....

*goes to read a second time...

Dirty Dane · 10-31-2006, 03:46 PM

lol.. thats stupid

Sarah_Jayne · 10-31-2006, 04:11 PM

yeah, when I read the original story the other day I knew somebody would come knocking

_Richard_ · 10-31-2006, 04:15 PM

there's pointing out a mistake and making a mistake dreadfully apparent.. to.. everyone!

R

SmokeyTheBear · 10-31-2006, 04:15 PM

why he made them printable is stupid when he could have simply recorded a youtube video to show its possible or juts simply explained it..

dv2 · 10-31-2006, 04:17 PM

no one should be allowed to be smarter then the idiots who are
entrusted to secure us...there should be a law against intelligence...
oh wait...already is

ForteCash · 10-31-2006, 08:42 PM

Quote:

Originally Posted by dv2

no one should be allowed to be smarter then the idiots who are
entrusted to secure us...there should be a law against intelligence...
oh wait...already is

hydro · 11-01-2006, 03:18 AM

he deserves it, had he done it then gone to the gov and said look at this it would be completely different but his dumbass decided to post up the script.

edgeprod · 11-01-2006, 03:35 AM

It's amazing that he even CONSIDERED this wouldn't happen.

V_RocKs · 11-01-2006, 03:35 AM

Non-terrorist list suspect gets his legit pass and legit ID checked by the counter peeps...

Terrorist list suspect prints a fake boarding pass and uses a fake ID to get to the gate and board the plane using suspect 1's real boarding pass...

To bad for that plane...

Wiggles · 11-01-2006, 05:27 AM

haha what an idiot.

JFK · 11-01-2006, 05:51 AM

Quote:

Originally Posted by dv2

no one should be allowed to be smarter then the idiots who are
entrusted to secure us...there should be a law against intelligence...
oh wait...already is

Good one

ForteCash · 11-01-2006, 12:09 PM

Quote:

Originally Posted by Wiggles

haha what an idiot.

is ratner humorous

10-31-2006, 10:46 AM	#1
ForteCash Confirmed User Join Date: Feb 2006 Location: Kansas City, Missouri Posts: 3,278	Airline security critic raided by Feds!!! Airline security critic raided by Feds The Register / Thomas C Greene \| October 31 2006 Indiana University graduate student Christopher Soghoian pointed out a flaw in airline security by posting a fake boarding pass generator online, and was rewarded with a visit from FBI agents with a search warrant. The FBI raided his residence on Saturday, only days after the student posted a PHP script enabling anyone to print a boarding pass for Northwest Airlines. It's unlikely that a fake pass would enable someone to board a flight they hadn't paid for, but it would suffice to get one into the "secure" area of an airport. Soghoian's example passes would fail at the gate when read electronically. Still, they would likely not be challenged until that point. The trick involved is not new; indeed, it was publicised by Slate magazine in February 2005. Creating a script enabling any fool to generate a pass was Soghoian's contribution. The Feds apparently considered this to be going a step further than providing information that's already available, and interpreted it as encouraging bad behaviour, even though Soghoian was clear about the fact that his example passes would not enable one to fly for free. They only demonstrated how easily people on the no-fly lists could find themselves wandering about an airport, if, for example, they were too lazy to get an ID and credit card issued under a different name. Which brings us to the observation that, yes, airport security is crap, just as Soghoian's pass generator and the Slate article illustrate, and no, it really doesn't matter if people can print their own boarding passes, and even edit them. In the five years since 9/11, the TSA has failed to catch a single terrorist, and it isn't because they're printing boarding passes. It's because the entire idea of setting up checkpoints at widely-publicised locations and waiting for terrorists to turn up and get caught is idiotic. Those who might be recognised visually aren't flying commercially. The rest are simply declining to participate as well, or are travelling with authentic, government-issued passports and working credit cards obtained fraudulently - which is hardly more challenging than editing a boarding pass, but pays far better dividends, like actually being permitted to travel. We note that US Representative Edward Markey (Democrat, Massachusetts) overreacted wildly to news of Soghoian's pass generator and called for his immediate arrest. "The Bush Administration must immediately act to investigate, apprehend those responsible, shut down the website, and warn airlines and aviation security officials to be on the look-out for fraudsters or terrorists trying to use fake boarding passes in an attempt to cheat their way through security and onto a plane," Markey exclaimed. He later retracted that bit of political theatre: "Subsequently, I learned that the person responsible...intended to provide a public service by warning that this long-standing loophole could be easily exploited." Markey concluded that: "The Department of Homeland Security should put [Soghoian] to work showing public officials how easily our security can be compromised." Markey is a member of the House Homeland Security Committee. With the midterm elections approaching, he's naturally eager to show the world that Democrats are just as security-savvy as Republicans claim to be. But he gets it wrong both times. He overstates the risk in the first place, and in the second place overestimates Soghoian's "contribution" to airline security in pointing out a minor flaw that's been known for years. But so long as security remains a political football, this is the sort of rubbish we will have to listen to (The Register does commend Markey for not waiting until after the election to issue the retraction, as many others in his position would have done). The homemade boarding pass is no big deal. The risk is minor, and it's mitigated somewhat by the fact that the passes issued by the airlines at check in, where ID is required, look different. This is by design, to give the TSA an opportunity to exercise a bit more care when screening passengers in possession of boarding passes obtained otherwise. And yes, it would not be terribly difficult to make a facsimile of an airline-issued pass to escape extra scrutiny, but we have to point out that the real threat is undesirable travellers with false identities, proffering authentic travel documents. That's the right way to beat the system, and it's easy. No terrorist worth his salt is going to waste time Photoshopping boarding passes. In the movies, the scoundrels always have a guy who does counterfeit passports. He's always eccentric, and strangely heliophobic for someone who does close work, but he's invariably a world-class artist. The counterfeits cost thousands of dollars and take several days. In the real world, with a fake birth certificate, you can get a genuine passport in 24 hours for less than $200. Of course, movies wouldn't be as much fun if we kept that in mind. But when we're doing security, it's wise to remain clear on the differences between Hollywood and reality. Meanwhile, we hope that Soghoian isn't destined to spend several years in prison for pointing out a security flaw that, ultimately, is irrelevant. __________________ NO PILLS - NO EXPENSIVE STRETCHERS - JUST REAL EXERCISES THAT WORK! "Upsell Your Members The Top Penis Enlargement Site!" Link Exchanges & Traffic Trades www.penilefitness.com/links/ ICQ: 63935693 $50 per trial with www.ForteCash.com

10-31-2006, 10:56 AM	#3
Kimo ... Join Date: Jan 2006 Location: Maryland ICQ:87038677 Posts: 11,542	oh damn that sux __________________ ...

10-31-2006, 11:00 AM	#4
jacked sperm tail Industry Role: Join Date: May 2004 Location: nj Posts: 11,019	saw that on the news yesterday he was asking for it... to put the idea out there is one thing but to actually put the generator online and available for use is another... __________________ Got Cam Models? icq: 361-607-616

10-31-2006, 11:21 AM	#5
pornguy Too lazy to set a custom title Industry Role: Join Date: Mar 2003 Location: Homeless Posts: 62,911	What a fucking moron. __________________ PornGuy skype me pornguy_epic AmateurDough The Hottes Shemales online! TChicks.com \| Angeles Cid \| Mariana Cordoba \| MAILERS WELCOME!

10-31-2006, 11:26 AM	#6
Mr. Romance The Face of Romance and the Symbol of Freedom Join Date: Mar 2005 Location: The America's Posts: 7,821	fuckin jerk Mr. Romance __________________ Free Leads Program now paying up to $6 Gerard-Director of Global Sales Sign up Here: CamStarCash Check out: FreeCamStars ICQ: 330 662 299 gerard at freecamstars . com

10-31-2006, 10:54 AM	#2
Lazonby Confirmed User Join Date: Feb 2006 Posts: 2,262	Idiot.78

10-31-2006, 11:28 AM	#7
pocketkangaroo Confirmed User Join Date: Jan 2005 Location: Chicago, IL Posts: 8,452	That dude is one dumb guy.

10-31-2006, 12:13 PM	#8
interracialtoons Confirmed User Join Date: May 2006 Posts: 1,910	Hey! It's easy to make a bomb. Use my online bomb generator to see for yourself! STUUUUUUUUPPPPPPPPIDDDDDDDDDDDDDD MMMOTHERFFFCUKERRRRRRR!! The Feds paid him a visit...NO SHIT!?! __________________ Done.

10-31-2006, 12:21 PM	#9
ForteCash Confirmed User Join Date: Feb 2006 Location: Kansas City, Missouri Posts: 3,278	this thread is great! __________________ NO PILLS - NO EXPENSIVE STRETCHERS - JUST REAL EXERCISES THAT WORK! "Upsell Your Members The Top Penis Enlargement Site!" Link Exchanges & Traffic Trades www.penilefitness.com/links/ ICQ: 63935693 $50 per trial with www.ForteCash.com

10-31-2006, 02:38 PM	#10
pigman Confirmed User Join Date: Aug 2006 Posts: 760	Just put everyone in jail!

10-31-2006, 02:39 PM	#11
squishypimp PostMaster General Join Date: Aug 2006 Posts: 10,781	that sucks __________________ Signature For Sale

10-31-2006, 02:41 PM	#12
OG LennyT Wall Street Pimp Industry Role: Join Date: Jun 2003 Location: Phoenix, AZ Posts: 14,345	graduate student huh? good to see that education wasnt wasted __________________ Tradeking - my online broker \| 4.95 a trade \| make real $$

10-31-2006, 02:47 PM	#13
Rochard Jägermeister Test Pilot Industry Role: Join Date: Dec 2001 Location: NORCAL Posts: 74,321	This guy violated a number of different laws and quickly needed to be shut down. There is a difference between "freedom of speech" and assisting people in violating the security of our airports. At the same time, the guy pointed out a huge flaw in our security systems. Not sure if this guy should be locked up or rewarded. __________________ “The choice is no longer between right or left. The choice is between normal and crazy.” - Sarah Huckabee Sanders YNOT MAIL \| THE BEST ADULT MAILING SOLUTION

10-31-2006, 03:44 PM	#14
acctman Confirmed User Join Date: Oct 2003 Location: Atlanta Posts: 2,840	Slate did almost the same thing... why aren't the being raided? i think sometimes you have to do things like that to get flaws and security holes noticed. Its not like FBI would care if he phoned them and said there was a security loop hole. they'd probably take his if, and say we'll look into it and probably wouldn't at all.

10-31-2006, 03:44 PM	#15
marketsmart HOMICIDAL TROLL KILLER Industry Role: Join Date: Dec 2004 Location: Sunnybrook Institution for the Criminally Insane Posts: 20,419	the hell.... *goes to read a second time...

10-31-2006, 03:46 PM	#16
Dirty Dane Sick Fuck Industry Role: Join Date: Feb 2004 Location: www Posts: 9,491	lol.. thats stupid

10-31-2006, 04:11 PM	#17
Sarah_Jayne Now with more Jayne Industry Role: Join Date: Dec 2002 Location: Los Angeles Posts: 40,077	yeah, when I read the original story the other day I knew somebody would come knocking

10-31-2006, 04:15 PM	#18
_Richard_ Too lazy to set a custom title Industry Role: Join Date: Oct 2006 Location: Earth Posts: 30,989	there's pointing out a mistake and making a mistake dreadfully apparent.. to.. everyone! R

10-31-2006, 04:15 PM	#19
SmokeyTheBear ►SouthOfHeaven Join Date: Jun 2004 Location: PlanetEarth MyBoardRank: GerbilMaster My-Penis-Size: extralarge MyWeapon: Computer Posts: 28,609	why he made them printable is stupid when he could have simply recorded a youtube video to show its possible or juts simply explained it.. __________________ hatisblack at yahoo.com

10-31-2006, 04:17 PM	#20
dv2 Confirmed User Join Date: Aug 2004 Location: New York Posts: 286	no one should be allowed to be smarter then the idiots who are entrusted to secure us...there should be a law against intelligence... oh wait...already is

11-01-2006, 03:18 AM	#22
hydro Confirmed User Join Date: Dec 2003 Location: Dirty 3rd Posts: 4,216	he deserves it, had he done it then gone to the gov and said look at this it would be completely different but his dumbass decided to post up the script.

11-01-2006, 03:35 AM	#23
edgeprod Permanently Gone Industry Role: Join Date: Mar 2004 Posts: 10,019	It's amazing that he even CONSIDERED this wouldn't happen.

11-01-2006, 03:35 AM	#24
V_RocKs Damn Right I Kiss Ass! Industry Role: Join Date: Dec 2003 Location: Cowtown, USA Posts: 32,422	Non-terrorist list suspect gets his legit pass and legit ID checked by the counter peeps... Terrorist list suspect prints a fake boarding pass and uses a fake ID to get to the gate and board the plane using suspect 1's real boarding pass... To bad for that plane...

11-01-2006, 05:27 AM	#25
Wiggles Too lazy to set a custom title Join Date: May 2004 Posts: 14,423	haha what an idiot. __________________ no sig