TSA's master keys leaked, 3D printed

[Deozaan]

The TSA is learning a basic lesson of physical security in the age of 3-D printing: If you have sensitive keys—say, a set of master keys that can open locks you’ve asked millions of Americans to use—don’t post pictures of them on the Internet.

A group of lock-picking and security enthusiasts drove that lesson home Wednesday by publishing a set of CAD files to Github that anyone can use to 3-D print a precisely measured set of the TSA’s master keys for its “approved” locks—the ones the agency can open with its own keys during airport inspections. Within hours, at least one 3-D printer owner had already downloaded the files, printed one of the master keys, and published a video proving that it opened his TSA-approved luggage lock.

-http://www.wired.com/2015/09/lockpickers-3-d-print-tsa-luggage-keys-leaked-photos/

I don't think there's much of a stronger argument against intentionally putting in backdoors to any form of security--including encryption--than this. Once the master/secret key is out, it's over for everybody!

[CWuestefeld]

The big difference here is that if the bad guys can get into my suitcase, they might steal my socks.

The potential damage to us if and when somebody backdoors our secret data is far more serious.

[TaoPhoenix]

I'm currently typing this on my tablet. It's too much work to properly quote the article. I'll edit this later to look nicer.


http://www.wired.com...-keys-leaked-photos/

I don't think there's much of a stronger argument against intentionally putting in backdoors to any form of security, including encryption than this. Once the master/secret key is out, it's over for everybody!

-Deozaan (September 10, 2015, 11:26 AM)

I'm gonna mis-fire my tone a little, but somewhere you (the Govt) can't both whine about "Cybersecurity" and "Let's put in weaknesses!"

Flannery O'Connor goes all "Everything That Rises Must Converge" on you.

So I am starting to disengage in all these stories because actually applying your third day of logic class 103 in college leads to madness. You just have to decide which of eleven squares you step into when you step out of the box, and eight of them lead to insanity. Renny would agree.
 

[40hz]

The big difference here is that if the bad guys can get into my suitcase, they might steal my socks.

The potential damage to us if and when somebody backdoors our secret data is far more serious.

-CWuestefeld (September 10, 2015, 11:37 AM)

Unless instead of stealing your socks they put an additional item or two in your suitcase.

[TaoPhoenix]

The big difference here is that if the bad guys can get into my suitcase, they might steal my socks.

The potential damage to us if and when somebody backdoors our secret data is far more serious.

-CWuestefeld (September 10, 2015, 11:37 AM)

Unless instead of stealing your socks they put an additional item or two in your suitcase.

-40hz (September 10, 2015, 12:23 PM)

40hz was being nice. It gets WAY worse!

[KynloStephen66515]

The big difference here is that if the bad guys can get into my suitcase, they might steal my socks.

The potential damage to us if and when somebody backdoors our secret data is far more serious.

-CWuestefeld (September 10, 2015, 11:37 AM)

Or the $2000 laptop you stored away, your watch and wife's jewelry, that treasured picture you take everywhere...then replace with as much Heroin as they can possibly fit...

I'd say that is far more serious than say....having your e-mail account broken into......

[4wd]

Always wondered how long it would take before those stupid locks were compromised.

I just use coloured cable ties, (different flight, different colour), doesn't stop anyone looking in the luggage, (just like normal locks), but at least it does indicate when someone has looked in the luggage since they're not likely to have whatever colour I happen to have chosen at that time to reseal them with.

[KynloStephen66515]

Always wondered how long it would take before those stupid locks were compromised.

I just use coloured cable ties, (different flight, different colour), doesn't stop anyone looking in the luggage, (just like normal locks), but at least it does indicate when someone has looked in the luggage since they're not likely to have whatever colour I happen to have chosen at that time to reseal them with.

-4wd (September 11, 2015, 05:30 AM)

Put those dye packs that banks use in your luggage

[Stoic Joker]

I'm just going to go with Wow! That is mind-blowingly stupid.

It may seem minor (given the tone of the article), but any small hole in a complex system can be leveraged into larger more dangerous territory.

[4wd]

Put those dye packs that banks use in your luggage

-Stephen66515 (September 11, 2015, 06:49 AM)

Now that would be fun, probably get done for transporting explosives 

Most expensive thing that ever goes in my check-in luggage is my Gerber Multitool, anything electronic or more expensive/essential goes in the carry on backpack.

And to cut the cable ties if necessary:

TSA's master keys leaked, 3D printed

An old key with two sharpened edges, stick it in the cable tie loop and twist. 

[wraith808]

Or the $2000 laptop you stored away,

-Stephen66515 (September 11, 2015, 03:57 AM)

What?!?  You put your laptop into checked luggage?  Even without this, that's a recipe for disaster...

I'd say that is far more serious than say....having your e-mail account broken into......

-Stephen66515 (September 11, 2015, 03:57 AM)

From some of the stuff I've seen happen from having e-mail accounts broken into- and the length of time the damage lingers, I'd rather someone break into my luggage personally.

[KynloStephen66515]

Or the $2000 laptop you stored away,

-Stephen66515 (September 11, 2015, 03:57 AM)

What?!?  You put your laptop into checked luggage?  Even without this, that's a recipe for disaster...

I'd say that is far more serious than say....having your e-mail account broken into......

-Stephen66515 (September 11, 2015, 03:57 AM)

From some of the stuff I've seen happen from having e-mail accounts broken into- and the length of time the damage lingers, I'd rather someone break into my luggage personally.

-wraith808 (September 11, 2015, 07:56 AM)

You ever lost something of your wife's....that shit goes on for far longer than anything that could happen with my e-mails 

[wraith808]

Or the $2000 laptop you stored away,

-Stephen66515 (September 11, 2015, 03:57 AM)

What?!?  You put your laptop into checked luggage?  Even without this, that's a recipe for disaster...

I'd say that is far more serious than say....having your e-mail account broken into......

-Stephen66515 (September 11, 2015, 03:57 AM)

From some of the stuff I've seen happen from having e-mail accounts broken into- and the length of time the damage lingers, I'd rather someone break into my luggage personally.

-wraith808 (September 11, 2015, 07:56 AM)

You ever lost something of your wife's....that shit goes on for far longer than anything that could happen with my e-mails 

-Stephen66515 (September 11, 2015, 09:20 AM)

I'm thinking of that guy's account that got hacked... and he lost everything on every laptop and device. 

[Stoic Joker]

Or the $2000 laptop you stored away,

-Stephen66515 (September 11, 2015, 03:57 AM)

What?!?  You put your laptop into checked luggage?  Even without this, that's a recipe for disaster...

I'd say that is far more serious than say....having your e-mail account broken into......

-Stephen66515 (September 11, 2015, 03:57 AM)

From some of the stuff I've seen happen from having e-mail accounts broken into- and the length of time the damage lingers, I'd rather someone break into my luggage personally.

-wraith808 (September 11, 2015, 07:56 AM)

You ever lost something of your wife's....that shit goes on for far longer than anything that could happen with my e-mails 

-Stephen66515 (September 11, 2015, 09:20 AM)

I'm thinking of that guy's account that got hacked... and he lost everything on every laptop and device. 

-wraith808 (September 11, 2015, 09:50 AM)

Yeah... But remembering that you lost all your stuff...has no where near the sting of having the wife reminding you - constantly and forever - that you lost her stuff..


Point goes to Stephen66515

 

[KynloStephen66515]

Or the $2000 laptop you stored away,

-Stephen66515 (September 11, 2015, 03:57 AM)

What?!?  You put your laptop into checked luggage?  Even without this, that's a recipe for disaster...

I'd say that is far more serious than say....having your e-mail account broken into......

-Stephen66515 (September 11, 2015, 03:57 AM)

From some of the stuff I've seen happen from having e-mail accounts broken into- and the length of time the damage lingers, I'd rather someone break into my luggage personally.

-wraith808 (September 11, 2015, 07:56 AM)

You ever lost something of your wife's....that shit goes on for far longer than anything that could happen with my e-mails 

-Stephen66515 (September 11, 2015, 09:20 AM)

I'm thinking of that guy's account that got hacked... and he lost everything on every laptop and device. 

-wraith808 (September 11, 2015, 09:50 AM)

Yeah... But remembering that you lost all your stuff...has no where near the sting of having the wife reminding you - constantly and forever - that you lost her stuff..


Point goes to Stephen66515

 

-Stoic Joker (September 11, 2015, 11:16 AM)

That summed up exactly what I was trying (and seemingly failing) to say haha!