Technology

34828 readers

19 users here now

This is the official technology community of Lemmy.ml for all news related to creation and use of technology, and to facilitate civil, meaningful discussion around it.

Ask in DM before posting product reviews or ads. All such posts otherwise are subject to removal.

Rules:

1: All Lemmy rules apply

2: Do not post low effort posts

3: NEVER post naziped*gore stuff

4: Always post article URLs or their archived version URLs as sources, NOT screenshots. Help the blind users.

5: personal rants of Big Tech CEOs like Elon Musk are unwelcome (does not include posts about their companies affecting wide range of people)

6: no advertisement posts unless verified as legitimate and non-exploitative/non-consumerist

7: crypto related posts, unless essential, are disallowed

founded 5 years ago

MODERATORS

[email protected]

188

Bypassing airport security via SQL injection (ian.sh)

submitted 2 months ago by [email protected] to c/[email protected]

15 comments fedilink hide all child comments

cross-posted from: https://fed.dyne.org/post/228188

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 96 points 2 months ago (6 children)

The TSA press office said in a statement that this vulnerability could not be used to access a KCM checkpoint because the TSA initiates a vetting process before issuing a KCM barcode to a new member. However, a KCM barcode is not required to use KCM checkpoints, as the TSO can enter an airline employee ID manually. After we informed the TSA of this, they deleted the section of their website that mentions manually entering an employee ID, and did not respond to our correction. We have confirmed that the interface used by TSOs still allows manual input of employee IDs.

TSA: lalala i can't hear you, everything is fine, no issue here

[–] [email protected] 1 points 2 months ago

100% not true.

A bar code is required for KCM. Has been for a while now. Manual entries have not been allowed for quite some time.

load more comments (5 replies)