5 ms·
They could have used a magic 8 ball with similar outcomes
by factorfractal 11y ago
They could have used a magic 8 ball with similar outcomes
- SandB0x 11y agoOr even a coin.
- fabulist 11y agoFor that matter, they could tell odd parties to go left and even parties to go right.
- agf 11y agoI doubt this was meant seriously, but it's worth noting this actually doesn't work. You need each left/right decision to be independent so that positioning yourself at a certain place in line doesn't allow you to choose left/right.
- fabulist 11y agoSo you're saying this app operated by TSA agents is meant to defeat attackers looking to be screened by cooperative TSA agents? I can't help but feel something is lacking in this threat model.
- KMag 11y agoDefense in depth is a real thing.
- deleted 11y ago[deleted]
- deleted 11y ago[deleted]
- fabulist 11y agoMore and more it seems to me that there is no replacement for correctness, and you have to squint to tell this apart from theater. Perhaps I'm exaggerating. It would certainly raise costs to the attacker to recruit an additional collaborator, and to wait for a serendipitous scheduling. But I'm not convinced it raises the difficulty by $300k.
- agf 11y agoI'm not sure I understand this. If I were to observe the pattern before I reach the agent, it would be easy enough to let someone go ahead of me while pretending to finish a phone call or something. It doesn't require the cooperation of the TSA agent.
- cha5m 11y agoNah because the whole idea is that the system needs to be unpredictable.
- fabulist 11y agoI'll bet you an Airbus that if we managed to FOIA the source code it would use an LCG seeded from the system clock.
- cha5m 10y agoBut that isn't manipulable by someone standing in line, so it is effectively random. You can't determine exactly when the tsa person will press the button.
- fabulist 10y agoIf that was the only requirement the TSA agent could direct you however they pleased as long as you couldn't predict it. The reason to use a software solution, one imagines, is to protect from corrupt TSA agents. Corrupt TSA agents know when they turn their iPads on. Additionally, by observing several passengers being directed this way or that, you could brute force the seed and the system becomes deterministic.
- madaxe_again 11y agoFor the money, they could have given every TSA employee a silver dollar to toss.
- venomsnake 11y agoDice app that could support even 6 lanes - free. https://play.google.com/store/apps/details?id=tobi.wuerfel&hl=en https://play.google.com/store/apps/details?id=tobi.wuerfel&h... [1] [1] Not affiliated or tested. It was the first I found without inapp purchases or ads.
- ghayes 11y agoBut could it support 7 lanes? (This is a somewhat serious question)
- ernok 11y agoTry http://äppärät.com http://äppärät.com . It uses a REAL die. And you can look at it on an iPad.
- AndyNemmity 11y agoBut as a service it isn't controlled. What if someone took control of it, and then used it to game the system. Security is shot. Not that I really think that matters at all, but that would be shot down in the first meeting it was discussed immediately, and you'd be considering insane if you kept pushing it.