5 ms·
Or even a coin.
by SandB0x 11y ago
Or even a coin.
- fabulist 11y agoFor that matter, they could tell odd parties to go left and even parties to go right.
- agf 11y agoI doubt this was meant seriously, but it's worth noting this actually doesn't work. You need each left/right decision to be independent so that positioning yourself at a certain place in line doesn't allow you to choose left/right.
- fabulist 11y agoSo you're saying this app operated by TSA agents is meant to defeat attackers looking to be screened by cooperative TSA agents? I can't help but feel something is lacking in this threat model.
- KMag 11y agoDefense in depth is a real thing.
- deleted 11y ago[deleted]
- deleted 11y ago[deleted]
- fabulist 11y agoMore and more it seems to me that there is no replacement for correctness, and you have to squint to tell this apart from theater. Perhaps I'm exaggerating. It would certainly raise costs to the attacker to recruit an additional collaborator, and to wait for a serendipitous scheduling. But I'm not convinced it raises the difficulty by $300k.
- agf 11y agoI'm not sure I understand this. If I were to observe the pattern before I reach the agent, it would be easy enough to let someone go ahead of me while pretending to finish a phone call or something. It doesn't require the cooperation of the TSA agent.
- cha5m 11y agoNah because the whole idea is that the system needs to be unpredictable.
- fabulist 11y agoI'll bet you an Airbus that if we managed to FOIA the source code it would use an LCG seeded from the system clock.
- cha5m 11y agoBut that isn't manipulable by someone standing in line, so it is effectively random. You can't determine exactly when the tsa person will press the button.
- fabulist 10y agoIf that was the only requirement the TSA agent could direct you however they pleased as long as you couldn't predict it. The reason to use a software solution, one imagines, is to protect from corrupt TSA agents. Corrupt TSA agents know when they turn their iPads on. Additionally, by observing several passengers being directed this way or that, you could brute force the seed and the system becomes deterministic.
- madaxe_again 11y agoFor the money, they could have given every TSA employee a silver dollar to toss.