11 ms·

Ah hah hah haha! And our (USA) law enforcement agencies promise us that any encryption master keys required by their grandiose plans will only be used in cases

by zlynx 6y ago

Ah hah hah haha! And our (USA) law enforcement agencies promise us that any encryption master keys required by their grandiose plans will only be used in cases with proper legal court warrants (ignore the FISA court warrant abuse based on lies and deceit) and will be super secure and never stolen. Just like those secret hacking tools stolen from the CIA. Or these private master keys.

SamuelAdams 6y ago
Don't forget the TSA travel master keys, which can now be 3-D printed by anyone using this repo: https://github.com/Xyl2k/TSA-Travel-Sentry-master-keys https://github.com/Xyl2k/TSA-Travel-Sentry-master-keys
- mitchdoogle 6y ago
  Those things were useless anyway, based on my experience. The one time I used them, TSA neglected to even try opening the lock carefully and simply broke the zipper getting into my luggage.
- hinkley 6y ago
  You can use a ball point pen to pop open the zipper on any luggage. I understand that the illusion of control is very helpful for nervous passengers, but your luggage is leaving your control and it's mostly nylon fabric and plastic.
  - stouset 6y ago
    Yep. And then you can just run the locked zipper back and forth over the opened section to close it, without any evidence of it having been opened.
  - deleted 6y ago
    [deleted]
  - SamuelAdams 6y ago
    Yes, but you're missing the forest for the trees. A government entity (TSA) had a thing built specifically for their needs ("secure" locks for luggage) and promised they would be the only ones capable of unlocking it. Then somehow the "secret" they promised to protect (physical keys) got leaked out somehow and now the entire thing is security theater. Also I think they used these locks on handgun / firearm containers that were declared when travelers with a CPL or LEO people traveled. Those are typically put into a hard container that is difficult to open unless you unlock the lock. EDIT: last paragraph is wrong, please ignore that. Thanks guys.
    - hinkley 6y ago
      > and now the entire thing is security theater. I am not the one missing the forest for the trees. It has always been security theater. From day 1. What's most galling is that quite a lot of the people participating here are young enough that they don't remember a time before the theater. If you are under 30 your first plane flight you can remember is probably after this all started. Locks are mechanical, and a master key can be built by taking apart a lock and measuring the innards. In some cases you can create a master key by filing down the right teeth on a key you already have. Master keys in apartment buildings are an old, known problem to competitive lockpickers. As other people are pointing out elsewhere in this thread, carrying a firearm requires that you use a lock-lock, not a TSA "lock".
    - mulmen 6y ago
      I don’t think you have to use a TSA lock on luggage with a firearm [1]. If it meets the legal definition of a “firearm” you trigger (get it?) the TSA rules that allow you to use a non-joke lock. Since this includes just the legal firearm you don’t even have to carry an actual gun to prevent the TSA from sniffing your undies. Deviant Ollam gave an (in)famous talk [2] about this at Defcon. [1]: https://www.tsa.gov/travel/transporting-firearms-and-ammunition https://www.tsa.gov/travel/transporting-firearms-and-ammunit... [2]: https://youtu.be/KfqtYfaILHw https://youtu.be/KfqtYfaILHw
      - swimfar 6y ago
        That's a funny hack. However, this looks like conflicting advice: "Only the passenger should retain the key or combination to the lock unless TSA personnel request the key to open the firearm container to ensure compliance with TSA regulations. You may use any brand or type of lock to secure your firearm case, including TSA-recognized locks." If you use a TSA lock, that means they have a key to open up the case and access the firearm without you around. That's a big no-no and could result in problems with the law. You'd also probably want to show up an extra hour early because this could cause long delays. Some airports are notorious for workers who don't know the regulations, don't want to be responsible for any of it, and will refuse to do anything to help you resolve the situation. Also, definitely don't try this if you're flying through New York or New Jersey.
- cdumler 6y ago
  Simply put: putting anything you can't replace into checked luggage is foolish. The TSA is a lot more likely to steal your stuff than some random person with a printed key. Plus, if you use a real lock, they have the right to clip it off, which is trivial. Don't put stuff of value into checked luggage. Keep it on your person or ship it via a carrier who has insurance.
  - panopticon 6y ago
    > Plus, if you use a real lock, they have the right to clip it off, which is trivial. Life hack: you can pack a stripped AR lower, and it's legally a firearm. You must use a non-TSA lock, and the TSA (nominally) is not allowed to open it. Though your core point is valid: your nylon luggage isn't going to keep anyone determined out.
    - kamyarg 6y ago
      I did not understand, what is a "stripped AR lower"? And why is TSA not allowed to open it? Edit: I guess AR is Assault Rifle?
      - panopticon 6y ago
        In the US (not sure about your location or the laws in other countries), the part of an AR-15 that qualifies as the "firearm" in the eyes of the law is the lower receiver. It's a machined block of metal and does not do anything on its own. When transporting a firearm through air travel, it's supposed to be locked such that only the owner can open it. So you can claim you're carrying a firearm with nothing but a small-ish piece of metal in your luggage. For illustration: https://i.imgur.com/ARZgZV6.png https://i.imgur.com/ARZgZV6.png. The non-transparent part is the lower receiver. As an aside, the "AR" in AR-15 stands for Armalite Rifle (after the company that originally designed it); not "assault rifle".
        kamyarg 6y ago
        thanks for the explanation. I am not living in US, so not very familiar.
- thephyber 6y ago
  > Recently, pictures of TSA master baggage keys got leaked by the Washington Post and also PDFs hosted on TravelSentry's Website. I'm glad we don't need to trust the TSA with following any kind of security protocols. /s
- deleted 6y ago
  [deleted]

by zlynx 6y ago

SamuelAdams 6y ago

Don't forget the TSA travel master keys, which can now be 3-D printed by anyone using this repo: https://github.com/Xyl2k/TSA-Travel-Sentry-master-keys https://github.com/Xyl2k/TSA-Travel-Sentry-master-keys

mitchdoogle 6y ago
Those things were useless anyway, based on my experience. The one time I used them, TSA neglected to even try opening the lock carefully and simply broke the zipper getting into my luggage.
hinkley 6y ago
You can use a ball point pen to pop open the zipper on any luggage. I understand that the illusion of control is very helpful for nervous passengers, but your luggage is leaving your control and it's mostly nylon fabric and plastic.
- stouset 6y ago
  Yep. And then you can just run the locked zipper back and forth over the opened section to close it, without any evidence of it having been opened.
- deleted 6y ago
  [deleted]
- SamuelAdams 6y ago
  Yes, but you're missing the forest for the trees. A government entity (TSA) had a thing built specifically for their needs ("secure" locks for luggage) and promised they would be the only ones capable of unlocking it. Then somehow the "secret" they promised to protect (physical keys) got leaked out somehow and now the entire thing is security theater. Also I think they used these locks on handgun / firearm containers that were declared when travelers with a CPL or LEO people traveled. Those are typically put into a hard container that is difficult to open unless you unlock the lock. EDIT: last paragraph is wrong, please ignore that. Thanks guys.
  - hinkley 6y ago
    > and now the entire thing is security theater. I am not the one missing the forest for the trees. It has always been security theater. From day 1. What's most galling is that quite a lot of the people participating here are young enough that they don't remember a time before the theater. If you are under 30 your first plane flight you can remember is probably after this all started. Locks are mechanical, and a master key can be built by taking apart a lock and measuring the innards. In some cases you can create a master key by filing down the right teeth on a key you already have. Master keys in apartment buildings are an old, known problem to competitive lockpickers. As other people are pointing out elsewhere in this thread, carrying a firearm requires that you use a lock-lock, not a TSA "lock".
  - mulmen 6y ago
    I don’t think you have to use a TSA lock on luggage with a firearm [1]. If it meets the legal definition of a “firearm” you trigger (get it?) the TSA rules that allow you to use a non-joke lock. Since this includes just the legal firearm you don’t even have to carry an actual gun to prevent the TSA from sniffing your undies. Deviant Ollam gave an (in)famous talk [2] about this at Defcon. [1]: https://www.tsa.gov/travel/transporting-firearms-and-ammunition https://www.tsa.gov/travel/transporting-firearms-and-ammunit... [2]: https://youtu.be/KfqtYfaILHw https://youtu.be/KfqtYfaILHw
    - swimfar 6y ago
      That's a funny hack. However, this looks like conflicting advice: "Only the passenger should retain the key or combination to the lock unless TSA personnel request the key to open the firearm container to ensure compliance with TSA regulations. You may use any brand or type of lock to secure your firearm case, including TSA-recognized locks." If you use a TSA lock, that means they have a key to open up the case and access the firearm without you around. That's a big no-no and could result in problems with the law. You'd also probably want to show up an extra hour early because this could cause long delays. Some airports are notorious for workers who don't know the regulations, don't want to be responsible for any of it, and will refuse to do anything to help you resolve the situation. Also, definitely don't try this if you're flying through New York or New Jersey.
cdumler 6y ago
Simply put: putting anything you can't replace into checked luggage is foolish. The TSA is a lot more likely to steal your stuff than some random person with a printed key. Plus, if you use a real lock, they have the right to clip it off, which is trivial. Don't put stuff of value into checked luggage. Keep it on your person or ship it via a carrier who has insurance.
- panopticon 6y ago
  > Plus, if you use a real lock, they have the right to clip it off, which is trivial. Life hack: you can pack a stripped AR lower, and it's legally a firearm. You must use a non-TSA lock, and the TSA (nominally) is not allowed to open it. Though your core point is valid: your nylon luggage isn't going to keep anyone determined out.
  - kamyarg 6y ago
    I did not understand, what is a "stripped AR lower"? And why is TSA not allowed to open it? Edit: I guess AR is Assault Rifle?
    - panopticon 6y ago
      In the US (not sure about your location or the laws in other countries), the part of an AR-15 that qualifies as the "firearm" in the eyes of the law is the lower receiver. It's a machined block of metal and does not do anything on its own. When transporting a firearm through air travel, it's supposed to be locked such that only the owner can open it. So you can claim you're carrying a firearm with nothing but a small-ish piece of metal in your luggage. For illustration: https://i.imgur.com/ARZgZV6.png https://i.imgur.com/ARZgZV6.png. The non-transparent part is the lower receiver. As an aside, the "AR" in AR-15 stands for Armalite Rifle (after the company that originally designed it); not "assault rifle".
      - kamyarg 6y ago
        thanks for the explanation. I am not living in US, so not very familiar.
thephyber 6y ago
> Recently, pictures of TSA master baggage keys got leaked by the Washington Post and also PDFs hosted on TravelSentry's Website. I'm glad we don't need to trust the TSA with following any kind of security protocols. /s
deleted 6y ago
[deleted]