4 ms·
> This still has some problems like being able to enumerate over time. 1. There are eight billion people. Even if you had everyone's first name, last name an
by htag 4y ago
> This still has some problems like being able to enumerate over time.
1. There are eight billion people. Even if you had everyone's first name, last name and DOB you couldn't ask for more names (or more foreign names) then the size and location of your airline would allow without raising red flags with the wrong type of people. You would never get the complete list this way.
2. If you ask a DHS server if someone is allowed on an airplane, and they say no, there's a good chance that eventually someone at DHS will start to investigate. It's going to look a little bad if you don't have a reason for looking up the name. It's going to look very bad if this happens many times.
3. I wonder if an end user of an airline webportal could try to purchase tickets in someone else's and then see if it's denied to check if someone is on the no fly list.
- maxerickson 4y agoWhy would it be suspicious for an airline to use a system designed to check the flight status of an individual? Sure, it could be suspicious for an airline to make requests that didn't line up with likely prospective passengers, but that isn't at all how you phrased your second point.
- htag 4y agoOn the second point it's not the airline that it suspicious but the individual on the list. Their actions might be under investigation, and that might include attempting to buy an airplane ticket. What happens if they never actually tried to buy the ticket, but someone was trying to recreate the list? Wouldn't this type of event occur many many times, and the airline might begin to standout.