3 ms·
Possible easy way to fix this: Include a QR code on the printed boarding pass that holds the details of the passenger and flight along with a hash of the data,
by samwillis 15y ago
Possible easy way to fix this:
Include a QR code on the printed boarding pass that holds the details of the passenger and flight along with a hash of the data, the hash being salted with a secret known only to TSA. The TSA agent then scans the QR code, computer verifies the hash and displays the data on screen for the agent to check against the printed boarding pass and ID. No database look up is needed, just a PC and webcam.
Danger is someone works out or leaks the hash secret.
- fr0sty 15y agoThe real danger is someone figures out how to spoof a legitimate request to the TSA-QR service and have them create authentic codes with bogus data. Never mind that the solution itself is far from 'easy'. Somehow linking every ticket printer to a central TSA-QR service in a reliable and secure way sounds like, uh, fun...
- Drbble 15y agoLike how credit card processing works?
- fr0sty 15y agoYes, but only if: 1. All existing hardware and software magically vanishes 2. The government is put in charge of implementing its replacement. 3. The whole system is a dead-weight loss which exists to serve the whims of government oversight rather than facilitate commerce.
- namdnay 15y agoThe easiest way is to do it like in the rest of the world: when the agents board you, have them check your ID. Simple!