You shouldn't have to be an expert to be safe on a computer.

Home

Guides

Seminars

Tips and Tricks

Log in
Keywords
Categories
Tags
Options
1. Enter Keyword(s):
2. Add to Search:




Filter:
Filter:
Search:



Show:



Posts Per Page:
English-ness:


Results Listing Type:

Skip the Nudie Scanner, Get Extra Frisking as Punishment

Wednesday, May 5th, 2010 (No comments yet) Physical Security, Privacy

There are some people who have reported extra screening and scrutiny of their person and personal belongings when they refuse to engage in the TSA nudie scanner fiasco.

I went over to the TSA blog to see what the climate was and the responses are overwhelmingly against the technology.

From the complaints that have been coming in, it seems to be common practice for TSA to send people through the machines without telling them what they do or offering them a choice. How does anyone think that this is OK?

And

Bob, why would the TSA use backscatter at all when MMW is much less risky in terms of exposure to harmwave wavelengths.

There were other issues listed such as the scanning of children nude and the right to ask that your belongings always remain in your sight while they're being analyzed (which is only useful if you know about that right).

I once met the head of privacy for the TSA, Peter P., and got his contact information. I just sent him an e-mail suggesting that the only way that it would be ethical to use these machines is to:

  1. Post on the machine actual, unedited, unblurred photos of real people being scanned.
  2. Verbally tell each person to be scanned that they may opt-out every time

I don't know if he'll respond or what he'll say, but expect they won't do either of these because if they did, people would probably never use them at all. But that's the point isn't it? We should know exactly what's going to happen and be able to make an informed choice.

Anyway, if he does respond, I'll post it here.

Update

It's really quite surprising how quickly he responded. Not more than 2 hours after my e-mail, I received a phone call where he answered my questions.

He says there are already images on all machines that are exactly what the operators see, just not life sized though he didn't know why that matters to people. In fact, some people have complained about the nudity on the signs (which I expected would happen, but we don't care about them do we :) ).

There are also indications that you can choose to have a pat down in the largest font of all text on the machine. I can't really say if that's sufficient considering I haven't seen the machines personally, though I doubt a simple sign is enough unless it's a pretty big font.

He says a verbal notice would add too much time and present it more as a negative thing when it wasn't (a matter of opinion) and he's right about that so I didn't expect much. The main thing is how the operators act in practice. If someone seems hesitant, they should immediately offer the pat-down instead, but do they?

On the subject of how people are treated when refusing the scan, he said that it's impossible to monitor that process, but they are trained not to do extra screening just because someone opted-out. He also pointed out that at last year's CFP Conference a woman who claimed to have been subjected to nearly 20 minutes of screening was actually only there for less than 3 (they checked the video). He said perception plays a large part and I can't disagree with that.

What is fact is that people are frustrated and angry. We don't trust that the machines won't be misused and there's at least one case where they already were. Is there anything the TSA could do to win our trust? Who' knows, but here's the page where they have all the information about the machines and how they're used.

Tags: ,

TSA Nudie Scanners May Violate Child Porn Laws

EPIC has been fighting what they call Whole Body Imaging for a while now, but this is an interesting new twist. I never thought about this before, but taking a nude scan of a minor is a violation of child pornography laws.

So if this is really the case, and the TSA doesn't get some kind of exception they will be barred from scanning anyone under 18 at which point the terrorists get an advantage by sending through young recruits (or ones young enough to plausibly lie about it).

The really sad thing about all this is that the technology is very good. It's less invasive than a strip search or pat down and it's extremely fast and easy for the traveler. If it were possible to trust that the TSA could keep the images from being stored and distributed, maybe even I could support it.

Tags: , ,

GPS Tracking Watch for Parents

Monday, September 21st, 2009 (No comments yet) For Parents, Physical Security, Privacy
Track your kids in real-time online with GPS
Track your kids in real-time online with GPS

Here's a tool for you ultra-paranoid: a GPS watch you can make your kids wear.

Parents can see the location of their child on Google maps by clicking 'where r you' on a secure website or texting 'wru' to a special number. Safe zones can also be programmed with parents being alerted if their child strays outside this zone.

The watch, which is designed in bright colours to appeal to children, can be tightly fastened to a child's wrist and sends an alert if forcibly removed.

Two things to keep in mind before doing this:

  1. If you tag kids with monitoring devices, we will be raising a generation of people who don't see a problem with being tagged and tracked. This sets a very dangerous precedent for the future if we are to retain our personal liberties.
  2. The company that supplies the information also gets to see where your kid is which creates a new set of problems. Now if someone hacks that company, they have a menu of kids to choose from. Also, since your kid is usually with you at a young age, you're not allowing yourself to be tracked as well. What does the company do with all that data? Would they possibly share or sell it? Could they lose it in a data breach?

I think that this watch could be very useful for high-profile kids like the President's or similar, but for regular kids, proper parenting might be a better defense. After all, it worked for all of us.

Tags: , , , , ,

Key Duplication Issues

Monday, September 21st, 2009 (No comments yet) Identity Theft, Physical Security

I found this today online (thanks Bruce!). This story is about a guy who managed to duplicate the key used by Dutch police for their handcuffs.

The police probably shouldn't have their keys hanging visible to the world.
The police probably shouldn't have their keys hanging visible to the world.

The first main point to learn from this is that you have to be really careful when you walk around in public with identity badges or keys visible. They can be photographed at great distance and be duplicated at leisure (as in the example a while back where a researcher photographed a key on the ground from over 200 feet away and was able to make a working duplicate of it).

Second, he used a 3D printer to create the key from plastic instead of metal which was cheaper, easier and something most anyone can do (if they have or can get access to a 3D printer). It's worse because the key is plastic and won't trip a metal detector. But the issue that no one has talked about yet is the danger of the photo used to show off the key.

Here is the key, but something else important as well.
Here is the key, but something else important as well.

The person holding it (which I assume was the creator of the key) has fully visible fingers with ridge detail clear enough to possibly create a false fingerprint (just like he did with the key). In other words, by posting a photo showing his fingerprints, he may have just made the same mistake that the police did when they left their keys in the open to be photographed and copied.

Remember to always be careful when posting photos online.

Tags: , , ,

Man Robbed Because Hoax Craigslist Ad Said Everything Was Free

Here's a great example of how knowing something as simple as where someone lives along with when they're out of town is enough to make their life hell. While this poor guy was minding his business fishing on a lake somewhere, someone called to ask about the free stuff at his house. The thing is, he wasn't giving anything away at all.

Someone posted an ad on Craigslist.com stating that everything on his property was free and people came to rob the place blind.

Tags: ,
Support the Geek

If you hate ads as much as I do, please consider supporting us by donating or browsing our recommended products


Recommended Products and Services
Quick Tips: