College Student Proves TSA “Boarding Pass/ID Check is Useless”

I never thought about it, but it's much easier to defeat TSA security than I realized.

(Image is in the Public Domain)

Bruce Schnier found an intereting article in the NY Times about a bored computer science student wrote a webpage that printed nearly identical boarding passes to those used by Northwest Airlines. Using the fake passes, people were successfully able to bypass airport security. The important part of this article, is the fact that the student did no hacking, no cracking, no breaking of any system. All he did was make passes that looked real.

No cryptographic recipe was cracked; no airline computer system was compromised. Without visiting an airport, Mr. Soghoian needed access to nothing other than a public Web site to embarrass those responsible for airport security.

As security professionals have been saying for years, these measures make life difficult for law-abiding citizens, but do little to stop the bad guys.