I do not fly nearly as much as I used to. But I fly enough to still dislike TSA.
I remember when “inspection” was relatively new. The year was 1974. I was going to college as a new Junior.
For that trip, I decided to carry my tuition as Eisenhower dollar coins. Long gone now, those coins were, big and hefty. My semester tuition, about $1,000 (which seems so cheap now) weighed about 45 pounds. As I was getting on the airplane, the inspector gingerly opened my briefcase, opened one of the three bank bags and asked me what it was. When I said “money”, the inspector gingerly closed the case and handed it back.
This was before the days of scanning and before removing shoes and on and on. And it didn’t really matter then.
Today it is much, much worse. And it still doesn’t really matter.
Bruce Schneier wrote a recent opinion in the LA Times. It lays out the issues very clearly. And, it explains exactly how to work around the sytem.
Anyone on the no-fly list can easily fly whenever he wants. Even worse, the whole concept of matching passenger names against a list of bad guys has negligible security value.
How to fly, even if you are on the no-fly list: Buy a ticket in some innocent person’s name. At home, before your flight, check in online and print out your boarding pass. Then, save that web page as a PDF and use Adobe Acrobat to change the name on the boarding pass to your own. Print it again. At the airport, use the fake boarding pass and your valid ID to get through security. At the gate, use the real boarding pass in the fake name to board your flight.
The problem is that it is unverified passenger names that get checked against the no-fly list. At security checkpoints, the TSA just matches IDs to whatever is printed on the boarding passes. The airline checks boarding passes against tickets when people board the plane. But because no one checks ticketed names against IDs, the security breaks down.
This vulnerability isn’t new. It isn’t even subtle. I first wrote about it in 2006. I asked Kip Hawley, who runs the TSA, about it in 2007. Today, any terrorist smart enough to Google “print your own boarding pass” can bypass the no-fly list.
So, why are we doing this? Are we just protecting ourselves from the people who don’t know any better?
Does all of this hassle make people feel better? Does it make you feel better?















