Pulling Back the Curtain on Airport Security: Can a Weapon Get Past TSA?
summary
Shows concrete failures: RapidScan 522B ships with plaintext service creds, a buggy TIP mode that injects fake threat images into screener displays, and runs legacy Windows; Kronos time clocks expose hardcoded FTP/telnet/web credentials and grant shell access, with ~6,000 devices visible on the Internet; Itemizer 3 contains hidden admin2/superuser2 accounts and a config.bin that controls detection thresholds. Issues were reported to DHS months earlier, vendors give mixed responses, and TSA operates ~50,000 staff with a $7.39B 2014 budget.
AI-written summary · about
chapters (7)
- 0:00Start
- 2:36Disclosure
- 2:52Response?
- 3:38Scenarios
- 9:03A Word About Backdoors
- 9:47Technician Accounts -- Backdoors
- 22:50File System
related talks
38mHacking Demos, Dirty Secrets, Dangerous Lies, Asset Intelligence
38mExposing Security Flaws in Trading Technologies
28mGoldilocks and the Three ATM Attacks
01h 00mSecurity Theatre
21mSecurity is Everyone's Responsibility
58mMedical Device Security
41mUnlocking Any Door In 21st Century. Immersion In Bio-Security
35mHas your flight been cancelled? You might be eligible for a cybersec session!