A hacker stumbled upon TSA's no-fly list via unsecured airline server
a Swiss hacker known as "maia arson crimew" found the unsecured server while using the specialized search engine Shodan. There was apparently a lot of sensitive information on the server, including a version of the no-fly list from four years ago
#commuteair #TSA #travel #airlines #nofly #noflylist #security #cybersecurity #infosec #databrech #hacker #hacking #hacked
US Airline Accidentally Exposes 'No Fly List' On Unsecured Server - Slashdot
contained the identities of hundreds of thousands of individuals from the US gov’s Terrorist Screening DB & "No Fly List." … was left exposed on the public internet. It revealed a vast amount of company data, including private info on almost 1,000 #CommuteAir employees.
#privacy #noflylist
An anonymous reader quotes a report from the Daily Dot: An unsecured server discovered by a security researcher last week contained the identities of hundreds of thousands of individuals from the U.S. government's Terrorist Screening Database and "No Fly List." Located by the Swiss hacker known as m...
The US-based airline #CommuteAir accidentally exposed the No Fly List that includes the identity of hundreds of thousands of individuals included in the US Government's Terrorist Screening Database.
The dataset was left exposed on the public Internet due to pure incompetence.
The file was conveniently named NoFly.csv and contained about 1.5 million entries 🤦
This situation exemplarises the principle of the weakest link in #security.
https://www.dailydot.com/debug/no-fly-list-us-tsa-unprotected-server-commuteair/
gtbarry
Dennis "D.C." Dietrich
PrivacyDigest
J👀