News for hackers. Stuff that matters.
Re:3D reproduction of TSA Master keys (2016) by Someone1234 on Tuesday February 15, 2022 @10:22AM (#30347612)
This is why I use a zip-tie. All the "security" of a TSA lock, but also some limited proof that your bag was tampered with (in particular if you use an uncommon color/shade).

PS - Although both are largely security theater, as you can just shove a pen into the zipper.

Re:3D reproduction of TSA Master keys (2016) by maest on Tuesday February 15, 2022 @01:37PM (#30350715)
IN many parts of Europe, I've seen people shrink wrap their luggage, like so:

https://media-cldnry.s-nbcnews.com/image/upload/t_fit-760w,f...

I think it serves a similar function.

Re:3D reproduction of TSA Master keys (2016) by nextgens on Tuesday February 15, 2022 @10:49AM (#30348049)
Use the zip-tie to "anchor" the slider too... that will defeat the pen trick.
Re:3D reproduction of TSA Master keys (2016) by bradknowles on Wednesday February 16, 2022 @01:25AM (#30356924)
Nope. Just stick a pen right through the zipper itself.

Don’t need any slider for that attack.

Re:3D reproduction of TSA Master keys (2016) by nextgens on Wednesday February 16, 2022 @04:35AM (#30357966)
Yes, we're talking about an attack against the zipper (and not the zip tie nor the bag)

The goal here is tamper evidence... sure you can open the bag through the zipper but you won't be able to close the zipper back if you can't move the sliders.

Re:3D reproduction of TSA Master keys (2016) by bradknowles on Wednesday February 16, 2022 @09:10PM (#30368745)
I dunno, I think something like [1] could do a pretty good job of putting the zipper back together and then you would just have to remove the underside component at the very end and then jiggle the existing zippers to hide the fact that it had ever been opened that way.

I suspect there might be even more surreptitious versions of such tools.

[1] https://guide.sportsmansguide.com/tips/camping-101-quick-fix...

Re:3D reproduction of TSA Master keys (2016) by nextgens on Thursday February 17, 2022 @04:39AM (#30371252)
Sure you can defeat it using specialized tools... but at that point, you are far from "all I need is a pen" and opportunistic attacks. The tool will have to match the width of the zipper: you'll need a collection or to have done reconnaissance.

At that point, shimming the zip-tie itself is probably easier/faster (and doable without specialized tools).

Re:3D reproduction of TSA Master keys (2016) by suifbwish on Tuesday February 15, 2022 @12:13PM (#30349340)
Superglue works well too
Re:3D reproduction of TSA Master keys (2016) by kube-system on Tuesday February 15, 2022 @12:18PM (#30349423)
This is what I do. The key is to use the small size zip ties and leave it little bit loose. Then you open it by putting a hotel pen in the loop and twisting, rather than needing a sharp implement.
Re:3D reproduction of TSA Master keys (2016) by tkinom on Tuesday February 15, 2022 @02:19PM (#30351308)
One can easily cut the zip-tie, search and re-zip it again, right?
Re:3D reproduction of TSA Master keys (2016) by bradknowles on Wednesday February 16, 2022 @01:27AM (#30356941)
Yeah, but you can get zip ties that are uniquely numbered and colored. They’re meant to help ensure that cargo shipments get to their destination without being tampered with, which is exactly the kind of threat model we need to use against the TSA.

Yes, those could be faked. But your regular joe TSA agent isn’t going to be able to do that, just like your regular 18 wheeler driver isn’t going to be able to do that.

If you’re dealing with someone that wants to break into your luggage and they can fake the uniquely numbered and colored zip ties, then you’ve got a much higher threat on your hands that you need to deal with in other ways.