News for hackers. Stuff that matters.

A comment on Bypassing airport security via SQL injection. Parent comment

Re:Bypassing airport security via SQL injection by hn72774 on Thursday August 29, 2024 @02:00PM (#41393567)
We know that backdoors can be intentional for use by 3-letter agencies. And there is plausible deniability of the bureaucracy when they can pass blame onto a single individual.

Or it's beuracracy being beuracracy. The TSA is a lot of security theater anyways.

[ Parent | on HN ]
Re:Bypassing airport security via SQL injection by seanthemon on Thursday August 29, 2024 @02:08PM (#41393655)
This is a bit of ridiculous comment. Who in the right mind would say a sql injection is a backdoor for a 3LA?

Added, why would they use FlyCass when they could just access the data directly?

[ Parent | on HN ]
Re:Bypassing airport security via SQL injection by hn72774 on Thursday August 29, 2024 @02:18PM (#41393757)
To move someone from one place to another without an official record of the person?

Honeypot? Legit logins are logged differently than non-legit?

[ Parent | on HN ]
Re:Bypassing airport security via SQL injection by woodruffw on Thursday August 29, 2024 @02:53PM (#41394124)
The US (and almost every government) has reliable ways to covertly move a person that don't involve putting SQLi in their own codebases.

The classic way to covertly move a person is to give them a new passport to travel under, and have them move around like every other schlub on the planet. Competent intelligence services make sure that this isn't easy to detect by making the fake passport's identifier indistinguishable from real ones. Russia has prominently failed to do this several times[1][2].

[1]: https://www.bellingcat.com/news/uk-and-europe/2019/11/07/how...

[2]: https://www.bellingcat.com/news/2022/08/25/socialite-widow-j...

[ Parent | on HN ]
Re:Bypassing airport security via SQL injection by seanthemon on Thursday August 29, 2024 @02:20PM (#41393783)
yes, they _definitely_ need to access flycass to achieve this. Almost certainly no other way.
[ Parent | on HN ]
Re:Bypassing airport security via SQL injection by fortran77 on Thursday August 29, 2024 @04:35PM (#41395005)
I think a TLA would jsut generate the proper flight crew credentials.
[ Parent | on HN ]
Re:Bypassing airport security via SQL injection by walthamstow on Friday August 30, 2024 @03:11AM (#41398374)
I have to say I admire the linguistic beauty of your turning Three-Letter Agency into a three-letter acronym.
[ Parent | on HN ]
Re:Bypassing airport security via SQL injection by OJFord on Friday August 30, 2024 @06:18AM (#41399341)
You'll enjoy https://en.m.wikipedia.org/wiki/Three-letter_acronym
[ Parent | on HN ]