Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×
Security

TSA Luggage Lock Master Keys Are Compromised 220

An anonymous reader writes: As the FBI demand encryption master keys for Apple, Microsoft and Google made devices, photographs of the master keys for the TSA Travel Sentry suitcases have now been published in multiple places online (more links in later articles). Cory Doctorow points out this makes it much easier for thieves to open luggage undetectably, without leaving any signs of lock picking. Whilst many have argued that the locks aren't designed to provide real security, the most important thing is that this shows the risk of backdoors in security systems, especially since the TSA has not given any warning about this compromise, which seems to have occurred in 2014 or earlier.
This discussion has been archived. No new comments can be posted.

TSA Luggage Lock Master Keys Are Compromised

Comments Filter:
  • by drinkypoo ( 153816 ) <drink@hyperlogos.org> on Wednesday September 09, 2015 @09:08AM (#50485801) Homepage Journal

    I always assumed that these keys had been figured out long, long ago. If there's people in Afghanistan who can make you an AK-47 by hand, there must be people in China who can just not assemble the locks and take the parts to a smith (where do you think TSA locks are made?) and get a key made. I'd be surprised if you can't just buy the keys on aliexpress.

    • Re: (Score:2, Informative)

      by Anonymous Coward
      I always assumed all luggage locks were vulnerable, unless you have a hard case with a real lock (e.g. for carrying a firearm... or cheap firearm plus actual valuables). The only reason to use the locks seemed to be as extra protection against the luggage becoming unzipped or or unclipped, and dumping your clothes out. It was a small protection against an inconvenience/minor loss, not a serious protection against potential large losses.
      • Even with a hard case and real lock, they're vulnerable. I had a firearm going through with dual locks and the lovely TSA sticker on it that said " firearm inside ".

        Both locks were present when TSA put it on the conveyer belt, only one came out the other side. My guess is some idiot was in the process of cutting them off when they noticed the TSA sticker :|

        No way it broke off on its own without damaging the case.

    • by AmiMoJo ( 196126 ) on Wednesday September 09, 2015 @09:30AM (#50485955) Homepage Journal

      The most annoying part is that luggage sold outside the US often has TSA locks on it. If they put a proper lock on there it would have some value to me, but instead I get to pay for a worthless one that I'll never need or use.

      Once the warranty expires I usually fill the lock with epoxy (the main mechanism is a combination lock, the key is just for the TSA goons).

      • by tlhIngan ( 30335 )

        The most annoying part is that luggage sold outside the US often has TSA locks on it. If they put a proper lock on there it would have some value to me, but instead I get to pay for a worthless one that I'll never need or use.

        Once the warranty expires I usually fill the lock with epoxy (the main mechanism is a combination lock, the key is just for the TSA goons).

        The purpose of a TSA lock is so the TSA can open and inspect your baggage. They have the right to do so (and many countries I presume use TSA keys

    • by mschaffer ( 97223 ) on Wednesday September 09, 2015 @09:30AM (#50485963)

      Of course they are compromised and this is by design. Why else would you purchase a combination lock with a master key?
      The only reason I use these locks is because too many suitcases and travel bags are prone to opening when handled by the airline's gorillas that toss your baggage around. The locks can serve as one more item that needs to fail before the contents of your baggage cascades around the luggage carousel.

      However, if the TSA thinks that the master key system was secure, why didn't they mention the breach earlier. All agencies have policies on handling sensitive information. If the TSA does not follow their own policies, they should be held accountable at the highest levels.

      • This just proves they don't care about our personal security.

        • This just proves they don't care about our personal security.

          I am certainly no TSA cheerleader, but lets keep things in perspective. The TSA has never claimed to care about your personal security. Their mission statement is pretty clear.

          Protect the nation's transportation systems to ensure freedom of movement for people and commerce.

          https://www.tsa.gov/about/tsa-... [tsa.gov]

          • I'm pretty sure that everything the TSA does impedes the freedom of movement of people and commerce, that is kind of their job.

          • Ordinarily not caring about our personal security woudln't be that bad.

            Except that the TSA is *also* forcing us to accept their interference in our lives if we want to have access to the borders or to the air.

            If you're going to impose something on a person you should do so with minimum collateral damage and do your best to avoid inconveniencing them.

      • by jandrese ( 485 ) <kensama@vt.edu> on Wednesday September 09, 2015 @11:12AM (#50486763) Homepage Journal
        Traveling around South America recently I noticed that the airports down there have these services where they will wrap your luggage in cling wrap and put a giant sticker on it so you can tell if someone has gone through your luggage. It's an interesting take on the problem and also helps people with shitty suitcases that can't survive airport baggage services.
        • That doesn't work as well as you think. I routinely ship thing by pallet and trucking companies that are prone to damaging things will simply rewrap your pallet.

          If you use shrink wrap put stickers on your package or leave inside the wrapping. When you cut it off later look for the stickers. If they are missing then you know it was compromised.

        • You might not know this, but those services indicate quite clearly that they rewrap your bag after it is inspected as well, so it really isn't secure in any way.

    • by Anonymous Coward

      There are good locks and bad locks. Most luggage locks are cheap crap, afterall an attacker can simply split the zip. TSA compliant locks are the worst of the bad locks because its so trivial to break in and leave no trace.

      It means, even if you put a good lock on it, its no guarantee your luggage hasn't been tampered with, and you should have a good look at the contents before you walk through customs with it. Zip-Tie man below is probably right, its better to use a market zip-tie rather than a lock now.

      You

    • Comment removed based on user account deletion
      • by TheCarp ( 96830 ) <sjc.carpanet@net> on Wednesday September 09, 2015 @10:39AM (#50486505) Homepage

        A saw a video recently that took this a setp further. Instead of stopping the bag from opening, he took a cable lock, and attached everything in the bag to the cable lock, either directly, or with zip ties. Then any small things were put in another bag, zip tied, and added to the loop.

        This way the bag could be opened and inspected, and if they cared enough to cut zip ties, they could look inside the smaller bags, but.... nothing would be easy to just grab and toss in a pocket quickly.

        • Back in 2010, I needed to take my camera tripod with me on a flight, and there was no way it was going to fit in my carry-on. I used a cable lock and some padlocks to attach it to the inside of my suitcase so that it could be taken out and examined, but not detached from the suitcase without cutting the cable, a lock, or part of the suitcase. It worked fine for ensuring that my tripod was still there when I opened the suitcase, but a couple of other things were "accidentally" damaged by the baggage inspecto

      • by TheGratefulNet ( 143330 ) on Wednesday September 09, 2015 @10:59AM (#50486657)

        I used plastic zip-ties the last time I traveled to europe (well over 10 yrs ago). brand new luggage, too.

        fucking bastards used tin snips and cut THRU my zipper in order to remove the plastic wire-tie I used. expensive luggage, ruined, and there was no lock to cut, only some wire ties that I used to keep the bag 'safe' while in my posession (I could also tell if it was opened since I used a bright color of wire tie).

        did not matter, the bag was cut open, I lost a power supply for my camera storage device (PSD, back in the day we used those..) and got a note in my bad saying 'we opened it'. yeah, like I didn't know.

        no way to get them to pay for their damage either.

        I would EASILY see how a more unhinged person than me would flip his lid and go al postal on anyone who did this to them. and I would not cry a tear if any TSA or related person was harmed because they fucked with a passenger's stuff or rights. if a TSA person was bleeding and needing help, I'd step over the body while walking away.

        those people are lower than shark shit.

        • by jandrese ( 485 ) <kensama@vt.edu> on Wednesday September 09, 2015 @11:25AM (#50486849) Homepage Journal
          Isn't this exactly why "TSA approved" locks exist? Customs has always said that if they want to inspect your bag, they're going to inspect your bag. Putting a lock on it just means you get a broken lock. Doing something weird and crazy with internal zip ties is just asking for it to be slashed open with a knife. It's not their job to give a crap about your luggage, their job is to find contraband.
          • Their job is NOT to find contraband.

            Their job is to find hazardous materials that are not allowed on the flight. They want you to think their job is to find contraband, make it easier for them to cooperate with the DEA and do their job for them while they get to pretend to be law enforcement (which they aren't).

      • This is obviously overkill for most purposes; but they make neat serialized and tamper-evident zip ties for this purpose that are designed to be both difficult to remove without obvious damage and impossible to replace with off-the-shelf equivalents.
    • by bobjr94 ( 1120555 ) on Wednesday September 09, 2015 @10:54AM (#50486623) Homepage
      Just like the story a few years ago about the ATM locks. The atm maker had a picture of a key on their website and click here to order keys. Someone just printed the key out, and filed a blank to match the picture and it worked. They posted the actual image of the master real key on their website. A good locksmith can look at a key and say ' thats a G87 blank with a 4,3,6,3,2 cut' .
    • I've always assumed that the baggage screeners were not trustworthy. What's the point of a lock if the thief has a key?
    • by Spazmania ( 174582 ) on Wednesday September 09, 2015 @11:33AM (#50486913) Homepage

      For anyone who knows how master keys are made, this article is full of "duh." Basically, the tumblers in your lock have two stops: the one that fits your key and the one that fits the master key.

      So cut one key for each position, leaving one position not cut. Try the key. Cut the position by one unit. Try the key again. Continue until you find the unlock for that position which doesn't correspond to your key. That's the master key for that position.

      Anyone with unfettered access to a lock and blank keys can quickly identify all keys capable of opening it.

    • It's no surprise that the TSA's physical security is utter shit(gee, hire a bunch of the cheapest flunkies who can pass a perfunctory background check to do thankless shit work for not much money; sounds like the recipe for ironclad loyalty to me!); but I'd actually be curious to know, if anyone here understands keys and bitting codes more deeply than I do:

      The TSA joke-locks are sold openly to the public, so you can obtain as many samples of individual key/lock pairs as you wish(limited by cost, of cours
  • by Anonymous Coward on Wednesday September 09, 2015 @09:11AM (#50485817)

    al bundy would be a tsa screener...

    seriously - is there ANY job you'd be more embarrassed to say a spouse, child (they actually BREED?!?), etc had? "hey, joe, did I see your boy in a blue shirt at o'hare the other day" "naw, man, my boy cooks meth! he's the next jesse pinkman!"

  • Zip tie (Score:5, Interesting)

    by FerociousFerret ( 533780 ) on Wednesday September 09, 2015 @09:11AM (#50485821)
    I always just "lock" my luggage with a basic zip tie. Not meant to stop the TSA from getting in, but lets me know they did.
    • Re:Zip tie (Score:4, Insightful)

      by pz ( 113803 ) on Wednesday September 09, 2015 @10:03AM (#50486163) Journal

      Have you not seen the videos that show how trivial it is to get into most suitcases which have a zipper, bypassing any locks?

    • I always just "lock" my luggage with a basic zip tie. Not meant to stop the TSA from getting in, but lets me know they did.

      Earlier this year I had my first visit to the USA since 2001. Not usually having to bother with all things TSA on my side of the ocean, I enquired from an US-based travel agent about the desirability of a TSA-logoed locking device. She also recommended the ziplock/cable tie approach, which I followed without problems (nail clipper to trim, extras in the top of the bag).

      The ziplock alone of course does not prevent loss. But it does look cheap (in the derogatory sense of the word), especially if used in comb

    • I just use the normal combo suitcase locks we used to use before the TSA. They're not immune to anything particular, but the TSA will have to cut them off if they want into the bag. It's tamper evident and keeps the bag more secure up to the point they decide they want in. I've only had it cut off maybe 1 in 3 flights, so in general I think I come out ahead. Of course, I'm also aware that the lock is only there for tamper evidence- there's always the old zipper meets bic pen trick.

      https://youtu.be/wpIJVWXsB [youtu.be]

  • Wow ... (Score:5, Insightful)

    by gstoddart ( 321705 ) on Wednesday September 09, 2015 @09:11AM (#50485823) Homepage

    So this was kind of inevitable with a master key.

    Now we have the choice between having our luggage effectively vandalized as the morons at TSA cut off locks ... or having massively insecure locks to prevent the morons at the TSA from cutting off the locks.

    Thanks a lot, assholes.

    And, now, tell us ... just how much scrutiny are the luggage handlers under while they work? Because between the opportunity for smuggling (which they've done) those guys have a better chance of putting a bomb on a plane than anybody else.

    So much security theater, so little actual benefit.

    • "So much security theater, so little actual benefit."

      Nice to see someone else "gets it" instead of just cries "But the terrorists! Think of the children!"

      • by Scutter ( 18425 )

        I don't think anyone (other than paid-for politicians) is saying anything other than "security theater". In fact, the TSA is pretty widely denounced as being expensive and useless.

    • Re:Wow ... (Score:5, Informative)

      by i.r.id10t ( 595143 ) on Wednesday September 09, 2015 @09:18AM (#50485861)

      Actually, if you travel with a firearm - and the action from a sub-$100 single shot shotgun qualifies as such - you can use real locks on your luggage, it will be inspected in front of you, and then you can properly secure it. And, the airline can't flag it as having a firearm in it...

      Bonus is if the luggage doesn't make it you get to ask "You gonna call the BATFE or am I?" and stuff gets found really quick.

      https://www.tsa.gov/travel/tra... [tsa.gov]

      Recommended to print out the policy for whatever airline you are traveling on as well... but this works for lots of folks.

      • Re:Wow ... (Score:5, Interesting)

        by swb ( 14022 ) on Wednesday September 09, 2015 @11:14AM (#50486773)

        Declaring a firearm in your luggage has always gotten me first-class VIP treatment.

        The last time the counter agent closed the line behind me so she could get her supervisor to make sure everything was handled correctly (and probably to keep the people behind me from flipping out, they want to SEE the firearm).

        Then they usually walk me over to TSA where my bags are hand-inspected by the TSA before letting me apply my own, high-quality locks to my bag. I'd swear its saved line-standing time.

        The only marginal experience was in Laughlin/Bullhead City, which is barely an airport.

        There the gate agent wanted some county sheriff to verify the weapons were unloaded. Since I don't want to make anything easy for a thief, I use trigger locks AND cable lock through the action and/or cylinder, yet Deputy Fife wanted to try to open the cylinder on my revolver AND work the action on my Glock, despite the fact the loading or firing of the guns would have been physically impossible. I actually had to say "Careful, I don't want the action damaged from the locking cables!" before he realized how stupid he was.

        Then I had to argue with the TSA agent who didn't want to let me lock my luggage with a secure lock. Fortunately I also carry a recent, laminated copy of the TSA web pages requiring secure locking of checked firearms. "You can't use your own lock." "Yes, I have to, it's your own TSA requirement. Read this." He was pissed, but less pissed than he would have been telling his future colleagues on the Laughlin casino janitorial squad about his past job as a TSA agent.

        Strangely the Vegas airport seemed less interested in hand-inspecting my gun case and just ran it through the machine. I told the agent "Those firearms will glow like Christmas on the screen" and the TSA guy said "If we had to hand inspect all firearm luggage at this airport, the lines would extend into the parking lot."

        The craziest experience of all traveling with a firearm was trying to check into the Venetian in Vegas. I wanted to check my weapon with security and asked the woman at the desk and she said "Oh, security is just across the casino floor." I wondered how far I would get across the casino floor with a locked aluminum case without being tackled or answering questions from Clark County Sheriffs. As it turns out, I made it with five feet of the entrance before being stopped by two armed guards. They were really nice and took my down to security, checked my weapon, gave me a receipt and let me ride the VIP elevator to my room. On check out, the head of security released my weapon and I asked him if I had broken any laws bringing it on property. He said it wasn't a problem at all, happens all the time but was concerned the check in desk wouldn't page security for me. I thought the armed escort to my cab was a bit much, but again, VIP treatment!

    • And, now, tell us ... just how much scrutiny are the luggage handlers under while they work?

      Dunno if you remember this little incident:

      http://gawker.com/5852669/tsa-... [gawker.com]

      Short version, TSA agent finds a personal vibrator in a woman's luggage, and leaves her a note:

      "Get your freak on girl!"

      Unfortunately for the snoopy - probably sniffy - TSA agent the woman was a fairly well known blogger.

      So not much oversight, it would seem.

    • just how much scrutiny are the luggage handlers under while they work?

      About the exact same amount that the TSA provides in actual security - which is to say effectively zero. There are multiple stories from multiple sources of equipment being checked in luggage and then disappearing during transit when the luggage is checked.

      Previously, you could lock your luggage to help prevent this (or at least give visible evidence of tampering), but now the TSA mandates that you use their insecure locks or don't lock

    • Now we have the choice between having our luggage effectively vandalized as the morons at TSA cut off locks ... or having massively insecure locks to prevent the morons at the TSA from cutting off the locks.

      You didn't seriously think a lock provided any security, did you? I mean, you're locking the ZIPPER, of a CLOTH suitcase...

      Do you also padlock paper bags so nobody steals your lunch?

      • You didn't seriously think a lock provided any security, did you?

        Fuck no. You'll notice I said "TSA morons" twice, as well as security theater, and said this was inevitable. I hadn't thought I'd given any suggestion I had any confidence in the whole thing.

        I mean, you're locking the ZIPPER, of a CLOTH suitcase...

        Mine aren't cloth. ;-)

        Do you also padlock paper bags so nobody steals your lunch?

        Oh hell yeah, keep those thieving bastards away from my PB&J at all costs ... I even put a rabid squirrel in jus

    • by ahodgson ( 74077 )

      http://www.cnn.com/2015/04/13/us/airport-luggage-theft/
      https://www.rt.com/usa/tsa-stealing-from-travelers-358/
      http://www.huffingtonpost.com/news/tsa-thefts/
      http://abcnews.go.com/Blotter/top-20-airports-tsa-theft/story?id=17537887#.UIa7fGmfHft

    • TSA = "Thousands, Standing Around."

      https://en.wikipedia.org/wiki/Thomas_P._M._Barnett/ [wikipedia.org]
  • by turkeydance ( 1266624 ) on Wednesday September 09, 2015 @09:12AM (#50485827)
    since 2003, i've shipped what i don't carry on. so far, so good.
    • by mschaffer ( 97223 ) on Wednesday September 09, 2015 @09:23AM (#50485899)

      FedEx's and the airline's shareholders thank you for their increased profit. However this is not a viable option for many people.
      Also, it's not as if FedEx is much better than the airlines. Personally, I have had more problems with FedEx than with the airlines.

      • I worked for FedEx Ground and... yeah, you're right. Luggage gets the same treatment as any other box or thing that comes through. Suitcases filled with clothes and only clothes should be fine, but otherwise good luck.

  • ... we needed another reason not to fly...

  • by Anonymous Coward on Wednesday September 09, 2015 @09:16AM (#50485847)
    Every time I hear a government official saying that we should trust them with secrets. I think to myself... but do I trust your 2 million other colleagues. Even in the classified space, there are going to be dozens of people with access to even the most classified information. To lesser classified information that number can be thousands or tens of thousands even. Our adversaries with any intelligence capabilities will almost certainly know a great deal more than the American public will. That doesn't mean secrets aren't important to keep. It just means if your system is relying on keeping secrets for any length of time that is a fundamental security risk and flaw in the system. With luggage you still have to have physical access to the luggage to gain access... which can be mitigated with security cameras in luggage handling areas. With software encryption for communications it is far easier to intercept without being observed.
  • I always figured (Score:2, Insightful)

    by itsenrique ( 846636 )
    Since the 'TSA Approved' luggage locks came out, I always assumed they had had backdoor access of some sort. I mean, what else would that seal/approval even mean? It's important to note that most luggage locks look like a good whack or the flimsiest of bolt cutters would be their end, but having a master key lets them snoop on your luggage without leaving nearly as much trail. Good that its now out in the open completely for those who couldn't read between the lines. And no I'm not some grand conspiracy th
    • > Since the 'TSA Approved' luggage locks came out, I always assumed they had had backdoor access of some sort

      What clued you in after the key cylinder and the instructions and diagrams which explain the "lock has been opened" indicator failed to? ;)

      • Not all of the TSA-approved locks have both of those features.

        I have a Master padlock with a single keyway that will accept either the included key or the TSA key and no "opened" indicator.

        I also have a combination lock that can be opened with the TSA 004 "key", but because the "key" is an L-shaped piece of metal, it might not be obvious to everyone that that's what the hole on the bottom is for. That one also doesn't have an "opened" indicator.

        FWIW, the "opened" indicator is a bit of a joke anyway. On the

    • I always assumed they had had backdoor access of some sort.

      Why would you have had to assume anything ... that slot designed to push in a master key and be opened is pretty plain. That this can happen is printed on the instructions of any of them I've ever seen.

      Good that its now out in the open completely for those who couldn't read between the lines. And no I'm not some grand conspiracy theorist, I just couldn't fathom why else we suddenly needed 'TSA Approved' locks to fly with.

      Dude ... are you dense? T

    • having a master key lets them snoop on your luggage without leaving nearly as much trail

      this is why I use bits of cotton thread strategically laid inside so that if they rummage around, the threads get all mussed up...

  • by phantomfive ( 622387 ) on Wednesday September 09, 2015 @09:18AM (#50485857) Journal
    I didn't know it's hard to pick a lock without leaving evidence of lock-picking.....what kind of evidence are they looking for? Scratch-marks on the pins?
    • I attended this talk at DefCon a few years ago- very interesting.

      https://www.defcon.org/images/defcon-17/dc-17-presentations/Datagram/defcon-17-datagram-lockpicking_forensics-wp.pdf

  • by Anonymous Coward on Wednesday September 09, 2015 @09:25AM (#50485923)

    These locks or combination bypasses have three pins and just a few possible heights for each. In comparison the cheapest residential locks have five pins with five heights. If that was not easy enough there are a very limited number of combinations used and the TSA was kind enough to require a number indicating which one on every lock face. Finally these locks are of so poor quality just about anything that can apply light torsion and move in the keyway can be used to open them.

    Despite popular belief lockpicking leaves very little trace at all. There are few experts available that even know what evidence looks like and just looking for evidence requires the destruction of the lock. For the curious [lockpickingforensics.com]. Don't be fooled into thinking that a lock returned to a closed state leaves signs of lockpicking that can be readily seen by a layman.

    • by mlts ( 1038732 )

      With a rake and a tension wrench, it would be almost impossible to detect picking, much less have evidence that would stand up in court.

      This is why it is wise to use seals for TSA stuff, and for non-TSA items, to use high security locks. Nothing is unpickable, but something like a late model Medeco3, Abloy, or Mul-T-Lock is going to either force an intruder to use physical force (which insurance is a lot more likely to cover), or find an easier target.

  • by Mascot ( 120795 ) on Wednesday September 09, 2015 @09:26AM (#50485925)

    never put anything valuable in checked in luggage.

    I have one of the old "non-TSA" locks on my suitcase. I have a label on it where it states "code is 0000 while in transit", since I want to set the code wheels to something else in order to avoid accidental openings.

    I'd never dream of going on a flight with something of real value to me anywhere but in my carry on. If they want to steal my socks or razor, they're welcome to them.

    • Pretty much this.

      When I travel with my golf clubs I put tape on all the locks with the combination printed on it ... because I'd rather make sure they can easily get into it instead of having to do something more drastic.

      And my carry on is where all of my electronics get carried. No way in hell I'd trust the luggage monkeys with that.

      Will I stop using TSA approved locks? Nope, because I don't want them to have to cut it if they suddenly feel the need.

      Do I think I trust the luggage handlers any more or les

  • Sneaky bypass... (Score:5, Interesting)

    by QuietLagoon ( 813062 ) on Wednesday September 09, 2015 @09:29AM (#50485949)
    One time when I was traveling, I used the lock that had a green flag in a window. The flag was supposed to flip to red if the TSA opened the lock with their pass key.

    .
    When I got home, I looked at the lock and the flag was still green. When I opened the suitcase, there was a sheet of paper left on top of the contents. The paper said something to the effect, "this baggage has been inspected by the TSA".

    So much for the red flag on the lock.

  • This is hardly surprising giving that there was always going to be a widely distributed short-list out there. There are many videos like this one on Youtube that show you how to open a case with no or little evidence of tampering without evening unlocking it: https://www.youtube.com/watch?... [youtube.com]

  • I use TSA locks to keep the zippers on my suitcase closed. TSA know how to unlock them during inspection and they lock the zippers back in place when they are done.

  • Comment removed (Score:5, Interesting)

    by account_deleted ( 4530225 ) on Wednesday September 09, 2015 @09:39AM (#50486013)
    Comment removed based on user account deletion
  • In a 2014 article in the Washington Post a picture of the special tools was included, and while this picture has was later removed it quickly spread. Security researchers have pointed out that it is now possible for anyone to make new master keys and open the locks without any sign of entry, and the locks can now be considered compromised.

    • AT LEAST that old. I remember at least as far back as 2012, TSA master keys seemed to be easily available on the black market.

  • Forget the lock (Score:5, Insightful)

    by wickerprints ( 1094741 ) on Wednesday September 09, 2015 @10:09AM (#50486229)

    I don't understand what the big deal is, considering that the failure point is not the lock, but the zipper itself. Zippers are a fastening device. They were never intended to be secure, and you cannot make one secure by attaching a lock on the pull. The problem is that people think that attaching a lock to anything makes it inherently more secure.

    The answer is to never put anything in your luggage that has any value to those who might want to steal it. No electronic devices or jewelry should go in checked luggage. Anything valuable must fit in your carry-on. If you *must* travel with something valuable that cannot fit in your carry-on, ship and insure the parcel ahead of time.

    • by AmiMoJo ( 196126 )

      Semi-hard luggage sometimes has a cover that makes it much harder to part the zip in the manner you describe. Not impossible, but difficult enough for any potential thief to simply move on to the next bag. Even just securing the sliders in place can be enough, because it prevents the thief from re-closing the bag and the staff at the airport won't want to leave it open.

      A little bit of extra security is usually enough to deter opportunistic thieves.

    • ...considering that the failure point is not the lock, but the zipper itself...

      Maybe your suitcases have zippers, but mine do not.

  • It doesn't matter that the master key is compromised. A lock to which a third party has a master key is merely an additional safety against accidental opening, not security against unwanted intentional opening by another party.

    It just means that even more people can rummage through my clothes. If I'm feeling generous, I'll have only fresh clothes in my suitcase.

  • In an agency riddled with stupidity. Sadly, I am Just. Not. Surprised.
  • by c ( 8461 ) <beauregardcp@gmail.com> on Wednesday September 09, 2015 @10:21AM (#50486331)

    It's pretty much the definition of "master key" that if a master key exists for your lock, then your lock is compromised.

    How much of a problem that is in practice depends on a whole whack of risk factors, but in order to make the TSA screening process any riskier, I think you'd have to outsource it to the prison system.

  • by Translation Error ( 1176675 ) on Wednesday September 09, 2015 @10:29AM (#50486401)
    To be fair, I don't think we can really blame them for not warning us about the leaks. I mean, this is the TSA we're talking about--they probably still don't know about them.
  • There's nothing surprising about this. Hell, I bet these things were compromised ("copied") within a month of deployment.

    I've looked at the keys and although they're odd, they're by no means impossible to duplicate. You could 3-D print one in short order or cut one by hand without much difficulty. The whole thing was a bullshit boondoggle by lock and key manufacturers, and only the TSA could be dumb enough to think that it would provide any benefit to anyone.

  • " without any signs of lockpicking "

    When done correctly, there are no " signs of lockpicking " unless you start analysing bits of trace metal left behind.

    Besides, it doesn't matter if a pick is used or a compromised master key, locks are for honest folks. Don't put any trust in them to protect your valuables.

  • Luggage cams! Every time your luggage is opened, built-in cameras start rolling to capture who/what/how/when.

  • 1) Can't make a snap decision to go somewhere and plunk down cash to pay for your flight

    2) Lines

    3) Having to arrive two or more hours in advance of your flight

    4) Lines

    5) Removing articles of clothing to prove your innocence

    6) Lines

    7) Being groped by the TSA agent who has hands like ham hocks and treats every body part like a punching bag

    8) Lines

    9) TSA and/or airport personnel rifling through your luggage to see what goodies they can find

    10) Lines

    11) TSA and/or airport personnel cutting locks off your luggag

    • Yeah. TSA sucks. Unless, of course, you are GOES approved. Did it this year, would never go back. (Note: I have been cleared in the past to TS-SCI, it's not like the government hasn't already crawled up my ass with a microscope).

      Now I skip the millimieter, keep my shoes and belt on, the liquids never come out of my (admittedly small) overnight bag in my carry-on, and I have yet to wait in a line at the TSA checkpoints.

      That doesn't keep them from rifling through my checked luggage, of course, but it clears u

  • Just an FYI. You can have a TSA-approved lock on soft luggage and they can just go around it.

    Stick a pen into the zipper track itself, pry the first couple teeth apart and it pops open.
    To make it look like nobody touched anything, you just run the zipper back around and it rezips everything.

He has not acquired a fortune; the fortune has acquired him. -- Bion

Working...