Stupid Security
News Humor Howlers
search Stupid Security:
 
Exposing Fake Security Since 2003
 
Stupid Security
- About
- FAQ
- RSS
- Discussions
- Journals
- Messages
- Topics
- Authors

- Preferences
- Older Stuff
- Past Polls
- Submit Story

Stupid Security
Portions of Stupid Security are copyright 2003 by Nat Howard and his licensors.

 
The No-Fly list vs Print-your-own-Boarding-Pass
posted by nrh on Tuesday July 15, @09:26PM
Howlers Songmaster writes

The No-Fly list of people who are not supposed to be allowed onto US airplanes is implemented by the airlines, who compare the name on the ticket with the names on the no-fly list and flag up any matches for additional checking - at minimum people with the same name as someone on the list have to go through extra security checks. This is flagged up by the airline printing some special indication on their boarding pass, which all passengers now have to show to get through security to the gate.

I recently flew inter-state on American Airlines from Chicago O'Hare, and was pleasantly surprised to learn that I could print out my own boarding pass before leaving home. Because of a problem with my primary computer I actually printed the boarding pass page to a file on disk, and used a different computer to send that file to the printer. The resulting piece of paper was sufficient to get me through security without my having to check in. I did have to show my ID, which was compared against the name on the boarding pass, but not against any other list. The boarding pass also contained a bar-code which the gate agent scanned immediately before allowing me to board the plane - I did not have to check in at the gate first.

At no time did anyone compare the name printed on the boarding pass with the name stored in the airline's computer. It used to be pretty hard for these to differ because the boarding pass was printed out directly by the airline at check-in, and the agent there would only issue the pass to someone whose ID matched the ticket. However with this nice convenience system there is nothing to stop someone from altering the information printed on a home-printed boarding pass - I could have changed the name on my pass and I'm confident that as long as the name matched that on my ID I would have been able to fly, even though the airline's computer thought that someone else was really the passenger.

It should be fairly obvious from the above how someone who is on the no-fly list can get to fly without triggering any special security procedures, providing they have a friend not on the list who is willing to buy them a ticket and print them out an edited boarding pass. It would also be just as easy to modify the date and time printed on a pass, and hence get anyone through security on a different date to the original ticket, although it would be very unwise to attempt to board a plane afterwards!

It's possible that you have to be a member of the AA frequently flier program to print your own boarding pass, but that makes no difference to the (in)effectiveness of the security.

Stupid Bad Security | New Crypto-Gram, with "How to Fight"  >

 

 
Stupid Security Login
Nickname:

Password:

[ Create a new account ]

Related Links
  • More on Howlers
  • Also by nrh
  • The No-Fly list vs Print-your-own-Boarding-Pass | Login/Create an Account | Top | 7 comments | Search Discussion
    Threshold:
    The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
    But if they're paying attention... (Score:0)
    by Anonymous Coward on Wednesday July 16, @11:39AM (#64)
    There's a small risk to your plan -- the kiosk with the scanner displays the name the ticket was boioked under. If the gate agent is paying attention, he or she could catch the discrepancy.
    [ Reply to This | Parent ]
    Not a security measure (Score:0)
    by Anonymous Coward on Thursday July 24, @01:01PM (#87)
    The main reason airlines check ID's is not for security, but to try to defend their overly-complicated pricing schemes against people switching tickets to get discounts. E.g., you've got a business meeting in Chicago on Thursday, so you find a Chicagoan who's flying to your town the next Tuesday, you both buy tickets at the "over the weekend" rate, and swap your return on Monday for his flight out on Friday. If they weren't trying to keep their airplanes full of tourists at deep discounts while loading most of the cost onto business travellers, they wouldn't careabout your identity. The TSA does care - but fake ID's are so easy to get that I doubt they'd add much security by independently looking up the names.
    [ Reply to This | Parent ]
    but what about the web server's list? (Score:0)
    by Anonymous Coward on Sunday August 03, @06:27PM (#99)
    Wouldn't the server that actually checked you in check your name against the "no-fly" list? I imagine it has to go through the same back-end system that the in-terminal computers have to go through to perform the check-in..
    [ Reply to This | Parent ]
    i wonder too (Score:0)
    by Anonymous Coward on Tuesday September 07, @09:43AM (#428)
    I just printed a pass today for my United flight. For grins, I saved a local copy of HTML which was framed, got the inner frame document, downloaded the document images (logos, etc.) to my computer, changed the name to SMITH/BURT and printed it. Walla, a perfect looking boarding pass. I agree with another poster that if your name was on no-fly list, the computer would probably not print your pass. But, as you say, you could just have anyone else flying that day print your pass, modify it to your name, and use that to go through security. I do wonder what would happen at the gate though. But, I would have guessed TSA reasoning behind needing a boarding pass is to make sure that only people who are flying under their own name are past security checkpoints. Obviously this is stupid with the print your own boarding pass. So, those of us who want to walk our elderly parents to the gate, etc. can't because we don't have a pass but anyone who wanted to get through for malicious reasons could easily do so. Stupid for sure.
    [ Reply to This | Parent ]
    glasses3 (Score:1)
    by vick on Thursday February 04, @02:20AM (#4003)
    User #662 Info
    more and more people wear eyewear frames [firmoo.com], it is not only helpful to the role of vision, it also has decorative effect.Everyone wants to be able to buy prescription glasses online [firmoo.com], and I recommend everyone to firmoo to buy.where there are many types of glasses, rimless eyeglasses [firmoo.com],discount prescription eyeglasses [firmoo.com],progressive glasses [firmoo.com] and 8 dollar eyeglasses [firmoo.com].I think this is a good place to buy glasses. fhfh
    [ Reply to This | Parent ]

    Where there's a will, there's an Inheritance Tax.

    [ home | contribute story | older articles | past polls | faq | authors | preferences ]