Re: [funsec] Computing student jailed after failing to hand over crypto keys

2014-07-17 Thread Valdis . Kletnieks
On Thu, 10 Jul 2014 02:03:43 -, Blanchard, Michael (InfoSec) said:
 So, just for debate...

   The 5th protects us from handing over passwords.  So they ask for decrypted 
 data to be handed over.
Wouldn't that be a 5th amendment violation as well?

Keep in mind that the story is from England, which doesn't have a 5th
Amendment (or a 4th, for that matter).

And a lot of the current fuss in US case law on the subject actually does
revolve around whether requiring somebody to cough up a password is more akin
to producing a physical key for a padlock and covered by the 4th, or whether
it's compelling a statement and thus covered by the 5th. (The problem is that
the ground rules for a DA to force a statement and force production of a
key are quite different)



pgpFAB7HMZpmV.pgp
Description: PGP signature
___
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

[funsec] US capitol not in US, according to TSA

2014-07-17 Thread Rob, grandpa of Ryan, Trevor, Devon Hannah
http://www.wftv.com/news/news/local/orlando-tsa-agents-getting-geography-
refresher/ngfmH/

Those of us who live outside the US know that a fairly high proportion of 
Murricans don't know anything about TROW (the rest of the world), but we did 
sort of assume that they did know about Washington, DC.

(As one report on this stated, either there *is* a threat, in which case you 
want 
some smart people involved, or there isn't, in which case, who needs a TSA?)

==  (quote inserted randomly by Pegasus Mailer)
rsl...@vcn.bc.ca sl...@victoria.tc.ca rsl...@computercrime.org
   I'm so Canadian even my blood cells are red and white!
- https://twitter.com/#!/CanadianProbz/status/155383724228362240
victoria.tc.ca/techrev/rms.htm http://www.infosecbc.org/links
http://blogs.securiteam.com/index.php/archives/author/p1/
http://twitter.com/rslade
___
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Re: [funsec] US capitol not in US, according to TSA

2014-07-17 Thread Bill Terwilliger
Am I the only person who thinks that this news anchor is making a mountain out 
of a molehill? It seems reasonable that a low level TSA person (or possibly a 
new TSA employee) might not know that DC issues their own licenses.  And then 
when the agent wasn’t sure about the situation, he first asked for alternative 
ID and when that wasn’t provided, he escalated to a more senior agent.  In 
essence, the agent didn’t trust an unrecognized credential and escalated the 
issue.  The credential was verified and the anchor was let through in a 
reasonably timely manner otherwise I’m sure he would have complained about that 
too.  More noteworthy is the fact that management team implemented an ID 
training policy almost immediately after the incident.

The comment about smart people being involved is a bit presumptive.  Geography 
knowledge may or may not be an indicator of intelligence but I somehow doubt 
that lack of it is an indicator of stupidity.

—bill
 
On Jul 17, 2014, at 2:45 PM, Rob, grandpa of Ryan, Trevor, Devon  Hannah 
rmsl...@shaw.ca wrote:

 http://www.wftv.com/news/news/local/orlando-tsa-agents-getting-geography-
 refresher/ngfmH/
 
 Those of us who live outside the US know that a fairly high proportion of 
 Murricans don't know anything about TROW (the rest of the world), but we did 
 sort of assume that they did know about Washington, DC.
 
 (As one report on this stated, either there *is* a threat, in which case you 
 want 
 some smart people involved, or there isn't, in which case, who needs a TSA?)
 
 ==  (quote inserted randomly by Pegasus Mailer)
 rsl...@vcn.bc.ca sl...@victoria.tc.ca rsl...@computercrime.org
   I'm so Canadian even my blood cells are red and white!
- https://twitter.com/#!/CanadianProbz/status/155383724228362240
 victoria.tc.ca/techrev/rms.htm http://www.infosecbc.org/links
 http://blogs.securiteam.com/index.php/archives/author/p1/
 http://twitter.com/rslade
 ___
 Fun and Misc security discussion for OT posts.
 https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
 Note: funsec is a public and open mailing list.


___
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Re: [funsec] US capitol not in US, according to TSA

2014-07-17 Thread Valdis . Kletnieks
On Thu, 17 Jul 2014 23:23:37 -0400, Bill Terwilliger said:

 The comment about smart people being involved is a bit presumptive.
 Geography knowledge may or may not be an indicator of intelligence but I
 somehow doubt that lack of it is an indicator of stupidity.

OK. I admit *I* don't know what a DC driver's license looks like either.

But give me a *break*:

  When Gray handed the man his driver's license the agent demanded to see Gray's
  passport.
  Gray told the agent he wasn't carrying his passport and asked why he needed 
it.
  The agent said he didn't recognize the license.
  Gray said he asked the agent if he knew what the District of Columbia is, and
  after a brief conversation Gray realized the man did not know.

OK?  The TSA guy *did not understand that DC is part of the US*.

Which means the TSA's vetting process for employees is so weak that they'll
hire *people who don't know where the fuck the capital of their own country is*.

Now think *real* hard - would *you* hire a security guard who didn't even
understand that Washington DC is our nation's capital?



pgpNPG2Mwj6Tb.pgp
Description: PGP signature
___
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

Re: [funsec] US capitol not in US, according to TSA

2014-07-17 Thread Bill Terwilliger
The guy reporting this is the same guy trying to make a big deal about it.  He 
has a vested interest in making the guy sound as dumb as possible otherwise he 
has no story.  The reporter is the only “source in the report and there is no 
direct evidence that the TSA agent didn’t know the capital of the united 
states.  All that is clear is that he didn’t recognize the District of 
Columbia’s drivers license as being valid.

I just typed “is washing” into google and the top auto complete options are:

- is washington dc a state
- is washington dc a city
- is washington dc in maryland
- is washington dc in virgina
- is washington a state

Clearly the TSA guard isn’t the only one confused by the confusing status of 
DC.  It seems reasonable to me for someone to think that DC might not have its 
own license.  Admittedly, I knew that they did but that is only because I heard 
about DC’s crazy voting status and did research.  Otherwise I probably wouldn’t 
have known either and I bet that most Americans don’t know for certain that DC 
has their own drivers license.

—bill

On Jul 17, 2014, at 11:47 PM, valdis.kletni...@vt.edu wrote:

 On Thu, 17 Jul 2014 23:23:37 -0400, Bill Terwilliger said:
 
 The comment about smart people being involved is a bit presumptive.
 Geography knowledge may or may not be an indicator of intelligence but I
 somehow doubt that lack of it is an indicator of stupidity.
 
 OK. I admit *I* don't know what a DC driver's license looks like either.
 
 But give me a *break*:
 
  When Gray handed the man his driver's license the agent demanded to see 
 Gray's
  passport.
  Gray told the agent he wasn't carrying his passport and asked why he needed 
 it.
  The agent said he didn't recognize the license.
  Gray said he asked the agent if he knew what the District of Columbia is, and
  after a brief conversation Gray realized the man did not know.
 
 OK?  The TSA guy *did not understand that DC is part of the US*.
 
 Which means the TSA's vetting process for employees is so weak that they'll
 hire *people who don't know where the fuck the capital of their own country 
 is*.
 
 Now think *real* hard - would *you* hire a security guard who didn't even
 understand that Washington DC is our nation's capital?
 


___
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.