Wednesday, May 23, 2018

Fake boarding passes can fool airport security checks, experts say

WASHINGTON — More than 11 years after the Sept. 11 terrorist attacks, it remains possible to use fake boarding passes to get through airport security checks, according to new evidence from security researchers and official documents.

The security vulnerabilities could allow terrorists or others on "no-fly" lists to pass through airport checkpoints with fraudulent passes and proceed through expedited screening. They could even allow them to board planes, security analysts warn.

The Washington Post was alerted to the vulnerabilities by concerned passengers and verified them through independent security experts. At the request of U.S. officials, the Post is withholding details that would make it easier for the vulnerabilities to be exploited.

The security gaps center on airline boarding passes, which can be issued up to 24 hours before a flight's departure. According to security researchers, the bar codes on those passes can be manipulated with widely available technology to change the information they contain: passenger identification, flight data, and codes indicating whether a passenger has qualified for expedited screening.

Information about reading and altering boarding pass bar codes has circulated on online forums for several months, and has recently been picked up by security researchers. Many of them note that the potential for tampering with the passes has been exacerbated by the proliferation of smartphones that can read the bar codes and free software that can manipulate them.

Guidelines set by the Transport Security Administration allow airlines to add an encrypted "digital signature" to prevent boarding passes from being altered. But some experts said they were surprised to learn that not all passes include authentication.

"It's alarming — this basically negates the no-fly list," said Chris Soghoian, a fellow at Indiana University's Center for Applied Cybersecurity Research and principal technologist at the American Civil Liberties Union.

It remains difficult to establish the full extent of the vulnerabilities without information from the TSA.

Comments
State baseball: Carrollwood Day comes up a run short in semifinals

State baseball: Carrollwood Day comes up a run short in semifinals

FORT MYERS — One swing.That's all it took for Carrollwood Day's historic season to come to an end.With two outs and two runners on in the third inning of the Class 3A state semifinal against Tallahassee North Florida Christian, Patriots starter...
Updated: 13 minutes ago
Son tells NC police he found dog leash around neck of strangled Hillsborough developer Bill Bishop

Son tells NC police he found dog leash around neck of strangled Hillsborough developer Bill Bishop

After a prominent Hillsborough County developer died last month in North Carolina, word spread it was a heart attack that claimed his life.But records from that state show the death of William "Bill" Bishop was much more complicated.His 16-year-old s...
Updated: 15 minutes ago
Hillsborough teachers hope to get some, but not all of their raise money

Hillsborough teachers hope to get some, but not all of their raise money

TAMPA -- Teachers in Hillsborough County came closer on Wednesday to reaching an agreement with the school district that would give them most, but not all of the pay they expected this past year.The deal, if it happens, will end a year-long conflict ...
Updated: 16 minutes ago
Eckerd College student critically injured in campus accident just before graduation

Eckerd College student critically injured in campus accident just before graduation

ST. PETERSBURG — An Eckerd College student fell from a ladder on campus in the hours before her graduation ceremony and remained hospitalized Wednesday with head injuries.Chicago native Rebecca Ryan Lavin-Burgher, known as Becca on campus and RyRy to...
Updated: 16 minutes ago
Rick Scott overrules elections chief, directs Florida to seek cyber-security money

Rick Scott overrules elections chief, directs Florida to seek cyber-security money

FORT LAUDERDALE — Gov. Rick Scott on Wednesday directed the state's chief elections official to seek $19.2 million in federal money to help counties protect against possible cyber-security attacks in the 2018 election.Scott's intervention came ...
Updated: 18 minutes ago
Tampa charter review board recommendations go to City Council

Tampa charter review board recommendations go to City Council

TAMPA —After nine months of meetings, Tampa’s first City Charter review commission has delivered its recommendations.It’s a modest wish list but an important start, commissioners said in advance of today’s City Council workshop.Mostly, the commission...
Updated: 23 minutes ago

Region baseball: Plant’s state bid falters in ninth inning

TAMPA — Sarasota outlasted Plant 2-0 in a nine-inning Class 8A region final on Wednesday to advance to next week's state tournament in Fort Myers.The Sailors will play Strawberry Crest on June 1 at 10 a.m.Scoreless through eight innings Wednesd...
Updated: 28 minutes ago
Birchwood owner will open a three-story restaurant and bar at St. Petersburg pier

Birchwood owner will open a three-story restaurant and bar at St. Petersburg pier

ST. PETERSBURG — Chuck Prather, owner of the Birchwood in St. Petersburg, returned from his daughter’s Maine wedding this week with an exciting announcement of his own. On June 7 the St. Petersburg City Council is expected to sign off on him being on...
Updated: 1 hour ago
Clearwater deputy fire chief resigns as report on sick leave abuse is released

Clearwater deputy fire chief resigns as report on sick leave abuse is released

CLEARWATER — A months-long probe into abuse of sick leave within the fire department concluded this week with the resignation of a deputy chief and the release of an internal review.The city paid $93,816 in unearned or unauthorized sick time, benefit...
Updated: 1 hour ago
Wrong-way driver, 87, dies in head-on collision, FHP says

Wrong-way driver, 87, dies in head-on collision, FHP says

BROOKSVILLE— An 87-year-old wrong-way driver died Tuesday night when she collided head-on with an oncoming pick-up truck, according to the Florida Highway Patrol.The crash took place at about 8:50 p.m. on Sunshine Grove Road near Webster Street.Patri...
Updated: 1 hour ago