Delta CAPPS-2 watch: decrypt boarding passes!

[Derek Atkins]

John,

John Gilmore <gnu at toad.com> writes:

> And, besides identifying what cities they're doing this in, we should
> also start examining a collection of these boarding passes, looking
> for the encrypted "let me through without searching me" information.
> Or the "Don't let me fly" information.  Then we can evaluate how easy
> it would be to turn one into another.  (Don't mistake a system that
> claims to provide security for one that actually does.)

When I flew on US-Airways out of BAL last year, they had a marking on
the boarding pass that signified "search this person".  If your
boarding pass had the mark, you were searched as you tried to board.
If it did not, then you were not searched.

I'm flying United out to the IETF next week, so I'll gladly report my
findings.

-derek

-- 
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       warlord at MIT.EDU                        PGP key available

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at wasabisystems.com