I think that we should all stop to evaluate the Deceptive Duo's act under the pure techical means. It is not important at all what database was used to store those informations. What is important is that if a terrorist would have hacked the same FAA server, he could get the same infos as TDD got. It means that he could get the full database with the information regarding the luggage security checker at various US airports. Now, if I was the terrorist, I could kidnap Susan Daniel's kid (look at the second row in the exposed database) forcing her to allow me to load an explosive luggage at the IYK airport (same second record). Easy as pie!

I think we should all meditate on the real possible threat the US unsecured IT structures are introducing with their own vulnerability.

Forgive my lousy english, I am a foreigner.

SyS64738

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/378/12167#12167