1.5 million on the no-fly list?!
#1
FlyerTalk Evangelist
Original Poster
Join Date: Jun 2005
Posts: 37,399
1.5 million on the no-fly list?!
https://www.foxbusiness.com/politics...-kitten-hacker
Do they just go nuts, or is this a whole bunch of aliases?
Do they just go nuts, or is this a whole bunch of aliases?
#2
Join Date: Nov 2010
Location: Baltimore, MD USA
Programs: Southwest Rapid Rewards. Tha... that's about it.
Posts: 4,211
The article says there are a lot of aliases, and the number of unique individuals on the list is much smaller than the 1.5 million total.
Still, considering that the no-fly list is not something you need to be convicted of a crime to get onto, even if it's only three quarters of a million or half a million people long, that seems a bit excessive in a free society.
Still, considering that the no-fly list is not something you need to be convicted of a crime to get onto, even if it's only three quarters of a million or half a million people long, that seems a bit excessive in a free society.
#3
Moderator: Travel Safety/Security, Travel Tools, California, Los Angeles; FlyerTalk Evangelist
Join Date: Dec 2009
Location: VNY | BUR | LAX
Programs: AAdvantage | MileagePlus
Posts: 18,101
The list is from 2019 and it was found on an airline's server.
From Rolling Stone:
Hacktivist Discovered U.S. No Fly List on Unsecured Airline Server
From Rolling Stone:
Hacktivist Discovered U.S. No Fly List on Unsecured Airline Server
A COPY OF the No Fly List from 2019 has leaked, uncovered by a Swiss cybersecurity researcher and hacktivist who claims to have discovered it on an unsecured internet server belonging to an airline.
***
The No Fly List contains names/aliases and birthdates of individuals who are known or suspected to be terrorists... The list included known Russian arms dealer Viktor Bout along with 16 possible aliases for him, crimew said. While the list contained names from a range of backgrounds, including suspected members of the IRA, an Irish paramilitary organization, many names appeared to be of Arabic or Middle Eastern descent, according to crimew.
***
In a statement to CNN, CommuteAir said that the data on the server contained “an outdated 2019 version of the federal no-fly list” with names and birth dates. The airline said it has taken the server offline after being contacted by a “member of the security research community.”
***
***
The No Fly List contains names/aliases and birthdates of individuals who are known or suspected to be terrorists... The list included known Russian arms dealer Viktor Bout along with 16 possible aliases for him, crimew said. While the list contained names from a range of backgrounds, including suspected members of the IRA, an Irish paramilitary organization, many names appeared to be of Arabic or Middle Eastern descent, according to crimew.
***
In a statement to CNN, CommuteAir said that the data on the server contained “an outdated 2019 version of the federal no-fly list” with names and birth dates. The airline said it has taken the server offline after being contacted by a “member of the security research community.”
***
#4
A FlyerTalk Posting Legend
Join Date: Jul 2001
Location: Watchlisted by the prejudiced, en route to purgatory
Programs: Just Say No to Fleecing and Blacklisting
Posts: 99,950
https://www.foxbusiness.com/politics...-kitten-hacker
Do they just go nuts, or is this a whole bunch of aliases?
Do they just go nuts, or is this a whole bunch of aliases?
The hacker involved in the leak has claimed to have been subject to a US grand jury indictment for hacking done by said activist community hacker — who claims to be non-CIS and non-binary — during the 2019-2021 period.
#5
A FlyerTalk Posting Legend
Join Date: Jul 2001
Location: Watchlisted by the prejudiced, en route to purgatory
Programs: Just Say No to Fleecing and Blacklisting
Posts: 99,950
Here’s the Wikipedia piece on the person attributed for having put out the list noted in the news articles:
https://en.m.wikipedia.org/wiki/Maia_arson_crimew
https://en.m.wikipedia.org/wiki/Maia_arson_crimew
#8
A FlyerTalk Posting Legend
Join Date: Jul 2001
Location: Watchlisted by the prejudiced, en route to purgatory
Programs: Just Say No to Fleecing and Blacklisting
Posts: 99,950
The selectee/watch list — the one that results in haraSSSSment flagging/screening — was also accessible there. And the Swiss activist hacker found the list to include in the range of a quarter million entries. The selectee/watchlist remains significantly more diverse demographically than the no-fly list.
#9
Join Date: Nov 2007
Location: WAS
Programs: enjoyed being warm spit for a few years on CO/UA but now nothing :(
Posts: 2,290
I talked with some TSA folks about the list. The 1.5m is largely due to "aliases" and alternative spellings of names as noted by GUW. Just one person on there had 16 entries; if the average was actually around 10 aliases per person that puts the list around 150,000. Which is still way too much but also contains names of many people that are not in the US or would likely not ever be admitted to the US if they made it here in normal travel circumstances (as opposed to, say, being smuggled in by boat or sneaking across a border).
While this is "splashy" news - it is amazing to me that the list is not more out in the public because it is not at all classified in terms of Confidential, Secret or TS. In fact, it cant be due to the nature of what it is AND the vast number of people in the aviation industry that must have access to it to accomplish the task of not letting these folks on a plane. It is considered SSI which better explains why it hasnt been in the public more. One must accept that many of the true bad guys who are/would be threats to aviation have already been told they are on the list by sympathetic aviation or intelligence/security employees.
Of course, with hardened cockpit doors and if screening for WEI is effective then why do we even need this list in the first place....?
While this is "splashy" news - it is amazing to me that the list is not more out in the public because it is not at all classified in terms of Confidential, Secret or TS. In fact, it cant be due to the nature of what it is AND the vast number of people in the aviation industry that must have access to it to accomplish the task of not letting these folks on a plane. It is considered SSI which better explains why it hasnt been in the public more. One must accept that many of the true bad guys who are/would be threats to aviation have already been told they are on the list by sympathetic aviation or intelligence/security employees.
Of course, with hardened cockpit doors and if screening for WEI is effective then why do we even need this list in the first place....?
#10
FlyerTalk Evangelist
Join Date: Mar 2008
Location: DFW
Posts: 24,179
I generally favor and approve of having a NFL but some controls need to be put in place. Once a name is nominated for inclusion a process to confirm/deny inclusion should take place within X days/weeks but short of 3 months. If satisfactory evidence isn't provided then the name + aliases are dropped. A method to cull the list at regular intervals should be mandated.
#11
A FlyerTalk Posting Legend
Join Date: Jul 2001
Location: Watchlisted by the prejudiced, en route to purgatory
Programs: Just Say No to Fleecing and Blacklisting
Posts: 99,950
Since it now appears more publicly that the USG blacklists could be leaked to the public because of the relevant blacklists being distributed to airlines and security contractors for facilitation of USG enforcement efforts, will the USG response to these lists getting out be to have the TSA and CBP shift to relying even more upon real-time ID/manifest checks and having even more demands for information transfers and controls on airlines?
#12
Join Date: Nov 2007
Location: WAS
Programs: enjoyed being warm spit for a few years on CO/UA but now nothing :(
Posts: 2,290
Since it now appears more publicly that the USG blacklists could be leaked to the public because of the relevant blacklists being distributed to airlines and security contractors for facilitation of USG enforcement efforts, will the USG response to these lists getting out be to have the TSA and CBP shift to relying even more upon real-time ID/manifest checks and having even more demands for information transfers and controls on airlines?
#13
Join Date: Nov 2010
Location: Baltimore, MD USA
Programs: Southwest Rapid Rewards. Tha... that's about it.
Posts: 4,211
Since it now appears more publicly that the USG blacklists could be leaked to the public because of the relevant blacklists being distributed to airlines and security contractors for facilitation of USG enforcement efforts, will the USG response to these lists getting out be to have the TSA and CBP shift to relying even more upon real-time ID/manifest checks and having even more demands for information transfers and controls on airlines?
After that, they'll expand the definition of 'covered person' as wide as they possibly can, so that anyone who disseminates, possesses, or even views SSI can be punished. Media, pundits, anyone who works for a state or local government in any capacity including contractors/consultants... Heck, they'll lock up the Uber driver who picks someone up at an airport if they're ever caught in possession or even having read SSI. They'll push it as far as they can until they're stopped by the courts.
After that, then maybe they'll address some shortcomings in the no fly and watch lists and the procedures for getting on them and being checked against them.
#14
A FlyerTalk Posting Legend
Join Date: Jul 2001
Location: Watchlisted by the prejudiced, en route to purgatory
Programs: Just Say No to Fleecing and Blacklisting
Posts: 99,950