Photos of the TSA's master keys leaked online and now anyone can 3D print their own copies
The US Transportation Security Administration has been left in an awkward position today after a security researcher released plans to its master keys for luggage - allowing anyone to 3D print their own copies.
The plans were put together using photos of a set of master keys accidentally published by The Washington Post in November 2014, and left live on its site for months before anyone noticed.
They were subsequently posted to GitHub by user Xyl2k on Wednesday.
GitHub
Xyl2k wrote on the GitHub page that he hadn't actually tested the designs he created - but security researcher Bernard Bolduc subsequently printed them out, and found they worked perfectly.
OMG, it's actually working!!! pic.twitter.com/rotJPJqjTg
- Bernard Bolduc (@bernard) September 9, 2015
The existence of master keys - and master key-compatible locks - are intended to make it possible for travelers to secure their luggage while still allowing the TSA easy access when required at airports and borders. But because of the leak, it now means that anyone who owns a master key-compatible lock is vulnerable: Absolutely anyone could print out their own set of keys and access their belongings.
People are already drawing parallels with the ongoing debate over strong encryption software and keys for government access. In recent years, there has been a proliferation of encryption products (for messaging, storage, etc.) that scramble data in such a way that it can't be accessed and understood apart from its owner or recipient - even governments with a court order.
But as the TSA master key debacle demonstrates, if it's accidentally leaked (or lost, or cracked, or stolen), then it makes everyone less safe.
I'm sure digital "golden keys" for encryption would work, though. https://t.co/yR74QiFnaq
- Hans Gerwitz (@gerwitz) September 10, 2015
This is exactly why weakening encryption is not the answer.. The government can't be trusted with even trivial keys. https://t.co/MZljZbId1h
- Darby (@darbym_) September 10, 2015
Nice analogy to weakened encryption issues: Your Luggage is Unsafe! TSA Approved Master-Keys Have Been 3D Printed http://t.co/Z15ywRS5pp
- Michael Kennedy (@mkennedy) September 10, 2015
- India must create 11.5 crore jobs in next six years as millions of youngsters enter workforce: Study
- India's PC market grows by 2.6% in Q1 2024, recording third consecutive quarter with growth
- ONGC declares highest ever standalone profit in FY24
- Top lake destinations in India for a cool summer retreat
- Pune rash driving case: Police detains father of minor accused