时间:2025-07-07 05:31:15 来源:网络整理编辑:綜合
Everybody makes mistakes at work but, leaving the no-fly list exposed on the internet seems like a r
Everybody makes mistakes at work but, leaving the no-fly list exposed on the internet seems like a really bad mess-up.
That's reportedly what happened with the U.S. airline CommuteAir. The Daily Dot reported that a Swiss hacker known as "maia arson crimew" found the unsecured server while using the specialized search engine Shodan. There was apparently a lotof sensitive information on the server, including a version of the no-fly list from four years ago. Somewhat hilariously that was reportedly found via a text file labeled "NoFly.csv." That is...not hard to guess.
A blog post from crimew titled "how to completely own an airline in 3 easy steps" cited boredom as the reason for finding the server. They were just poking around and found it.
"At this point, I've probably clicked through about 20 boring exposed servers with very little of any interest, when I suddenly start seeing some familiar words," crimew says in their blogpost. "'ACARS', lots of mentions of 'crew' and so on. Lots of words I've heard before, most likely while binge-watching Mentour Pilot YouTube videos. Jackpot. An exposed jenkins server belonging to CommuteAir."
Tweet may have been deleted
CommuteAir, a regional US airline headquartered in Ohio, confirmed the info on the server was authentic to the Daily Dot. The server has been taken offline.
"The server contained data from a 2019 version of the federal no-fly list that included first and last names and dates of birth," CommuteAir Corporate Communications Manager Erik Kane told the Daily Dot. "In addition, certain CommuteAir employee and flight information was accessible. We have submitted notification to the Cybersecurity and Infrastructure Security Agency and we are continuing with a full investigation."
The info from the server has already been poured over, with some researchers saying it shows how the list is heavily biased against Muslim people. According to Daily Dot, while there is no official number to how many names are on the no-fly list, Sen. Dianne Feinstein (D-Calif.) suggested in 2016, that over 81,000 people were on the list.
TopicsCybersecurity
Honda's all2025-07-07 05:14
NASA has again delayed the launch of the James Webb Space Telescope2025-07-07 05:08
Here's what the Google vs. Oracle lawsuit is all about2025-07-07 04:53
April Fools' Day is the worst day of the year for space reporters2025-07-07 04:53
Despite IOC ban, Rio crowds get their political messages across2025-07-07 04:38
Donald Trump congratulated Roseanne Barr for the 'Roseanne' ratings2025-07-07 04:06
Major snowstorm slams East Coast, to break records from D.C. to Boston2025-07-07 03:54
Donald Trump congratulated Roseanne Barr for the 'Roseanne' ratings2025-07-07 03:01
You will love/hate Cards Against Humanity's new fortune cookies2025-07-07 02:56
Ai Weiwei shows giant artwork, slams Australia's treatment of refugees2025-07-07 02:50
Mall builds real2025-07-07 05:27
DNC hacker's identity reportedly revealed thanks to VPN mistake2025-07-07 05:19
Former FBI deputy director's GoFundMe for legal defense raises over $250k in 6 hours2025-07-07 05:14
Scientists expose coral reefs to acidic water and see impaired growth2025-07-07 04:55
Early Apple2025-07-07 04:18
Apple might release AirPower wireless charging pad by the end of March2025-07-07 03:51
Chance the Rapper tweets idea for who should play Captain America next2025-07-07 03:51
Online risk predictor claims to estimate chance of developing melanoma2025-07-07 03:46
U.S. government issues warning on McDonald's recalled wearable devices2025-07-07 03:25
Volkswagen unveils Atlas Tanoak pickup truck at New York Auto Show2025-07-07 03:16