“The supervisor’s password screen could be subverted through a simple SQL injection attack — a common hacker tactic that involves entering a special string of characters to trigger a system into doing something it shouldn’t do. In this case, the string would allow an attacker to bypass the login to gain access to a console screen that controls the TIP feature. Using the console, an attacker could then direct the system to superimpose weapons or other contraband onto the x-ray images of clean bags to disrupt passenger screening. Or the attacker could superimpose images of clean bags onto the operator’s monitor to cover the true x-ray image of a bag containing contraband.”
http://www.wired.com/threatlevel/2014/02/tsa-airport-scanners/
Related posts:
Mass hack attack on Yahoo Mail accounts prompts password reset
Students Banned from Passing Out Constitutions on Constitution Day
Gmail app developers have been reading your emails
Next Generation 3-D Printed Gun Fires Nine Shots, Costs $25
‘How Money Walks’: Map shows cash fleeing states with high taxes
What ICE Raids Really Look Like In NYC
Once Again, Activists Must Beg the Government to Preserve the Right to Repair
Critical crypto bug exposes Yahoo Mail, other passwords
US Experimented on Hundreds of Poor Pregnant Women With Radiation
Rialto CA Police Department Officers Wearing Cameras, Complaints Down 88%
How To Make Things Worse: Value-Added Tax
Rick Rule on Natural Resource Stocks as Investments
Comedian Lee Camp: Syria is a Money and Power Grab
10,000 Linux servers hit by malware serving spam and exploits
Some Lives Matter (More Than Others)