Business Insider India has updated its Privacy and Cookie policy. We use cookies to ensure that we give you the better experience on our website. If you continue without changing your settings, we\'ll assume that you are happy to receive all cookies on the Business Insider India website. However, you can change your cookie setting at any time by clicking on our Cookie Policy at any time. You can also see our Privacy Policy.
Photos of the TSA's master keys leaked online and now anyone can 3D print their own copies
Photos of the TSA's master keys leaked online and now anyone can 3D print their own copies
Rob PriceSep 10, 2015, 20:19 IST
The US Transportation Security Administration has been left in an awkward position today after a security researcher released plans to its master keys for luggage - allowing anyone to 3D print their own copies.
They were subsequently posted to GitHub by user Xyl2k on Wednesday.
GitHub
Xyl2k wrote on the GitHub page that he hadn't actually tested the designs he created - but security researcher Bernard Bolduc subsequently printed them out, and found they worked perfectly.
Advertisement
The existence of master keys - and master key-compatible locks - are intended to make it possible for travelers to secure their luggage while still allowing the TSA easy access when required at airports and borders. But because of the leak, it now means that anyone who owns a master key-compatible lock is vulnerable: Absolutely anyone could print out their own set of keys and access their belongings.People are already drawing parallels with the ongoing debate over strong encryption software and keys for government access. In recent years, there has been a proliferation of encryption products (for messaging, storage, etc.) that scramble data in such a way that it can't be accessed and understood apart from its owner or recipient - even governments with a court order.On the one hand, this is fantastic for users - it keeps their data safe! But authorities worry it means the internet is "going dark," and they'll lose access to information they once had. One mooted solution is a back door, or "golden key" that only law enforcement has access to, and can be used to decrypt data when required.But as the TSA master key debacle demonstrates, if it's accidentally leaked (or lost, or cracked, or stolen), then it makes everyone less safe.
