TSA Staffer Hires Buddies To Build Insecure Website For Folks Falsely On Watch List

from the well-that-makes-me-feel-safe dept

We've had so many stories of government computer systems or websites that have terrible security or are just useless (but expensive!) that it shouldn't surprise us to hear of another one. Yet, there's always someone who can go a step further. Witness the news that the TSA's website for individuals who find themselves incorrectly on the security watchlist has been found to be insecure, with hundreds of falsely accused travelers exposing personal details by using the site. Even better, it turns out that the company that was hired to build the site got the job in a no-bid contract (meaning there wasn't any competition -- it was just chosen) and the guy responsible for figuring out who to hire just so happened to have been a former employee at that company. So, basically, what happened was that a guy who had taken a job at the TSA hired his former coworkers, with no competition for the job and apparently little oversight, to just build a website that turned out to be insecure. And, of course, without any oversight, it took months before anyone even noticed the site was insecure. And, remember, that this is the TSA we're talking about here -- an organization who's main concern is supposed to be security. I feel safer already.

Filed Under: security, tsa, watch list


Reader Comments

Subscribe: RSS

View by: Time | Thread


  1. identicon
    Vincent Clement, 15 Jan 2008 @ 10:15am

    Re:

    How is it an efficient use of scarce security and safety resources to pull out a boy who has the same name as a 50-year old Pakistani man three times?

    Why isn't Homeland Security visiting people with the same name as a name on the no-fly list to improve the usefulness of the list?

    Many plane tickets are purchased months ahead of the flight. Why not check the names at that point? If there is a problem, give the people a chance to 'clear' their name to avoid problems at the airport. This would free up TSA resources and possibly reduce wait times through security.

    But why be logical when it comes to national security when you can just add names to a list.

Add Your Comment

Have a Techdirt Account? Sign in now. Want one? Register here



Subscribe to the Techdirt Daily newsletter




Comment Options:

  • Use markdown. Use plain text.
  • Remember name/email/url (set a cookie)

Follow Techdirt
Techdirt Gear
Shop Now: Copying Is Not Theft
Advertisement
Report this ad  |  Hide Techdirt ads
Essential Reading
Techdirt Deals
Report this ad  |  Hide Techdirt ads
Techdirt Insider Chat
Advertisement
Report this ad  |  Hide Techdirt ads
Recent Stories
Advertisement
Report this ad  |  Hide Techdirt ads

Close

Email This

This feature is only available to registered users. Register or sign in to use it.