funsec mailing list archives

[privacy] Has the TSA Outsourced the TSA Traveler Identity Verification Program?


From: "Fergie" <fergdawg () netzero net>
Date: Wed, 14 Feb 2007 04:14:24 GMT

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Semi-off-topic, but interesting nonetheless.

Christopher Soghoian writes on Slight Paranoia:

[snip]

Browsing TSA's website this evening, I came across a link to the new TSA
Traveler Identity Verification Program.

"The TSA Traveler Identity Verification Program is designed to assist those
airline passengers who have been delayed or prevented from traveling as a
result of TSA's security measures."

Unlike the rest of the TSA website, this is served from a different domain:
http://rms.desyne.com/

Which means that a private company is running this site...

The whois database shows as follows:

Administrative Contact, Technical Contact:
Desyne, Inc. dns () DESYNE COM
Desyne Web Services, Inc.
PO Box 143
Boston, VA 22713
US
(703) 391-2400 fax: (703) 391-2550


Record expires on 21-Mar-2015.
Record created on 20-Mar-1996.
Database last updated on 13-Feb-2007 21:32:10 EST.



This begs the question: Who are these guys, why don't they know how to use
SSL and how were they awarded this sweet contract?

[snip]

More:
http://paranoia.dubfire.net/2007/02/tsa-has-outsourced-tsa-traveler.html

- - ferg

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.5.3 (Build 5003)

wj8DBQFF0oyZq1pz9mNUZTMRApcnAKDJGUOCrTy8m4jtDQZyVWCjR/0HUwCfabvz
tUYuq8KN71eGsHpeIqqkpfk=
=9nRN
-----END PGP SIGNATURE-----



--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg(at)netzero.net
 ferg's tech blog: http://fergdawg.blogspot.com/

_______________________________________________
privacy mailing list
privacy () whitestar linuxbox org
http://www.whitestar.linuxbox.org/mailman/listinfo/privacy


Current thread: