Researcher says he found terrorist watchlist exposed online

Nearly 2 million terrorist watchlist records, including “no-fly” list indicators, were purportedly exposed online. The list was indexed across multiple search engines on July 19th, but the Department of Homeland Security did not remove it until three weeks later, as first reported by Bleeping Computer Monday.

Security Discovery researcher Volodymyr “Bob” Diachenko discovered the watchlist, which appears to be the product of the Terrorist Screening Center, last month. The files were indexed by multiple search engines in an easily readable format. Records included information like full names, citizenship status, date of birth, passport numbers, and no-fly indicators. No password or separate authentication was necessary to access it, Diachenko wrote in a LinkedIn post Monday.

“I immediately reported it to Department of Homeland Security officials, who acknowledged the incident and thanked me for my work,” Diachenko wrote. “The DHS did not provide any further official comment, though.”

The server was indexed by search engines like Censys and ZoomEye on July 19th. Diachenko discovered the data that day and reported it to the Department of Homeland Security. It wasn’t until August 9th that the server was taken down. It’s unclear if any unauthorized users accessed the data.

The Terrorist Screening Center is a multi-agency center led by the FBI and responsible for managing the US’s terrorist watchlist. It produces a watchlist used by screening agencies like the DHS and Transportation Security Authority (TSA) to identify known or suspected terrorists attempting to enter the country by boarding aircrafts or obtaining visas. Databases like these contain extremely sensitive information related to US national security concerns.

It’s not unusual for innocent people to be put on the FBI’s no-fly list. In 2008, NBC reported that one US airline recorded 9,000 false positives in a single day. In 2010, the American Civil Liberties Union filed a legal challenge on behalf of 10 US citizens or permanent residents who were falsely added to the no-fly list. In 2014, a court ruled that the government must notify citizens and permanent residents when they are placed on the list.

Comments

Computers that power self-driving cars could be a huge driver of global carbon emissions

In the future, the energy needed to run the powerful computers on board a global fleet of autonomous vehicles could generate as many greenhouse gas emissions as all the data centers in the world today. Join our whatsapp group for latest articles updates. That is one key finding of a new study from MIT researchers that explored the potential energy consumption and related carbon emissions if autonomous vehicles are widely adopted. The data centers that house the physical computing infrastructure used for running applications are widely known for their large carbon footprint: They currently account for about 0.3 percent of global greenhouse gas emissions, or about as much carbon as the country of Argentina produces annually, according to the International Energy Agency. Realizing that less attention has been paid to the potential footprint of ...

Novel design helps develop powerful microbatteries

Translating electrochemical performance of large format batteries to microscale power sources has been a long-standing technological challenge, limiting the ability of batteries to power microdevices, microrobots and implantable medical devices. University of Illinois Urbana-Champaign researchers have created a high-voltage microbattery (> 9 V), with high-energy and -power density, unparalleled by any existing battery design. Join our whatsapp group for latest articles updates. Material Science and Engineering Professor Paul Braun (Grainger Distinguished Chair in Engineering, Materials Research Laboratory Director), Dr. Sungbong Kim (Postdoc, MatSE, current assistant professor at Korea Military Academy, co-first author), and Arghya Patra (Graduate Student, MatSE, MRL, co-first author) recently published their paper "Serially integrated ...

ChatGPT writes convincing fake scientific abstracts that fool reviewers in study

Could the new and wildly popular chatbot ChatGPT convincingly produce fake abstracts that fool scientists into thinking those studies are the real thing? Join our whatsapp group for latest articles updates. That was the question worrying Northwestern Medicine physician-scientist Dr. Catherine Gao when she designed a study—collaborating with University of Chicago scientists—to test that theory. Yes, scientists can be fooled, their new study reports. Blinded human reviewers—when given a mix real and falsely generated abstracts—could only spot ChatGPT generated abstracts 68% of the time. The reviewers also incorrectly identified 14% of real abstracts as being AI generated. "Our reviewers knew that some of the abstracts they were being given were fake, so they were very suspicious," said corresponding author Gao, an instructor in pulmonary an...

Post Scientist

Search This Blog