2024- 2023
- 2022
- 2021
- 2020
- 2019
- 2018
- 2017
- 2016
2015
Tic Tac Toe- Hex Table
- Markov Chain
- Lobotomy Debugging
- Map Maker
- Programming Lessons
- Polyglot 13: Dart
- Noogler
- Trekker
- Live Coding
- Privilege Escalation
- Desk
- CS by Mail
- Blinkenlights
- Cuba
- Open Wifi
- SpaceX
- 2014
- 2013
- 2012
- 2011
- 2010
- 2009
- 2008
- 2007
- 2006
- 2005
- 2004
- 2003
- 2002
Privilege Escalation
18 May 2015
The US Department of Homeland Security invited me down for a lengthy biometrics session. Multiple fingerprints, photos, height, weight, eyes, hair. Lots of fun. With this data they can then track my movements in the Land of the Free™. The joys of being a foreigner.
The problem is that none of this high-tech identification technology adds any security. Indeed, it actually reduces security. When I arrived the receptionist asked to see my driver's license. All the subsequent high-security biometrics now hinges entirely on one woman's opinion that one really bad laminated photo matched me. They really have very little idea who that guy who walked through their door this morning is. Next time I travel the ID they have for me is worse than the California driver's license it is based on.
In the computer security world we call this a privilege escalation attack. Each small security bug allows one to gain progressively more authority. If I choose, this biometric ID would eventually enable me to get a US passport.
Separately, one must also question the accuracy of biometrics. For example, here is Microsoft's attempt to guess my age in an old photo.
