Northwest Flight 253 and the “security” of it all
1 Comment Published by zen December 27th, 2009 in English, SecurityBy now I think everybody has heard of the unsuccessful [terrorist?] attack to Northwestern Flight 253, where Umar Farouk Abdul Mutallab tried to mix bomb components about one hour before the plane landed.
We’re so used to the restrictions applied to passengers of flights, that we almost think of them as routine, while we should always think about the effectiveness of "security" measures as they are applied. The most lacking resource being often common sense.
In this case, we can already read of the next restrictive measures, on the NHS site:
The Department of Homeland Security immediately put additional screening measures into place [...]
Passengers flying from international locations to U.S. destinations may notice additional security measures in place. These measures are designed to be unpredictable, so passengers should not expect to see the same thing everywhere.
So, we’ll get more restrictions, but not the same everywhere. (WTF #1)
Next, let’s see what the TSA has in mind for us:
Among other things, during the final hour of flight customers must remain seated, will not be allowed to access carry-on baggage, or have personal belongings or other items on their laps[...]
as someone else said, I’m glad that the "terrorist" didn’t try to blow himself up three or more hours before. Now, I will not be allowed to take a book (or put it away) during just the last hour of the flight, but this will surely scare all those terrorists that can act and think only during that last flight hour. (WTF #2)
I still consider myself lucky, though, because:
Effective today, the TSA has informed Northwest that travelers are not allowed to transport any liquids, gels, lotions or similar items in their carry-on luggage. This includes items such as beverages, hairspray, toothpaste and shampoo. These types of items can only be carried in checked luggage.
In the end, I do not agree with those who say that as the attack was not successful, no additional security measures would be needed. I still strongly believe that in this cases early intelligence
Mutallab’s name had surfaced earlier on at least one U.S. intelligence database, but not to the extent that he was placed on a watch list or a no-fly list.
is much more useful than a guy asking me to leave my water bottle at the security check.
In the meanwhile, it leaves me surprised that the bomber left from an airport that the TSA confirmed compliant just a month ago. Again: either the airport security failed, or the security procedures and requirements are just wrong.
So, who am I supposed to trust?
(it turns out that Husdawg LLC is a perfectly “legal” ActiveX provider, but Intel does not mention them anywhere — just hoping people will click through?)
At first I did not notice, but emptying the trash took ages, even “not securely”.
Well, being the geek I am I did a quick dtruss on the Locum process, which spit out a huge list of write_nocancel syscalls. So, it seems it was actually writing stuff over the files I asked him to delete, even if I never asked him to (I just did a right click on the Trash icon, and selected “Empty Trash”). WTF?
Well, I learned (thanks Google) that Snow Leopard does a secure erase of the trash by default. Annoying.
And that I did not realize that until now. Embarassing.
So, this can be solved at least in two ways:
The GUI one
Go into Finder preferences, Advanced, and uncheck “Empty Trash securely”

or
the CLI one
Go into ~/Library/Preferences, convert the Finder preferences to xml (it’s binary by default)
plutil -convert xml1 com.apple.finder.plist
and change the stanza
<key>EmptyTrashSecurely</key>
<true/>
to
<key>EmptyTrashSecurely</key>
<false/>
Italian Agile Day 2009: Aperte le Iscrizioni!
0 Comments Published by zen October 21st, 2009 in ItalianoLeggo e volentieri riporto il post sul blog di paolo sull’ Agile Day 2009, conferenza unica nel suo genere, organizzata senza budget faraonici ma ricca di contenuti.
Se fate sviluppo software (e non solo), fateci un salto: Venerdì 20 Novembre 2009, a Bologna.
beepbeep:~ zen$ date
Tue Oct 20 19:34:42 CEST 2009
beepbeep:~ zen$ host www.flickr.com
www.flickr.com is an alias for www.flickr.vip.mud.yahoo.com.
www.flickr.vip.mud.yahoo.com has address 68.142.214.24
www.flickr.vip.mud.yahoo.com mail is handled by 0 .
beepbeep:~ zen$ telnet www.flickr.com 80
Trying 68.142.214.24...
telnet: connect to address 68.142.214.24: Connection refused
telnet: Unable to connect to remote host
weird.
The very same www.flickr.vip.mud.yahoo.com handles api.flickr.com (which is, unsurprisingly, down).
Doesn’t look smart from here.
Search
About
Geek of all trades, having fun with *NIX, the Internet and computer security since 1995.
Latest
- Northwest Flight 253 and the “security” of it all
- Intel’s Activex
- Snow Leopard Trash, again
- Italian Agile Day 2009: Aperte le Iscrizioni!
- Flickr.com down
- Verbosely emptying the trash
- Snow Leopard, ssh-agent and an everlasting memory
- At a new $HOME
- We’re going down :)
- (OsX) Nuova icona per le preferenze energetiche

