Comments 1 - 10 of 10 Search these comments
On the heels of the news that the Department of Homeland Security is considering outsourcing surveillance of US citizens’ social media after the January 6th riot, a new report has revealed some of the consequences of building databases on citizens: that data can leak.
A secret terrorist watchlist containing 1.9 million records, including “no-fly” status, was exposed online. It is possible, but not stated, that bad actors came across the list, as it was passwordless and searchable on a couple of search engines.
Bob Diachenko of Discovery Research stumbled on the list in an open Elasticsearch cluster in July this year. He claims that the list had the sensitive information of more than 1.9 million people, including their names, nationality, date of birth, gender, no-fly status, and passport details.
Diachenko concluded that it was a no-fly list or a similar terrorist watchlist because it contained fields such as “no_fly_indicator” and “passport_id.”
“That was the only valid guess given the nature of data plus there was a specific field named ‘TSC_ID’,” Diachenko told BleepingComputer. TSC could stand for Terrorist Screening Center, a resource of the FBI used by multiple agencies for counterterrorism purposes. The TSC has a database, called the Terrorism Screening Database or the “no-fly-list.”
Diachenko is probably not the only person who stumbled on the list, considering it did not require a password to access, and it was searchable on the search engines ZoomEye and Censys.
Diachenko discovered the database on July 19 on a server with an IP address from Bahrain. He reported the data leak to the Department of Homeland Security on the same day, but claims it took the department three weeks to remove it. “I discovered the exposed data on the same day and reported it to the DHS….The exposed server was taken down about three weeks later, on August 9, 2021…It’s not clear why it took so long, and I don’t know for sure whether any unauthorized parties accessed it,” Diachenko wrote in his report.
–TheGreenDragon 303 points 11 hours ago +304 / -1
I wonder if they sent letters to BLM when they were trying to burn federal buildings down and threatening the white house. All these non elected employees need to go and we need to start over.
–catsfive 143 points 11 hours ago +143 / -0
Wondering if Madonna got one
–airborne3502 105 points 11 hours ago +105 / -0
Or Johnny Depp.
–John_Smallberries 100 points 11 hours ago +100 / -0
Or Jane Fonda.
–BarronVonSaltzburg26 88 points 10 hours ago +88 / -0
Or Kathy Griffin
"Demanding that 12 million commercial vehicles install an electronic monitoring device that can track the vehicles’ whereabouts is both an unconstitutional search and an unconstitutional taking of private property" that violate the Fourth and Fifth Amendments, bypassing the required "warrant based on probable cause to believe a crime is being committed," IJ said.
"Truck drivers are already operating under an almost Orwellian degree of government monitoring and scrutiny,"and the proposal is vague on what data the devices would transmit, senior attorney Rob Johnson wrote in a November 2022 blog post.
IJ quoted a New York Times essay months before the ANPRM that called long-haul truckers "some of the most closely monitored workers in the world" and the Canadian COVID-19 vaccine mandates for cross-border hauls "the straw that broke the camel’s back," erupting in trucker protests in February 2022.
"The Department of Transportation offers no reason to believe the warrantless collection of identifying information will make anyone safer," just that it "might make some inspectors' jobs easier," IJ attorney Jared McClain wrote in Reason that month.
"Truck drivers are already operating under an almost Orwellian degree of government monitoring and scrutiny,"and the proposal is vague on what data the devices would transmit, senior attorney Rob Johnson wrote in a November 2022 blog post.
Oh, they already do this. They've been doing this for decades.
https://patriots.win/p/16aTa42kld/the-other-side-of-the-twitter-fi/c/
https://patriots.win/p/16aTa42kld/the-other-side-of-the-twitter-fi/c/
Whoever openly threatened them like that is stupid. The criminals at "Homeland Security" (a perfectly Nazi name) are looking for excuses to continue violating US citizens' Constitutional rights on a mass scale.
Why don't they just get the data from the NSA?
Note how no mention is made of the Antifa attacks across the country...including DC and the Capitol Building itself?
https://reclaimthenet.org/dhs-considers-mass-social-media-surveillance/