# TSA Master Keys Leaked **URL:** \ **Category:** Miscellaneous and Personal Stuff I Must Share\ **Created:** [September 10, 2015, 6:33pm UTC](https://boards.straightdope.com/t/tsa-master-keys-leaked/730538 "2015-09-10T18:33:38Z")\ **Posts on this page:** 20\ **Page:** 2
**Author:** ![Dr.Drake](https://avatars.discourse-cdn.com/v4/letter/d/ad7895/32.png) [@Dr.Drake](https://boards.straightdope.com/u/Dr.Drake)\ **Post date:** [September 11, 2015, 1:16am UTC](https://boards.straightdope.com/t/tsa-master-keys-leaked/730538/21 "2015-09-11T01:16:08Z")
I always thought luggage locks were to keep your case from coming open during routine baggage handling and spilling the contents everywhere, not to keep the contents secure. ---
**Author:** ![Derleth](https://avatars.discourse-cdn.com/v4/letter/d/b9e5f3/32.png) [@Derleth](https://boards.straightdope.com/u/Derleth)\ **Post date:** [September 11, 2015, 2:08am UTC](https://boards.straightdope.com/t/tsa-master-keys-leaked/730538/22 "2015-09-11T02:08:56Z")
> [@filmore](#): > > It was just a matter of time. I’m not sure why they even needed to see the key to create a copy. I would think hackers could just get a lock from the store and reverse engineer a key. The point is that the pictures of the keys were up for an hour on a website due to a simple, understandable error borne of innocent ignorance, and that was enough to not only duplicate the keys, but to create computer files such that any random with a 3D printer they bought from Best Buy can print their own copies with very little technical knowledge required. **The point is that it’s now both cheap and easy to make these keys due to a simple accident, which proves the futility of all security measures with a backdoor built in.** This is now increasingly relevant given that the government, once again, is looking at backdooring computer encryption. ([more](http://www.theguardian.com/technology/2015/jul/08/fbi-chief-backdoor-access-encryption-isis)) ---
**Author:** ![Claverhouse](https://avatars.discourse-cdn.com/v4/letter/c/13edae/32.png) [@Claverhouse](https://boards.straightdope.com/u/Claverhouse)\ **Post date:** [September 11, 2015, 2:38am UTC](https://boards.straightdope.com/t/tsa-master-keys-leaked/730538/23 "2015-09-11T02:38:47Z")
> [@Baron\_Greenback](#): > > State approved physical locks is an actual thing? Bloody hell. Otherwise the terrorists win. Pass along, citizen. ---
**Author:** ![Terry\_Kennedy](https://avatars.discourse-cdn.com/v4/letter/t/c57346/32.png) [@Terry\_Kennedy](https://boards.straightdope.com/u/Terry_Kennedy)\ **Post date:** [September 11, 2015, 3:26am UTC](https://boards.straightdope.com/t/tsa-master-keys-leaked/730538/24 "2015-09-11T03:26:58Z")
> [@Derleth](#): > > The point is that it’s now both cheap and easy to make these keys due to a simple accident, which proves the futility of all security measures with a backdoor built in. The key information was publicly available on the manufacturer’s web site, complete with high-resolution pictures of the keys, until they discovered they had made a major “oops” by posting it and restricted access within the last few weeks. Before that, it had been available for nearly 3 years (first document) and over 7.5 years (second document): ([https://www.travelsentry.org/security/pdf/Guide\_to\_TravelSentry\_Passkeys\_1\_October\_2012-EN.pdf](https://www.travelsentry.org/security/pdf/Guide_to_TravelSentry_Passkeys_1_October_2012-EN.pdf)) and ([https://www.travelsentry.org/security/pdf/passkeys.pdf](https://www.travelsentry.org/security/pdf/passkeys.pdf)) (now both returning 403 Forbidden). Don’t hold me responsible if you click on them to confirm the 403 state and you have an unpleasant government experience thereafter. While they have done a pretty good job of wiping out cached copies, they seem to have missed the patents. Here is [one patent](http://www.google.com/patents/US7380427) and here is [another](http://www.google.com/patents/US20100050716). Figure 5 on the second patent provides a detailed image of the TSA006 Version A key with black numbers. ---
**Author:** ![Hari\_Seldon](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/hari_seldon/32/5173_2.png) [@Hari\_Seldon](https://boards.straightdope.com/u/Hari_Seldon)\ **Post date:** [September 11, 2015, 2:12pm UTC](https://boards.straightdope.com/t/tsa-master-keys-leaked/730538/25 "2015-09-11T14:12:38Z")
Does anyone really think that you can give out keys to thousands of TSA personnel and expect them to remain secret? I certainly never did, so I never bothered with a lock. ---
**Author:** ![pulykamell](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/pulykamell/32/3166_2.png) [@pulykamell](https://boards.straightdope.com/u/pulykamell)\ **Post date:** [September 11, 2015, 3:14pm UTC](https://boards.straightdope.com/t/tsa-master-keys-leaked/730538/26 "2015-09-11T15:14:02Z")
> [@Scoobysnax](#): > > If you have a BIC pen you don’t need to open the TSA lock. You can separate the teeth of the zipper with it and open 99% of suitcases without leaving a trace. Yep, and [here’s a youtube poster named bosnianbill](https://www.youtube.com/watch?v=tbpKhHwwtiY) who shows how worthless pretty much any luggage lock is. If you’re into lockpicking and security issues with locks, he’s a great resource. He made me realize how much most locks are just absolutely garbage (and he begins this video saying how the TSA locks are just crap.) Why bother dealing with the lock when you have such a weak point (the zipper) to exploit? (And bonus that you can completely hide any mischief by rezipping it.) ---
**Author:** ![slitterst](https://avatars.discourse-cdn.com/v4/letter/s/ecc23a/32.png) [@slitterst](https://boards.straightdope.com/u/slitterst)\ **Post date:** [September 11, 2015, 3:40pm UTC](https://boards.straightdope.com/t/tsa-master-keys-leaked/730538/27 "2015-09-11T15:40:31Z")
> [@Stranger\_On\_A\_Train](#): > > Last time I travelled with dive gear (internationally) I put a couple of padlocks, open, on my box with the assumption that TSA would inspect and then secure the box, which they did. However, this is when you still had to take your bags to the inspection station. I’m not sure what the protocol would be now… > > Stranger Colleagues of mine travel with expensive tools all the time. Buy a cheap starter pistol and put it in your luggage. Report this to a TSA supervisor when you check in at the airport. They will inspect your gear with you present and then allow you to place your own lock on the case. The supervisor will tag it as having a firearm and it _should_ be not touched by TSA again. ---
**Author:** ![pulykamell](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/pulykamell/32/3166_2.png) [@pulykamell](https://boards.straightdope.com/u/pulykamell)\ **Post date:** [September 11, 2015, 4:55pm UTC](https://boards.straightdope.com/t/tsa-master-keys-leaked/730538/28 "2015-09-11T16:55:21Z")
> [@slitterst](#): > > Colleagues of mine travel with expensive tools all the time. Buy a cheap starter pistol and put it in your luggage. Report this to a TSA supervisor when you check in at the airport. They will inspect your gear with you present and then allow you to place your own lock on the case. The supervisor will tag it as having a firearm and it _should_ be not touched by TSA again. It’s been a couple years, but unless things have changed or perhaps it’s different at different airports, this is not necessary. Show up with your big Pelican case with its heavy duty locks. They’ll make you go through a luggage scan. If they’re interested in seeing what’s inside, they’ll have you open it with your keys. Once satisfied, you just relock it and go. Is this no longer the case/not universal? I used to travel with $15K in photographic equipment, and this was always the procedure for me when I needed to put my equipment through check-in luggage. It wouldn’t go on the conveyor behind the ticketing desk, but I would have to take it over to a big baggage scan area where they did the above. This was at Midway, O’Hare, Reagan, Dallas/Ft. Worth, Wayne County, SFO, and probably some others I’m forgetting. ---
**Author:** ![YogSothoth](https://avatars.discourse-cdn.com/v4/letter/y/8edcca/32.png) [@YogSothoth](https://boards.straightdope.com/u/YogSothoth)\ **Post date:** [September 11, 2015, 5:16pm UTC](https://boards.straightdope.com/t/tsa-master-keys-leaked/730538/29 "2015-09-11T17:16:36Z")
I haven’t flown in more than a decade. So you’re telling me that the TSA would actually open my luggage? Like, when I check my bags they’ll open it?? WTF? Why aren’t they just scanning it and leaving it alone? How fucking long does it take them to open every single bag? Or is it a random spot check of bags? ---
**Author:** ![pulykamell](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/pulykamell/32/3166_2.png) [@pulykamell](https://boards.straightdope.com/u/pulykamell)\ **Post date:** [September 11, 2015, 5:32pm UTC](https://boards.straightdope.com/t/tsa-master-keys-leaked/730538/30 "2015-09-11T17:32:54Z")
> [@YogSosoth](#): > > I haven’t flown in more than a decade. So you’re telling me that the TSA would actually open my luggage? Like, when I check my bags they’ll open it?? WTF? Why aren’t they just scanning it and leaving it alone? How fucking long does it take them to open every single bag? Or is it a random spot check of bags? It’s spot checks. You’ll get a sticker on the luggage if it’s been checked by TSA. ---
**Author:** ![madmonk28](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/madmonk28/32/20811_2.png) [@madmonk28](https://boards.straightdope.com/u/madmonk28)\ **Post date:** [September 11, 2015, 6:18pm UTC](https://boards.straightdope.com/t/tsa-master-keys-leaked/730538/31 "2015-09-11T18:18:29Z")
I always assumed any luggage lock if purely symbolic and would never put anything in my luggage that I can’t replace easily. Not only will the TSA leave you a note telling you that you’ve been searched, there have been incidents where TSA agents have left notes telling citizens that they didn’t appreciate the passenger’s anti-war sticker, or religious affiliation, or in at least one case, the agent did appreciate the passenger’s sex toy: > [@](#): > > You know those papers the TSA leaves in your luggage as a disclaimer that they went through your stuff? Well, blogger Jill got a personalized message. On the side of the paper a TSA employee wrote “GET YOUR FREAK ON GIRL.” > **[TSA agent who left note about vibrator punished – Metro US](https://www.metro.us/tsa-agent-who-left-note-about-vibrator-punished/)** > > Rest assured, friends, the Transportation Security Administration doesnot frown upon masturbation. ---
**Author:** ![Absolute](https://avatars.discourse-cdn.com/v4/letter/a/b2d939/32.png) [@Absolute](https://boards.straightdope.com/u/Absolute)\ **Post date:** [September 11, 2015, 6:32pm UTC](https://boards.straightdope.com/t/tsa-master-keys-leaked/730538/32 "2015-09-11T18:32:24Z")
> [@YogSosoth](#): > > I haven’t flown in more than a decade. So you’re telling me that the TSA would actually open my luggage? Like, when I check my bags they’ll open it?? WTF? Why aren’t they just scanning it and leaving it alone? How fucking long does it take them to open every single bag? Or is it a random spot check of bags? They x-ray all bags and if they see something unusual on the x-ray they will open it. ---
**Author:** ![Amateur\_Barbarian](https://avatars.discourse-cdn.com/v4/letter/a/59ef9b/32.png) [@Amateur\_Barbarian](https://boards.straightdope.com/u/Amateur_Barbarian)\ **Post date:** [September 11, 2015, 6:32pm UTC](https://boards.straightdope.com/t/tsa-master-keys-leaked/730538/33 "2015-09-11T18:32:59Z")
> [@filmore](#): > > It was just a matter of time. I’m not sure why they even needed to see the key to create a copy. I would think hackers could just get a lock from the store and reverse engineer a key. This. It’s not exactly RSA. ---
**Author:** ![kath94](https://avatars.discourse-cdn.com/v4/letter/k/67e7ee/32.png) [@kath94](https://boards.straightdope.com/u/kath94)\ **Post date:** [September 11, 2015, 10:33pm UTC](https://boards.straightdope.com/t/tsa-master-keys-leaked/730538/34 "2015-09-11T22:33:29Z")
> [@Johnny\_Bravo](#): > > I’ve always operated under the assumption that those locks were borderline useless, so I honestly am not terribly upset by this. > [@Finagle](#): > > I guess I had just assumed that the master key had long ago been cracked by anyone who wanted to do so. That said, releasing the 3D cad model of the key is kind of a dick move. It has no effect on the TSA but to slightly embarrass them, but makes everyone’s luggage that much less secure. So good job there, guys. > [@Hari\_Seldon](#): > > Does anyone really think that you can give out keys to thousands of TSA personnel and expect them to remain secret? I certainly never did, so I never bothered with a lock. Same here. I worked for an airline before & after the creation of the TSA. Some of the bozos who couldn’t handle the airline job could get hired by the TSA & quickly rise in the ranks. Then get fired. And THEY probably had copies of the TSA master keys. :rolleyes: ---
**Author:** ![Cartooniverse](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/cartooniverse/32/3084_2.png) [@Cartooniverse](https://boards.straightdope.com/u/Cartooniverse)\ **Post date:** [September 12, 2015, 1:13am UTC](https://boards.straightdope.com/t/tsa-master-keys-leaked/730538/35 "2015-09-12T01:13:17Z")
> [@Ravenman](#): > > People put locks on their luggage? Really? Do they pay baggage fees with personal checks, too? And bring along extra quarters in case they need to use a pay phone? Yes. People put locks on their luggage. All the time. And they do so without worrying about the snark that decision might elicit. Cool huh ?? :dubious: I lock my luggage. I lock my equipment cases as well, though I almost always FedEx my equipment rather than check it with an airline. FedEx won’t cut off my padlocks. Sorry to hear that the TSA locks are useless. I kinda bought into the whole scam. ☹ ---
**Author:** ![Steve\_MB](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/steve_mb/32/5339_2.png) [@Steve\_MB](https://boards.straightdope.com/u/Steve_MB)\ **Post date:** [September 12, 2015, 7:58pm UTC](https://boards.straightdope.com/t/tsa-master-keys-leaked/730538/36 "2015-09-12T19:58:49Z")
> [@Derleth](#): > > This is now increasingly relevant given that the government, once again, is looking at backdooring computer encryption. ([more](http://www.theguardian.com/technology/2015/jul/08/fbi-chief-backdoor-access-encryption-isis)) Just the other day, [the directors of the FBI, the CIA, the NSA, and a few other three-letter-agency head honchos were at a meeting](http://arstechnica.com/tech-policy/2015/09/fbi-intel-chiefs-decry-deep-cynicism-over-cyber-spying-programs/), which the concluded with a panel discussion where they identified the reasons people in general and the tech industry in particular don’t see things their way. The root cause of the problem, they concluded, is that people are meanie doo-doo heads: > [@](#): > > FBI Director James Comey referred to the backlash against his lobbying for backdoors into encrypted communications provided by the technology industry as “venom and deep cynicism” This negative attitude has infected the citizenry at large: > [@](#): > > “I have something on my mind that affects all the work we do as an intelligence community,” Comey said in his opening remarks. “I think that citizens should be skeptical of government power. But I fear it’s bled over to cynicism…” It doesn’t help matters that the techies are just plain lazy: > [@](#): > > Comey said that he would be willing to set aside his push if it was shown to be impossible to provide the access but added, “I don’t think we’ve really tried to find answers yet because no one in the private sector has been properly incentivized.” It is also quite unhelpful that citizens have been exposed to inappropriate information that they should have left to their betters: > [@](#): > > NSA head Rogers said that “we have got to engender a better dialogue” on security issues. “In the end, we serve the citizens of the nation… all the revelations [a reference to Edward Snowden and WikiLeaks] have made life more difficult for us.” Of course, these things don’t just happen – some furrin evildoers must be out there _making_ them happen: > [@](#): > > CIA Director John Brennan suggested that negative public opinion and “misunderstanding” about the US intelligence community is in part “because of people who are trying to undermine” the mission of the NSA, CIA, FBI and other agencies. These people “may be fueled by our adversaries,” he said. :dubious: :rolleyes: :rolleyes: :rolleyes: :smack: :smack: :eek: ---
**Author:** ![ftg](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ftg/32/2801_2.png) [@ftg](https://boards.straightdope.com/u/ftg)\ **Post date:** [September 12, 2015, 10:01pm UTC](https://boards.straightdope.com/t/tsa-master-keys-leaked/730538/37 "2015-09-12T22:01:25Z")
“Security theater” is the term used among computer folk for the appearance of security without actual security. It is also frequently applied to TSA. The lock business was always about providing a security show. So it doesn’t matter if the keys are public or not. ---
**Author:** ![ryobserver](https://avatars.discourse-cdn.com/v4/letter/r/b2d939/32.png) [@ryobserver](https://boards.straightdope.com/u/ryobserver)\ **Post date:** [September 13, 2015, 6:02pm UTC](https://boards.straightdope.com/t/tsa-master-keys-leaked/730538/38 "2015-09-13T18:02:25Z")
> [@pulykamell](#): > > It’s spot checks. You’ll get a sticker on the luggage if it’s been checked by TSA. Or maybe not. I flew to London last year, and when I arrived my TSA-approved lock had vanished (I’m not wasting money on one of those again), my bag had clearly been rummaged (nothing was missing, but then, I hadn’t packed anything valuable), and there was no note, sticker or any other indication the TSA was responsible. For all I know a Philadelphia-airport baggage smasher had a copy of the keys an rummaged the bag on their own initiative. ---
**Author:** ![filmore](https://avatars.discourse-cdn.com/v4/letter/f/7993a0/32.png) [@filmore](https://boards.straightdope.com/u/filmore)\ **Post date:** [September 15, 2015, 1:02am UTC](https://boards.straightdope.com/t/tsa-master-keys-leaked/730538/39 "2015-09-15T01:02:21Z")
I was thinking about this thread and a couple of thoughts popped into my head. 1. To know if someone opened your lock, get a TSA lock and clog the key hole so the master key won’t work. If you get your suitcase back without the lock, then you know someone cut it off. Of course you lose the lock, but someone with a rogue master key won’t be able to secretly open your lock and lock it when they’re done. You might think you could just use an ordinary lock, but I’m thinking that it might stand out to the TSA and be targeted more often for search. 2. To help with theft problems, they could compare X-Ray images of your bag at checkin _and_ pickup. If items were stolen in transit, it should be evident in the two X-Rays. They don’t X-Ray the bags when they arrive, so there would have to be a system where you ask for your bag to be X-Rayed before picking it up. It wouldn’t worth it all the time, but it would help when you’re traveling with expensive equipment. ---
**Author:** ![pulykamell](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/pulykamell/32/3166_2.png) [@pulykamell](https://boards.straightdope.com/u/pulykamell)\ **Post date:** [September 15, 2015, 5:13pm UTC](https://boards.straightdope.com/t/tsa-master-keys-leaked/730538/40 "2015-09-15T17:13:40Z")
> [@filmore](#): > > I was thinking about this thread and a couple of thoughts popped into my head. > > 1. To know if someone opened your lock, get a TSA lock and clog the key hole so the master key won’t work. If you get your suitcase back without the lock, then you know someone cut it off. Of course you lose the lock, but someone with a rogue master key won’t be able to secretly open your lock and lock it when they’re done. You might think you could just use an ordinary lock, but I’m thinking that it might stand out to the TSA and be targeted more often for search. Not necessarily. As mentioned above and shown in the video, if you just have regular luggage with a zipper, someone can get in and out of your suitcase without you being any the wiser, TSA lock or not. [Previous page](https://boards.straightdope.com/t/tsa-master-keys-leaked/730538.md?page=1) [Next page](https://boards.straightdope.com/t/tsa-master-keys-leaked/730538.md?page=3)