start	end	text
5910	11050	Welcome, DEF CON travelers. You found Ticketing to Takeoff, an airport
11050	15010	hacking choose your own adventure, brought to you by
15010	19590	the Aerospace Village at DEF CON. I'm Liz Wharton,
19590	23170	Chief of Staff at Scythe, but today I will merely be
23170	27570	your narrator, your guide, helping you through the decisions
27990	31490	that have already been made because you've made
31490	35450	and created and voted on this adventure.
35450	40090	When we talk about airports and airport cybersecurity,
40090	43130	and particularly when we talk about the aviation
43130	48230	industry, cybersecurity in general, what we're forgetting is how far
48230	53510	airlines and airports have come. That as we've become more digitized, as
53510	58370	everything is connected, as air travel has grown, so has the
58370	62550	threat landscape, and so has, well, the attacks,
62550	65630	vulnerabilities, and the pieces that make up this
65630	69370	adventure. Decisions that you've made from the time
69370	74530	you leave your home to transportation to the airport,
74530	80290	departures, decisions made during flight, arrival, transit to your destination,
80290	84290	all provide, well, additional players and pieces,
84290	89170	but additional threats and opportunities for bad actors.
89170	96750	As the GAO noted in a recent report, that airlines and their IT infrastructure
96750	100690	and their systems also provide opportunities for potential
100690	104730	IT outage effects from planning the trip,
104730	110850	reservations, frequent flyer systems, to check-in, to boarding, to at the
110850	113030	airport, with the airline's mobile app, the
113030	116470	airport kiosk, the check-in, the boarding, the baggage,
116470	120250	the planes, the flight planning, the dispatch, all of these
120250	123910	come together and have potential outage effects
123910	127910	on, in some cases, systems that were not built
127910	134270	nor designed for the amount of impact that they have. But when we look at
134270	138230	the playing field for our adventure today,
138230	143070	the attack surface, it's not bounded like you find in most, in fact, it's quite
143070	146070	expansive. As you'll be traveling through our
146070	151170	fictitious airports, you'll notice that, well, not everything is in the same
151170	156030	place. Not every airport is designed differently. So to create and
156030	160030	craft policies, procedures, all the different
160030	163770	pieces that will go into what I hope you gain
163770	168210	from today's conversation and, well, future conversations, is that
168210	172490	airports and securing airports, be it the physical,
172490	176970	the systems, the software, all of the pieces that come into play airports,
176970	183270	is not easy. In fact, we may not even get through or scratch the surface
183270	186990	of all the different parts because, well,
187520	192510	who knows, between cyber squirrels and different choices that are made,
192510	196170	you may not even get past, well, ticketing.
196170	201070	Because within the airport attack surface, you also have a lot of players.
201090	207190	You have from air traffic control to the many cities that airports truly
207190	211510	are, to security, to your gate. It's a minefield.
212090	216170	Protected and controlled by airlines themselves.
216170	220350	Each of the airlines plays a part in this. The airport authorities,
220350	223950	be it the local governments or other authorities,
223950	227910	to the different, well, local law enforcement,
227910	234690	to the FAA, DHS, security, concessions, vendors, the electricity, all the
234690	239750	different telecommunication services that flow into each airport, well, those
239750	243630	are a different provider. For example, at the Atlanta Airport,
243630	247190	power is provided by Georgia Power under different agreements that have been
247190	251970	put into place. So whether those provide opportunities
252410	255250	for protection or vulnerabilities
257250	262370	is open. Also, you have to look at the third-party providers, the multi-use
262370	267270	software and systems. For example, Garmin recently provided a
267270	270890	great example of, well, when we think of Garmin, what do we
270890	275770	really think of? Do we think of the watch, the directions, you know,
275770	280430	our tracking, our steps, etc.? Do we really think of the fact that
280430	284670	Garmin provides aviation services, from flight planning
284670	288330	to mapping, and that when a ransomware attack
288330	295430	hits Garmin, that it's also impacting the avionics, the
295430	298910	airport? And a shameless plug for a breakdown
298910	304150	of the recent Garmin ransomware attack and attack factors, check out
304890	311490	Threat Thursday in the notes. And when we're talking and weaving our
311490	315790	narrative story today, we also have to look at what is the
315790	318450	intent. That when we have incidents such as
318450	324250	glitches, breaches, and, well, Agent Cyber Squirrel hitting airports,
324250	328830	the intent and the result matter, but sometimes don't.
329190	335230	Is chaos criminal carnage, or really is it just an oopsie that
335230	340530	results in chaos, criminal activities, or carnage?
340910	344590	And further, what are the incident impacts?
344590	351650	That a power outage at Delta's operations center in August of 2016,
351650	355950	$150 million and two days worth of cancellations.
355950	361330	That a software glitch with one vendor provided worldwide
361330	364830	check-in and booking issues. That a data breach
365430	369190	results in fines at one airport. That a
369190	378010	Southwest computer outage led to $177 million of damages
378010	382590	and three days of outages and flight disruptions.
382590	386830	All of these potentially could have been worse, and all of them,
386830	391050	well, potential threats. So from ticketing to takeoff,
391050	395150	it's going to be quite an adventure. Shall we begin?
396550	403030	And beware and warning, because this talk is different from other talks,
403030	406730	other technical talks, and other talks in the aerospace village.
406730	412830	For in this talk, you and you alone, assuming you voted in the Twitter polls,
413350	419790	are in charge of what happens. The mission was to see if you
419790	423750	and your data can make it safely to your flight
423750	428270	from ticketing to takeoff. You have to dodge the delays
428270	434870	and the data breaches. And so, shall we begin? It's time to pack
434870	440390	your things and head to the airport. And our first decision point...
440390	443770	do you decide to pack it all? Check a bag? I mean,
443770	447330	you're going to Vegas for a week for DEFCON
447990	453710	and all of the other villages. Or do you bring a carry-on? Put everything
453710	457110	in a bucket and see what happens. Well,
457870	463830	you chose a carry-on. Wise move, because airline baggage
463830	470050	check-in and tracking has the potential for delays, not to mention
470050	474430	data breaches. So now that you've got your backpack on
474430	478210	and you're about to head out, it's a digital and app world.
478210	481550	Who even has a printer at home these days? So when it comes to your
481550	484770	boarding pass and your ticket, do you print it at home?
484890	488050	Do you use the airline's app boarding pass?
488150	493090	Or, like me, I do a combination. I also take a screenshot of my boarding
493090	496710	pass should something go wrong. Well, almost
496710	500410	evenly split, but did you choose wisely?
500410	506890	You chose to print your boarding pass at home. Well, well done,
506890	511010	because ticketing frequently leads to, well,
511010	517830	delays and data breaches. So now that you have your bags packed,
517830	521910	your tickets in hand, and you're heading into the airport,
521910	526650	you know that sometimes there are long lines at ticketing and check-in.
526650	530290	And what if you want to switch your seat before you actually board the flight
530290	534450	depending on what you see around you? So,
534450	538110	DEFCON safe mode, secure aerospace travelers,
538110	543970	what do you decide to do? Overwhelming majority, you chose to check
543970	547910	in online with the 24-hour advance window,
547910	554370	avoiding the kiosks, and, well, the airline app, because you know
554370	559030	the check-ins are, well, the threat there are delays.
559070	563070	So much so that when a third-party provider
563670	569930	covers, well, most of the airlines, you see a 30-minute outage of their
569930	574350	software can lead to three airlines going down.
575110	579630	A couple days later, a different airport service provider
579630	588910	covered five airlines in 40 minutes. Saver was at it again on April 29th,
588910	592930	just less than a month later, 90 minutes,
592930	596950	three airlines. So you've checked in online,
596950	600270	you've shown up at the airport, and you're a seasoned road
600270	604150	warrior, even if it seems like forever since,
604150	608310	well, our last flight. Cutting it close to departure time,
608310	612130	and it's a big airport. Flying on a weekday morning,
612130	619130	bold move. Are you feeling lucky? So for decision for the fourth decision
619130	622570	point, DEFCON safe mode, secure aerospace
622570	627810	travelers, what did you decide to do? TSA pre-check,
627810	634410	clear, or regular TSA security lines? Most of us
634410	638570	seemed, most of you seem to be, well, hesitant with the facial recognition
638570	642590	that comes with clear, but you're okay with providing some data
642590	648610	and information because you're TSA pre-check. Well, what seems like a
648610	651630	safe move could lead to delays
652110	658110	and a data breach. Well, here's what happens. Is it
658110	661270	security theater where you have moving parts
661270	666750	and multiple players? Because when you have nationwide U.S. Customs computer
666750	671490	outages causing gigantic lines at airports,
671490	678650	you had JFK, LAX, SFO, Philadelphia, O'Hare, Midway, SeaTac,
678650	682390	and other airports all confirming delays,
682390	688330	our airport is probably hit by those. So not only do you have a delay with
688330	692470	pre-check, but one of the recent trends has been
692470	698470	for one provider to provide some of the software and
698470	704090	systems support for TSA. In this case, facial recognition
704810	708370	software provider and systems provider MEC
709050	713450	well, pretty much covers European airports
713450	719870	and most airports across the U.S. And while they take a long time to
719870	722910	admit it, they've had a breach. The facial
722910	728950	recognition data collected by U.S. airlines and U.S. citizens
728950	734910	is stored for 12 hours, for between 12 hours and
734910	740250	two weeks, and 75 years for non-U.S. citizens.
740250	742850	And that data is stored in several government databases
743590	747890	which border officials can pull up when you're arriving or leaving the U.S.,
747890	753450	including at airports. And well, MEC is not very good
753990	758070	at confirming their security breaches or giving a lot of detail.
758070	761610	So in this case, you didn't avoid the delays
762190	767390	and you didn't avoid the data breach, but you made it through security.
767630	771770	Because when you have these data breaches, well,
771770	778810	quite frankly, what are you going to do? Well, worrying about that check-in and
778810	782050	those security lines can be a headache. And of course, you
782050	786610	forgot to pack your headphones. It's a long flight ahead of us to Vegas.
786610	790570	So, DEF CON safe mode, secure aerospace travelers,
790570	794070	do you? Well, stop what you're doing because
794070	799110	you've got to have your headphones, noise-canceling headphones,
799110	802830	and knowing your luck so far, there's probably going to be
803130	809990	a screaming child or disruptive, I don't know, people. So,
809990	814490	do you stop and buy them now? Or maybe we'll wait a little bit.
814490	818150	If there's a place to buy some closer to the gate,
818150	821070	sure, we'll go with that. Or quite frankly,
821690	824890	you're feeling lucky. You're going to go for a roll the dice.
824890	830970	And well, who cares? Well, a slight, slight, slight majority
830970	835530	went with, who cares? You'll figure something out and you'll find a way to
835530	839310	entertain yourself without your headphones. Which, when it
839310	842890	comes to airport vendors and the threats of data breaches,
843450	849050	probably wasn't a bad idea. So, now you've made it to decision
849050	853970	point number six. Your departure gate is farther from the main terminal
853970	857630	than you originally thought. It's time to move
857630	860690	and get in those steps. But quite frankly,
860690	864770	who wants to carry our bags that far? I mean, keeping in mind,
864770	871490	we've got a carry-on and a backpack. And while, while we've got our traveling
871490	875290	shoes on, we haven't been exercising quite as much
875290	880150	during COVID. So, DEFCON safe mode, secure aerospace
880150	883390	travelers, what do you want to do? Do you want to
883390	886470	take the people mover? Take the airport train?
886470	893770	Or, one, two step, let's walk there. And you chose to walk there.
893770	898670	Which, while we're going to get in the steps and we're going to walk this way,
899070	905190	we had a double whammy. Both delays as well as the dreaded
905190	909890	agent cyber squirrel. Well, in this case, just an agent squirrel.
909930	917390	Because LAX, on Thanksgiving Day 2015, had cyber squirrel reports,
917550	922970	a squirrel plus a transformer. Which, in this case, while the power outages
922970	926530	weren't severe in the surrounding area, at the airport
926530	930610	you had the moving walkways, the elevators,
930610	936210	the escalators, the screening equipment, the baggage screening equipment that
936210	938890	just stopped. So, while none of the outages
938890	944310	completely shut down the airport, well, for those of us trying to get our
944310	948350	bags from security checkpoint to terminal,
948350	951710	it's going to be a little bit of a long hike. All those
951710	955130	speedy ways to get there are no longer at our advantage.
955130	958810	Thanks to Captain Chaos, cyber squirrel.
960110	964150	But, we finally made it to the gate area.
964150	971190	And, well, decision point number seven. In this case, you know,
971190	975630	beer pairs well with breakfast, right? We have had to deal with
975630	982270	all kinds of different challenges and, well, there are no seats at the bar.
982830	986210	The restaurant doesn't look too crowded and,
986210	991050	well, a table it is, if that's what we want to do.
991430	995390	So, DEFCON safe mode, secure aerospace travelers.
995610	1003130	What do we want to do? Do we, okay, take time, stop for one-on-one only
1003130	1008450	because, well, again, beer pairs well with breakfast?
1009010	1013610	Or, do we decide to wait a little bit because, quite frankly,
1013610	1018810	we're in first class. Oh, did I mention we only travel first class?
1018810	1022810	And first class has beer, even in the morning.
1022810	1030930	And it looks like the majority of us, well, chose beer first class,
1030930	1033850	not going to stop, which is not a bad thing
1033850	1039530	because one of the other hidden hazards are the point-of-sale systems
1040130	1043270	and the threats in restaurants of data breaches.
1043270	1047670	Not only that, there's also a potential for delays.
1047850	1052250	You don't know what systems the airport or restaurants at airports are running
1052250	1055850	off of. Are they bringing in their own Wi-Fi
1055850	1061390	network or are they piggybacking off of an airport facilities or nearby
1061390	1067110	vendors or hers? Are they piggybacking off of,
1067110	1072890	well, free airport Wi-Fi? That's not secure.
1073470	1079670	But there's no rest for the wicked. And as we reach decision point eight,
1079670	1083770	well, not only is there no rest for the wicked, there's no rest for travelers
1083770	1089290	with laptops and deadlines because we don't get to fly first class
1089290	1095170	and we're not heading to DEFCON unless we're big shots and we need to
1095170	1100890	review a draft file and respond ASAP. So we pulled our laptop
1100890	1106430	and DEFCON safe mode, secure aerospace travelers. What do we do
1106430	1109670	next? Do we tether to our cell phone to
1109670	1114090	connect for Wi-Fi? Do we use the airport's free Wi-Fi?
1114630	1120710	Or do we carry a cell tower in our backpack? Because, you know,
1120710	1126370	Wi-Fi pineapple and Wi-Fi cactus, they could have made it through airport
1126370	1130530	security. So let's see. And while
1131130	1137550	while we do miss the sights of pineapple Wi-Fi
1138010	1143990	and cell towers in our backpack, the good thing is is our data coverage
1143990	1147950	on our cell phone will allow us to tether to it.
1147970	1153490	Which, tether not to free Wi-Fi because the threats there are data
1153490	1154470	breaches.
1156290	1159970	So as we've sat, we've reviewed our documents,
1159970	1163550	and we're looking around, we've reached decision point number nine
1164090	1167690	because storm clouds are gathering on the horizon.
1167870	1172390	And we think, hmm, there may be potential flight delays.
1172430	1179370	Locusts, storms, it's not winter, but still stranger things have happened.
1179410	1182790	And what happens if we miss our connection?
1183050	1187130	Luckily, the airline we're flying on has an app.
1187130	1191470	We can see over in the distance that there's a counter.
1191470	1194030	There's a little bit of a line at the counter, but
1194670	1198530	not enough to deter us. So what are we going to do?
1198570	1201770	One, are we going to face down the storm because
1203710	1209870	as DEFCON safe mode airspace travelers, let's admit it, we are the storm.
1210250	1213910	Do we use the airline's app and switch to a later flight?
1213910	1216670	Or do we go up to the counter and talk to the person
1217070	1221490	from the airline and attempt to rebook? In a slight,
1221490	1225110	slight majority, we decide to go to the counter
1225110	1231770	and rebook, which turns out to be probably a pretty good idea because
1231770	1236690	airline ticketing systems and those apps both have delays because
1236690	1240610	if the app is out or
1240610	1245350	hasn't been developed, you have problems with data breaches.
1245350	1249110	For example, EasyJet had 9 million travel records
1249110	1256030	taken in a data breach. And the British Airways was fined a record
1256030	1260470	230 million dollars after a data breach exposed the booking
1260470	1264310	details of over half a million customers.
1264390	1268330	Hackers had siphoned off thousands of credit card numbers after installing
1268330	1272650	skimming malware on its website. So it's a good thing
1272650	1275690	we didn't go to the website or use the app
1275690	1280870	because that would have been bad. Instead, we just talked to a live person
1280870	1287470	which is daunting enough, but at least we're still on track for our
1287470	1290550	flight. Yet,
1292590	1298150	because check-in counters do have software glitches as well.
1298150	1304050	And well, unfortunately, as highlighted the Greater Toronto
1304050	1308430	Airports Authority, they had an outage with their airline
1308950	1312190	check-in system that impacted processes at both
1312190	1318370	Terminal 1, 3, and had IBM technicians working with the technology
1318370	1321790	authority to solve the problem. So the fears aren't
1321790	1325550	always just the airlines. You also have to look
1325550	1329150	at, well, what happens with the airline authorities?
1329450	1334810	And are they providing assistance? Can they have those
1334810	1337230	handles? And what happens when their systems go down?
1337510	1341130	In Toronto's case, if you had checked in online
1341130	1345590	ahead of time, which we did, you would have been fine.
1345590	1349250	But then what happens when you're trying to rebook? And if you're
1349790	1354190	having checked baggage and having to move through the airport, it caused
1354190	1358610	additional delays. So unfortunately in our journey, we've
1358610	1361830	had the potential, we've avoided most of this
1361830	1365210	data breach issues, but we've been delayed.
1365210	1369350	Not enough to miss our flight, but we've been delayed slightly.
1369350	1373050	Which leads us to, we finally get to our gate.
1373050	1379950	We show up and it's decision number 10. Surprise!
1381010	1387230	It's a gate change and it's a crowded and noisy terminal.
1387410	1394090	And let's be honest, who can ever truly hear what the airline
1394930	1398930	attendants are saying and when they're announcing where you're supposed to go?
1398930	1405790	Because we didn't catch it. The PA system was terrible. Now,
1405790	1408990	where did they move our flight? What gate? Is it
1408990	1415470	even on the same terminal anymore? We need to find out. So DEFCON,
1415470	1421290	safe mode, secure airspace travelers, what do we do? Do we check the nearby
1421290	1426130	display screens? Do we go to the airline app, cross our
1426130	1431630	fingers and hope that it's updated? Or do we ask a stranger nearby? We've
1431630	1436410	already spoken to one person. We spoke at the counter. That's a lot of
1436410	1440510	peopling for one day. So an overwhelming majority
1441130	1445650	didn't trust the app. Instead, we chose to check the display
1445650	1449890	screens. Well, gate display screens
1450430	1458130	are one of the big areas for delays. What do we mean? You knew it was going to
1458130	1463490	pop its head somewhere in the story. Well, ransomware. It's not just about
1463490	1468110	taking down data. It takes down the systems as well. And
1468110	1472390	in this case, the, well, Bristol airport
1472390	1476450	got to find out exactly what that means when,
1476450	1484030	in 2018, ransomware took out their signage with their gate information.
1484630	1488410	Staff were left with having to hold up whiteboards
1488410	1492570	directing people for where their flights are going. So in real time
1492570	1496150	are having to take that information, write it out,
1496150	1499450	and what happens when they start running out of whiteboard space? Well, they found
1499450	1502950	out. It caused delays. So again, not a data
1502950	1506430	breach because our data information isn't on
1506430	1511170	those screens. But instead, it did cause a delay.
1511430	1515370	We're cutting it awfully close to departure time, aren't we?
1516010	1521150	Well, it's about time for boarding.
1521290	1524270	And we're, we think we found where the right gate is.
1524270	1530770	But at decision 11, hmm, what happens
1531760	1535070	when the direction that we go? I mean, we can either
1535070	1538850	go right or left. And we're savvy travelers.
1538850	1544930	And while our frustrations are mounting, we're not going to panic. No,
1544930	1549410	instead, DEFCON safe mode. Secure aerospace travelers.
1549610	1555990	What do we decide to do? We can risk it. Go left. If it's wrong, we'll go right.
1556530	1562250	Well, turns out the airport has its own app that, of course, while we're
1562250	1566770	bored, we downloaded it. And, hmm, we can talk
1566770	1570430	about whether to download stuff to our cell phone without properly
1570430	1574310	vetting. But it also has a navigation feature.
1574310	1578490	We want to choose that. Then again, we think about
1578490	1582010	the issues with Garmin and all the other,
1582010	1588330	well, where's our app data being sent? Where's our location data being sent?
1588870	1592170	So, maybe we're not going to go there. And
1592170	1596950	while we know some of the signage in the airport is out,
1596950	1601790	surely not all of the signage is out. I mean, we can check the digital directory
1601790	1605810	signs because, you know, they're running on a
1605810	1612270	different system, aren't they? Spoiler alert. Most of the time, no.
1612270	1615610	And the other thing is there's hidden dangers
1615610	1619550	with the directory signs as well because,
1619550	1623530	let's think of, think back to, oh, I don't know,
1623530	1626950	some of the botnets, like the Mirai botnet
1626950	1633970	that liked target IoT devices. Those LG screens you see all around the
1633970	1638290	airport, what are those? But, waiting, danger,
1638290	1642630	waiting to happen. In this case, we're going to risk it.
1642630	1646770	We're not going to panic. We're going to check those digital directory signs
1646770	1650810	because surely, surely, they're not all out again.
1650810	1655330	Well, get ready for delays again because
1656490	1661090	ransomware has hit multiple airports again,
1661090	1664970	impacting the digital signage around the airport,
1664970	1669510	displaying, again, only back black screens.
1669510	1672950	Cleveland Hopkins International had this happen
1672950	1677970	in April 2019, you know, back when people flew still,
1677970	1682250	and took out their computing systems as well.
1682250	1685830	So, like that, you had to worry about whether their email,
1685830	1689870	their internal app, their internal direction, if they're able to get some
1689870	1694950	of the information out of it. So, once again, wasn't our data that we
1694950	1699510	were worried about as much here, but our ability to catch our flight.
1699510	1704110	We're getting really delayed here, which leads us to,
1704110	1708330	okay, we finally found the right direction.
1708330	1712390	We're heading there. We're almost there. We skipped that beer
1712390	1716830	because there was going to be some of that on first class.
1717090	1720730	So, we're walking by the newsstand and we spot the bestseller
1720730	1726010	Burnin book, and we've been meaning to read it. I mean,
1726010	1729130	Honest Cole and Peter Swinger did a great job,
1729130	1735390	we heard, in bringing and predicting all of these IoT
1735390	1739730	connected smart city, and one of my favorite,
1739730	1745090	drone issues. And, well, we heard that lawyers get the
1745090	1748530	short end of the stick, and this, and who doesn't like to see
1748530	1753750	bad things happen to lawyers? So, DEF CON safe mode, secure airspace
1753750	1756830	travelers, what are we going to do? Are we going to
1756830	1761770	stop, get a book, and, oh wait, look, there's a sign at
1761770	1766470	checkout that says, if you pay via this payment app,
1766470	1769850	you'll get a free coffee. So, we didn't have a beer.
1769850	1772930	Who doesn't want a free coffee? So, do we decide to
1772930	1777890	go for the coffee, or buy the book, skip the coffee? We don't need another
1777890	1781610	frequent shopper card. We don't need another stamp.
1781690	1784910	Then again, it's on our business credit card, so
1785450	1788810	who cares? I would never do that. I would never pick that one.
1788810	1795110	But, for the purposes of our narration, who cares? It's the company's card.
1795110	1801950	The data gets stolen, not our problem. Well, luckily, you chose to buy the book
1801950	1806430	and skip the coffee. Solid choice, an excellent read,
1806430	1810890	especially considering, well, you didn't pick up the headphones.
1810890	1814450	Because again, the payment systems in the shops
1814450	1818550	are notorious for data breaches, as well as, well,
1818550	1822630	best practices. And with those third-party payment
1822630	1825610	apps and different things, even within the
1826390	1830790	airports, you've had currency exchanges go down to different attacks.
1830790	1836870	So, okay, we finally made it to the gate.
1836930	1841050	And well, we've made its decision, lucky 13.
1841050	1844390	We've grabbed a seat in the boarding area, and we noticed that our cell phone
1844390	1848370	battery is really low. I mean, we tethered it so
1848370	1851990	that we could send and review those documents and
1851990	1856830	those files. And well, how are we going to tweet and
1856830	1861670	text from the flight? So, savvy DEF CON safe mode
1861670	1865290	aerospace travelers, what are we going to do?
1865910	1869350	Use the extra charger you're carrying in your backpack, because while you're not
1869350	1873810	carrying a cell phone tower, well, you do know to pack an extra
1873810	1879550	charger. Do we wait? Risk it? Because we are
1879550	1883230	first class, and as we know from flying first
1883230	1887710	class frequently, there's chargers,
1887710	1892090	or there's outlets, and there's our free beer.
1892290	1899150	Or do we go and find an outfit, or excuse me, an outlet, because
1899150	1902870	quite frankly, you never know. And again,
1902870	1906370	tweeting, how else are we going to show people that we're sitting in first class
1906370	1909670	if we can't tweet a picture of us sitting
1909670	1914530	in first class holding our free beer? Well,
1915370	1921770	charging devices. Well, in this case, we're going to fall victim to Agent
1921770	1927670	Cyber Squirrel, because Agent Cyber Squirrel, Captain Chaos,
1927670	1931190	likes to cause brief power outages. And again,
1931190	1935430	in this case, it was by Buffalo Niagara Falls
1935430	1941790	or Niagara International Airport, caused a brief power outage. It affected
1941790	1945250	gates, well, a select number of gates. It only
1945250	1948310	caused one flight to be delayed for a few minutes.
1948390	1955610	But in this case, luckily, we had our charger with us.
1955610	1960030	So while Agent Squirrel caused a power outage at our gate,
1960030	1964530	again, he didn't cause us to have any issues because
1964530	1970850	our backup charger was fully charged. Well,
1971390	1978090	decision time. It's finally, the gate agent is calling our flight.
1978090	1984310	And don't forget, we're first class, because that's how we roll.
1984310	1988150	And with first class, we're the first ones to board.
1988710	1994310	But we notice, oh lovely, the airline is testing facial
1994310	1998510	recognition for the boarding process. And you notice
1998510	2004370	the line is piling up. So what are we going to do?
2004370	2011370	We've made it this far. We have really got it close. And quite frankly,
2011370	2016450	we're tired. So weary DEFCON safe mode, secure
2016450	2022050	aerospace travelers. What do you decide to do? Do you
2022050	2026090	opt out? Because you've heard all those stories about facial recognition
2026730	2029890	and you know that a lot of those algorithms are wrong.
2029890	2034610	And that's not to get into, well quite frankly, it's just an affront.
2034610	2038450	You're not looking picture perfect right now.
2038830	2042370	Eh, might as well. If it's going to keep the
2042370	2045990	boarding process moving, and if it's going to be convenient,
2046490	2053630	sure. But we did get that new AI facial recognition
2053630	2058510	defeating tattoo and makeup.
2058510	2062110	And while it was funny going through security,
2062110	2070150	we're so close to boarding our flight. In this case, you decided
2070150	2077950	stand up on principle and no, we're going to opt out and use the
2077950	2083810	paper boarding pass. Well, not only does facial recognition
2084630	2087250	at the gates and also throughout the airports
2088030	2094530	with ticketing cause data breaches. And what happens? Are you going to get a
2094530	2098370	new news job because your information, your biometrics
2098370	2102530	are out there? It also causes delays. So
2103170	2106770	you can opt out, but that's opting into wait
2107430	2112990	and wait and wait. Because as we've learned through several
2112990	2118490	different approaches, that yeah, you can opt out.
2118830	2121710	And Zach Whitaker has a whole article from
2121710	2126150	May 2019 that walks you through it. But know that
2127330	2133070	opting out means they're going to go manual so that the airline staff will
2133070	2137210	manually check your passport or boarding pass
2137850	2141830	like they would normally do when you're boarding a plane. That also means
2141830	2145050	you've got to sit to the side and everyone else who's going through the
2145050	2149570	facial recognition is probably going to bump up ahead of
2149570	2151870	you. So what's the point of having our first
2151870	2156850	class perks if we're going to sit to the side?
2156850	2160150	Well, that's assuming the facial recognition
2160150	2164310	technology and equipment is even working. Because
2164310	2167730	according to one of the watchdog groups, the facial
2167730	2173350	recognition systems at airports only worked 85 percent
2173350	2180470	in some cases. And quite frankly, we've got that new face tattoo. And
2180470	2186150	well, all those delays and delays and delays were waiting
2186150	2193230	and waiting and waiting. Well, and that's okay because quite
2193230	2196310	frankly, we still made it onto our flight
2197470	2201670	with our data breached through several different
2202230	2208530	choices as well as our delays. But when the weather clears and our
2208530	2211390	flights cleared from ticketing to takeoff,
2211390	2212890	we've made it.
2214070	2217450	And really through this hacking adventure,
2217450	2221710	we've learned several different things. We've watched how the airports,
2221710	2227390	the airlines, and well, vendors and different service providers all play
2227390	2231090	together. And all some of the pressure points for
2231090	2235350	where cyber security has a lot of policy, has a lot of
2235350	2238410	room for development. But one of the other things to keep in
2238410	2242190	mind is with each of the choices, there was a lot that we haven't
2242190	2245050	uncovered or that we didn't get to discuss.
2245050	2248290	Much like the choose your own adventures, you chose
2248290	2255490	well, wisely, but you also chose poorly. You didn't die of
2255490	2261490	dystheria. You didn't die, or excuse me, you didn't die of dysentery.
2261490	2266190	You didn't die from agent cyber squirrel.
2266610	2270110	But it's opened the doors and discussions to see
2270110	2273950	how you would do the next time you go through, whether you would make the same
2273950	2277470	choices. Because from ticketing to takeoff,
2277470	2281490	airports truly are a hacking choose your own adventure.
2281530	2286430	It's been fun to be your tour guide and I encourage you to check out the rest of
2286430	2289850	the aerospace village and all that DEF CON has to offer as we
2289850	2295170	go into safe mode and go digital. Find me at LawyerLiz and
2295170	2299490	also follow Scythe at scythe underscore io.
2299490	2301830	Thanks for flying with us.