• 1 Post
  • 31 Comments
Joined 1 year ago
cake
Cake day: June 20th, 2023

help-circle



  • The TSA press office said in a statement that this vulnerability could not be used to access a KCM checkpoint because the TSA initiates a vetting process before issuing a KCM barcode to a new member. However, a KCM barcode is not required to use KCM checkpoints, as the TSO can enter an airline employee ID manually. After we informed the TSA of this, they deleted the section of their website that mentions manually entering an employee ID, and did not respond to our correction. We have confirmed that the interface used by TSOs still allows manual input of employee IDs.

    TSA: lalala i can’t hear you, everything is fine, no issue here







  • To reiterate the other comment about code maintainability, I’d suggest removing all commented out code as your next commit. With git, that information isn’t lost and you can always go back to it on commit d4c981a. The easiest time to create a clean codebase is when you start the project, and the second easiest time is now. Also might be a good idea to use a pre-commit hook to check if commented code is being committed, to stop you from introducing mess in the future.


  • Ohhhh you’re totally right. I tried replicating OPs claim and searched for the video title “Building an Open Source Payment System - Sebastian Javier Marchano, Taler System” and there was no red bar. Searching for “GNU Taler” shows the red bar for that same video. It feels like bad UI, overloading the meaning of the red seek bar, but it seems like in this case, that’s saying it’ll skip you to when they start talking about it, not that you previously watched the video.