<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet href="https://shkspr.mobi/blog/wp-content/themes/edent-wordpress-theme/rss-style.xsl" type="text/xsl"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	    xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	     xmlns:dc="http://purl.org/dc/elements/1.1/"
	   xmlns:atom="http://www.w3.org/2005/Atom"
	     xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	  xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>
<channel>
	<title>tsa &#8211; Terence Eden’s Blog</title>
	<atom:link href="https://shkspr.mobi/blog/tag/tsa/feed/" rel="self" type="application/rss+xml" />
	<link>https://shkspr.mobi/blog</link>
	<description>Regular nonsense about tech and its effects 🙃</description>
	<lastBuildDate>Thu, 23 Jan 2025 07:11:19 +0000</lastBuildDate>
	<language>en-GB</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>https://wordpress.org/?v=6.9.4</generator>

<image>
	<url>https://shkspr.mobi/blog/wp-content/uploads/2023/07/cropped-avatar-32x32.jpeg</url>
	<title>tsa &#8211; Terence Eden’s Blog</title>
	<link>https://shkspr.mobi/blog</link>
	<width>32</width>
	<height>32</height>
</image> 
	<item>
		<title><![CDATA[TSA's QR Statistics]]></title>
		<link>https://shkspr.mobi/blog/2012/01/tsas-qr-statistics/</link>
					<comments>https://shkspr.mobi/blog/2012/01/tsas-qr-statistics/#respond</comments>
				<dc:creator><![CDATA[@edent]]></dc:creator>
		<pubDate>Thu, 05 Jan 2012 07:33:00 +0000</pubDate>
				<category><![CDATA[qr]]></category>
		<category><![CDATA[goo.gl]]></category>
		<category><![CDATA[stats]]></category>
		<category><![CDATA[tsa]]></category>
		<guid isPermaLink="false">http://shkspr.mobi/blog/?p=5161</guid>

					<description><![CDATA[The TSA have come under fire for many things. Most recently, Fred Trotter has called them out for using a &#34;dummy&#34; QR code which leads to a page the TSA don&#039;t control. An astonishingly lax approach to QR use.  Last year, I noticed this QR code as I passed through San Francisco Airport.   The code goes to a TSA site (albeit non-mobile), which is odd, as the TSA do have a capable mobile site.  What…]]></description>
										<content:encoded><![CDATA[<p>The <a href="http://en.wikipedia.org/wiki/Transportation_Security_Administration#Criticisms">TSA</a> have come under fire for many things. Most recently, <a href="https://web.archive.org/web/20120113111625/http://radar.oreilly.com/2012/01/tsa-qr-code-flub.html">Fred Trotter has called them out for using a "dummy" QR code</a> which leads to a page the TSA don't control. An astonishingly lax approach to QR use.</p>

<p>Last year, I noticed this QR code as I passed through San Francisco Airport.
<img class="aligncenter size-full wp-image-5163" src="https://shkspr.mobi/blog/wp-content/uploads/2012/01/TSA-QR-Poster.jpg" alt="TSA QR Poster" title="TSA QR Poster" width="512" height="683"></p>

<p>The code goes to <a href="https://web.archive.org/web/20120217234535/https://www.tsa.gov/what_we_do/screening_under12.shtm">a TSA site</a> (albeit non-mobile), which is odd, as the <a href="http://www.tsa.gov/mobile">TSA do have a capable mobile site</a>.</p>

<p>What I find most curious is that the TSA are using the Goo.gl URL shortener.</p>

<p>This is a bad idea for two reasons.</p>

<ol>
<li>How does a user know where the code is going to take them? The URL "goo.gl/Qrlx1" could lead literally anywhere. A security minded organisation should <strong>always</strong> use their own domain name when creating a QR code.</li>
<li>Google short URLs allow <em>anyone</em> to see your QR code's usage statistics.
</li></ol>

<p>So, let's see how the TSA checkpoint QR code does.</p>

<img class="aligncenter size-full wp-image-5165" src="https://shkspr.mobi/blog/wp-content/uploads/2012/01/TSA-QR-Stats.png" alt="TSA QR Stats" title="TSA QR Stats" width="600" height="628">

<p>Interesting to note that there are a few people prepared to pay roaming data charges to view the site. I've no idea if this exact QR code is at other airports, but it's gathering around 80 scans per day.</p>

<p>You can <a href="https://web.archive.org/web/20120105031119/https://www.tsa.gov/press/qr_codes.shtm">read more about the TSA's use of QR codes at their press centre.</a></p>
<img src="https://shkspr.mobi/blog/wp-content/themes/edent-wordpress-theme/info/okgo.php?ID=5161&HTTP_REFERER=RSS" alt="" width="1" height="1" loading="eager">]]></content:encoded>
					
					<wfw:commentRss>https://shkspr.mobi/blog/2012/01/tsas-qr-statistics/feed/</wfw:commentRss>
			<slash:comments>0</slash:comments>
		
		
			</item>
	</channel>
</rss>
