Slashdot Mirror


Terror Watchlist "Crippled By Technical Flaws"

I Don't Believe in Imaginary Property writes "The database used by the government to generate lists like the No-Fly List is 'crippled by technical flaws,' according to the chairman of a House technology oversight subcommittee. And the upgrade may be worse than the original. Rep. Brad Miller (D-NC) says that 'if actually deployed, [the upgrade] will leave our country more vulnerable than the existing yet flawed system in operation today.' It seems that the current database doesn't have any easy way to do plain-text matching, forcing users to enter SQL queries. That might not sound so bad until you learn that the database contains 463 poorly indexed tables. How long until there's a terrorist named Robert'); DROP DATABASE; —?"

324 comments

  1. That's what happens when.... by ericspinder · · Score: 5, Insightful

    That's what happens when your interview questions are a political loyalty test.

    --
    The grass is only greener, if you don't take care of your own lawn.
    1. Re:That's what happens when.... by QX-Mat · · Score: 1

      I understand that's what happened in the justice department - is that true of other departments?

    2. Re:That's what happens when.... by gEvil+(beta) · · Score: 3, Insightful

      I understand that's what happened in the justice department - is that true of other departments?

      Considering the modus operandi of this administration, I'd be very surprised if this weren't a widespread practice.

      --
      This guy's the limit!
    3. Re:That's what happens when.... by Anonymous Coward · · Score: 5, Funny

      I heard they douse you in Holy Water. If it tastes like burning, you're hired on the spot.

    4. Re:That's what happens when.... by wisty · · Score: 2, Insightful

      It happens in any place where IT is an essential part, and an optional extra. If IT is essential you need meetings and accountability, and no feature gets a cost-benefit analysis by anyone with a clue because all of them are "essential".

    5. Re:That's what happens when.... by fastest+fascist · · Score: 4, Funny

      Don't knock it. This is proof a poor process CAN lead to good results. Those responsible for this should be generously rewarded.

    6. Re:That's what happens when.... by smilindog2000 · · Score: 5, Interesting

      Err... yes. Just FEMA, the CIA, and nearly every other major department. Bush's loyalty test brought us the Katrina aftermath fiasco, and mass resignations at the CIA. He even tried to appoint his personal lawyer to the Supreme Court. As they say, "sh-t flows down-hill." When the man in charge is a complete moron, the entire government suffers.

      Sorry, you were probably making a joke. A lot of us on this forum don't get sarcasm as easily as we should.

      --
      Beer is proof that God loves us, and wants us to be happy.
    7. Re:That's what happens when.... by Anonymous Coward · · Score: 1, Insightful

      Do you think the next administration will change things?

      I don't.

    8. Re:That's what happens when.... by Lostlander · · Score: 1

      Of course they will after all who wants the last guys lackeys in positions that your own lackeys can be in.

    9. Re:That's what happens when.... by QX-Mat · · Score: 4, Informative

      I was intrigued! You gave me the info I wanted to google with - Mass CIA resignations lead me to this

      I had no idea how bad it was. Retrospectively, the bashing the CIA got seems stupid considering the impossibility of what they have to accomplish... not just now, but after pissing off most of the world in the last 8 years.

    10. Re:That's what happens when.... by SpicyLemon · · Score: 5, Interesting

      Yeah! I fail to see the problem here. So, due to design flaws the terrorist watch list is difficult to do searches on. Maybe they can just get the California Cobol programmers to fix it.

      I fail to see how the terrorist watch list is ANY different from the communist black list of the 60s. All it takes to get put on there is a neighbor that doesn't like you. In order to get taken off, an agent has to be assigned to your case and you have to be investigated so that they are sure you're not a terrorist. With the current size of the list, good luck with that.

      CNN has had several articles in the last few weeks dealing with the terrorist watch list. My favorite was about three people named "James Robinson". The article mentions that one of the Jameses would just get tickets using the first name "Jim" and he wouldn't be hassled. Another would just run his first and middle name together and it wouldn't get flagged. Of note from that article, "The TSA has said the problem lies with the airlines and threatened to fine airlines that tell passengers they are on the watch list." Yeah. Wow. They're trying to make it illegal to tell someone why they're being held and discomforted. If you don't want the information to get out, don't share it. Keep it to yourself.

      Article V says, "[you can't be] deprived of life, liberty, or property, without due process of law..." This list deprives liberty (and sometimes property) and is missing a key element.

      Article XI says, "The enumeration in the Constitution, of certain rights, shall not be construed to deny or disparage others by the people." Isn't that EXACTLY what's happening?

      --
      This post approved by Shampoo.
    11. Re:That's what happens when.... by SpiderClan · · Score: 1

      Changing lackeys != Changing things

      In fact, changing lackeys is worse than leaving the existing ones in if the existing ones are loyal to the previous party.

    12. Re:That's what happens when.... by Anonymous+Brave+Guy · · Score: 4, Informative

      Oh, boy, are you in for a shock. They dunk you in Holy Water. If you drown, you're hired on the spot. Otherwise, you're a terrorist, and they shoot you.

      --
      If you disagree, post your argument. (-1, Overrated) isn't your personal censorship tool for views you don't like.
    13. Re:That's what happens when.... by bickerdyke · · Score: 2, Insightful

      As they say, "sh-t flows down-hill."

      Nah. it much too often floats at the top.

      --
      bickerdyke
    14. Re:That's what happens when.... by cayenne8 · · Score: 1
      "As they say, "sh-t flows down-hill."

      Only if you have diarrhea. Otherwise it rolls...

      :)

      --
      Light travels faster than sound. This is why some people appear bright until you hear them speak.........
    15. Re:That's what happens when.... by Dekker3D · · Score: 0, Redundant

      so if you can breathe holy water, you're evil, but if it kills you, you're good?

      a bit like the witch hunts, ain'nit?

    16. Re:That's what happens when.... by rtb61 · · Score: 2, Insightful

      Oddly enough changing lackeys can in fact change things. For example whilst they might both be corrupt, the more intelligent group remains aware that you don't fuck up the system when attempting to extract as much money out of it for yourself otherwise the system collapses and there is a whole lot less money to be made.

      The other group represents the ignorant pigs at the trough, idiot children in a candy store or basically the sociopaths. Those whose greed destroys the system they are pillaging as they show no restraint with regard to their actions.

      So the real difference is whilst you might be employing lackeys, the lackeys you are employing are actually skilled at the job you a employing them for, rather the just idiotically corrupt placements where it is inevitably that they will fuck the job up, "Brownie, you did a heck of a job", forcing everybody to lie about the results.

      --
      Chaos - everything, everywhere, everywhen
    17. Re:That's what happens when.... by slarrg · · Score: 4, Funny

      Typical government pork. Do we really need to waste a bullet after they've drowned?

    18. Re:That's what happens when.... by Anonymous Coward · · Score: 0

      Do we really need to waste a bullet after they've drowned?

      Only if the contractor has already billed us for the bullet.

    19. Re:That's what happens when.... by 2short · · Score: 3, Insightful

      Yes, I do.
      Cynicism is cute and all, but don't let it impair perceiving the world. Regarding the hiring policies for non-political-appointees at justice, previous administrations (of both parties) did NOT in fact do what this one did.
      Sure, politicians in general, suck. But don't let your depression about this prevent you from noticing when some of them suck considerably harder.

    20. Re:That's what happens when.... by 2short · · Score: 1

      Maybe. But this is definitely what happens when you try to implement something that fundamentally doesn't make sense.
          Any sizable development project is going to run into scores of times when someone has to decide the best way to approach some particular sub-requirement, or how they need to shape the requirements to meet the overall goal. Quite a few of these decisions will be made by committees, which is bad enough, but in the best case you can look at two alternatives and try to decide which one will make the overall goal happen.
          Here the overall goal is to use a no-fly list to stop terrorists. Which is not a thing that is going to happen, no matter how you design your database. Given any two ways of implementing any part of it, there's no ultimate basis for choosing one way of failing over another. Add to that the inevitable result when the more competent people on your project become aware they are just spinning their wheels (which, in Government contracting, was actually several projects before this one.)
          This is the classic result of trying to implement a fundamentally flawed process. You never get a system that does the wrong thing perfectly smoothly. The wrongness at the root of your design grows and spreads forth to every corner.

    21. Re:That's what happens when.... by tsstahl · · Score: 1

      So, terrorists are made of wood?

    22. Re:That's what happens when.... by jc42 · · Score: 1

      I fail to see how the terrorist watch list is ANY different from the communist black list of the 60s. All it takes to get put on there is a neighbor that doesn't like you.

      Actually, it's a lot easier than that. All it really takes is having a name that's somewhat similar to a name on the list. Lots of people with common names have learned this already. Google "no-fly-list" plus "common-name" to read lots of stories about it.

      Also, having the same birthday as someone on the no-fly list can get you detained and interrogated, though by now I suppose that the list must contain all the 366 possible birth dates.

      --
      Those who do study history are doomed to stand helplessly by while everyone else repeats it.
    23. Re:That's what happens when.... by Marillion · · Score: 1

      The only reason they're calling it a technical flaw is because there is a computer in the mix somewhere. If you replace it with a paper, pencil, and a billion trained monkeys, you would have the same flaw.

      --
      This is a boring sig
    24. Re:That's what happens when.... by lgw · · Score: 1

      You had to have the same birth year as well. But there are only about 40,000 potential birth dates for the living, and over a million people on the list, so I don't think that would be useful.

      --
      Socialism: a lie told by totalitarians and believed by fools.
    25. Re:That's what happens when.... by Grey+Haired+Luser · · Score: 1

      You'd definitely be interested in reading
        Legacy of Ashes, a
      great (but depressing) book detailing the history of CIA, by Tim Weiner.

    26. Re:That's what happens when.... by arkane1234 · · Score: 1

      yeah that tends to happen when a person is making a joke in relation to the witch hunts.

      --
      -- This space for lease, low setup fee, inquire within!
  2. Robert'); DROP DATABASE; â" by Hyppy · · Score: 2, Funny

    Oh yes. Little Bobby Datas, we call him.

    xkcd. Always relevant.

    1. Re:Robert'); DROP DATABASE; â" by goose-incarnated · · Score: 3, Informative

      Little Bobby Tables, I think you'll find

      --
      I'm a minority race. Save your vitriol for white people.
    2. Re:Robert'); DROP DATABASE; â" by Joe+the+Lesser · · Score: 4, Funny

      I think you mean Little Ahmed Tables.

      --
      "I only speak the truth"
      Karma: null(Mostly affected by an unassigned variable)
    3. Re:Robert'); DROP DATABASE; â" by Anonymous Coward · · Score: 0

      I, for one, welcome our meme neutralizing slashdot editor-nazis.

    4. Re:Robert'); DROP DATABASE; â" by Anonymous Coward · · Score: 0

      I don't get it, why are you modded funny? I mean, yeah, I like xkcd too, and I like relevant xkcd links in /. comments, but you're linking the exact same comic that TFS does! :P

    5. Re:Robert'); DROP DATABASE; â" by MadKeithV · · Score: 3, Funny

      Pronounced Aay - See - Phlegm......

    6. Re:Robert'); DROP DATABASE; â" by Joe+the+Lesser · · Score: 2, Funny

      Silence!

      I kill you!

      --
      "I only speak the truth"
      Karma: null(Mostly affected by an unassigned variable)
    7. Re:Robert'); DROP DATABASE; â" by skeeto · · Score: 1

      Here is my solution. They register a website, like noflylist.gov, and put the plaintext list right there all by itself. Then they wait for Google to index it. Searching it is a simple Google search: "<name> site:noflylist.gov". So easy a TSA goon can do it.

      Just no one tell them that it let's everyone finally see their moronic list.

  3. It'll all work itself out ... by daveime · · Score: 5, Funny

    The amount of people they want to include on their "t3rr0rz l1zt" it'll only be a matter of time before we have

    Osama Bin CREATE INDEX;

    and

    Saddam OPTIMIZE TABLE;

    Then everything will be hunk dory again.

    1. Re:It'll all work itself out ... by DoofusOfDeath · · Score: 4, Funny

      Saddam OPTIMIZE TABLE

      Actually, I think the SQL 2012 standard only supports the short form, "SADDAMIZE TABLE".

    2. Re:It'll all work itself out ... by Per+Wigren · · Score: 4, Funny

      Saddam OPTIMIZE TABLE

      Actually, I think the SQL 2012 standard only supports the short form, "SADDAMIZE TABLE".

      Not to be confused with the more penetrative command SOD... nevermind.

      --
      My other account has a 3-digit UID.
    3. Re:It'll all work itself out ... by ireallylovelinux · · Score: 0

      or SODOMIZE TABLE

    4. Re:It'll all work itself out ... by Anonymous Coward · · Score: 0

      har har har

    5. Re:It'll all work itself out ... by superyooser · · Score: 3, Interesting

      Don't forget the Chinese terrorist

      TRANSLATION ERROR

  4. Number of tables by suso · · Score: 4, Interesting

    That might not sound so bad until you learn that the database contains 463 poorly indexed tables.

    This is not a good measure of how good or bad a database is. Its good to have a table for every type of data and every data type. Read about normalization. You can go overboard, but as long as your database is designed well, having 463 tables might be just fine.

    I say this because once I heard consultant say something like "This web application shouldn't need more than 40 tables, when in fact they didn't know much about the details of the web app, which were quite sophisticated and the real application had more than 100 tables."

    1. Re:Number of tables by jedidiah · · Score: 2, Informative

      > This is not a good measure of how good or bad a database is.

      Oh yes it is.

      In order for a database to be USEFUL, you need to query it. If you can't
      query the database because of the way that it's laid out or indexed then
      it is infact broken.

      400+ tables for an identity resolution database is absurd. There are MUCH
      better ways to account for all sorts of bizzarre types of identifying
      information.

      This database probably isn't properly normalized either. With 400+ tables
      and a simple problem you would think that all keys are primary keys in this
      schema.

      As far as "this" problem goes: been there & done that (quite literally).

      --
      A Pirate and a Puritan look the same on a balance sheet.
    2. Re:Number of tables by Anonymous Coward · · Score: 2, Interesting

      400+ tables for an identity resolution database is absurd. There are MUCH
      better ways to account for all sorts of bizzarre types of identifying
      information.

      This database probably isn't properly normalized either. With 400+ tables
      and a simple problem you would think that all keys are primary keys in this
      schema.

      According to the article, this is the database to track terrorist-like behavior. That's a considerably more complex problem than identity resolution. This isn't the database that stores the no fly list for use by TSA; it's the database that is used to generate it. Generating the list is one use of the database, but apparently it's overall purpose is more general.

      Are all the 463 tables application tables? Or are some of them system tables (e.g. users, sessions, etc.)? The article doesn't say. Nor does it say why it thinks that the tables are poorly indexed. It also confuses the database with the application using it: you have to do SQL queries to get information from the database? The horror! It's as if SQL were a Structured Query Language designed purely for accessing a database.

      It's quite possible that the tables are structurally inadequate. Especially considering that the database was created more than five years ago and its purpose has been evolving over that time. The number of tables does not demonstrate that. Poor indexing is a conclusion; what's the data suggesting or supporting that?

      The only objective criticism is that there isn't an application that allows free text searching of the tables. Instead, they use direct access to the database. How is that a database problem though? If that's an important use case, then they need to write an application to support it. That application would still use SQL to get data from this database (although it might create its own free text index that could conceivably live outside the database).

    3. Re:Number of tables by bonehead · · Score: 1

      Sure, the 400+ tables is probably not an indicator of great design. That's not the part that really concerns me, though.

      What makes it even more obvious that the design is shoddy is that they're looking up people by their freakin' name!

      A better design would be to use a unique identifier. SS number, DL number, etc... This would solve a lot of the problems with misidentified people, especially Americans (who common sense would tell you are the ones doing the majority of flying within the US).

      Perhaps for some people from other countries it might be hard to come up with such a unique identifier, but in cases where it's possible they should just search on SS#. That way poor ol' Bob Smith #3 doesn't get harassed just because Bob Smith #784 is a bad guy.

    4. Re:Number of tables by Tablizer · · Score: 1

      The "wide table" versus "thin table" debate is a heated debate in technical circles. I lean toward wider tables having worked with thin-table designs that drove me up the wall.

      But another thing, if you have a lot of new or changing "parts", then some kind of meta-table (aka "attribute table") starts to look more flexibly than creating gajillion tables for each facial feature, body part, tattoo shape, etc. Focus on a more generic configuration instead of hard-wiring these into a schema. It's easier to add new components without changing the schema (which can be difficult in large systems), and easier to search for things when you don't quite know the classification system used internally.

      In general, it seems the thin-table proponents value referential integrity and type-safety at the expense of other things while wide-tablers emphasize change flexibility using dynamism and meta techniques. They each have their place and trade-offs. I vote dynamism/meta most of the time. However, existing RDBMS don't support the dyna/meta model very well. But at least be aware of the two schools of thoughts and the relative arguments for each.
             

    5. Re:Number of tables by spidrw · · Score: 1

      I don't think that comment was calling out the number of tables as being bad by itself, but rather the number of tables combined with the fact that in order to get data out of those tables, you have to write SQL.

      Select *
      From A, B, C, D, E....ZZZ
      Where A.foo = B.bar
      And...

      Good god.

    6. Re:Number of tables by claytonjr · · Score: 1

      A better design would be to use a unique identifier. SS number, DL number, etc... This would solve a lot of the problems with misidentified people, especially Americans (who common sense would tell you are the ones doing the majority of flying within the US).

      Perhaps for some people from other countries it might be hard to come up with such a unique identifier, but in cases where it's possible they should just search on SS#. That way poor ol' Bob Smith #3 doesn't get harassed just because Bob Smith #784 is a bad guy.

      Thats dumb. How about a unique id, and you can search by their name. (There has to be a human readable way to search, and SSN doesn't make much sense)

      Also, I don't recall anyone stating that their name was the identifier.

    7. Re:Number of tables by gnuman99 · · Score: 2, Insightful

      What? So, we need the SSN or DL number of Osama bin Laden now?

      Name searching, as weird as it may sound to some DB people, is one of the most reliable ways to match record to person. Sure, you *want* to have additional information to know that you have the correct Sammy Smith, but you have to start with the name.

      Of course, this is aside the fact that DNFL was a stupid idea. An idea brought as a *reaction* to 9/11 so politicians could point at it and say how much they are protecting the public. A list that in fact would do nothing to prevent 9/11 in the first place.

    8. Re:Number of tables by Jah-Wren+Ryel · · Score: 1

      This is not a good measure of how good or bad a database is. Its good to have a table for every type of data and every data type. Read about normalization. You can go overboard, but as long as your database is designed well, having 463 tables might be just fine.

      From various reports we know that the only thing in the database are names - no ages, no addresses, no physical descriptions. We also know that roughly 400,000 individuals (comprising over 1 million name variations) are on the list. I would not be surprised at all if it turns out that each table is just a piece of the list with up to 1,000 entries.

      --
      When information is power, privacy is freedom.
    9. Re:Number of tables by T3Tech · · Score: 1

      No, it's 1 table per last name. Each table contains 3 fields: first name, middle name, suffix name. The tables are indexed by middle name, except for the jones table - it's indexed on the suffix name.

      --
      Of course I didn't RTFA... why would I do that? You really are new here aren't you? Don't let my UID fool you.
  5. Why Would You Expect Otherwise? by curmudgeon99 · · Score: 4, Insightful

    The same US government that screws everything else up should be expected to screw up the terror DB. It was probably written by a junior developer who had never heard of a SQL injection. Isn't making a search form about the easiest project there is to build? I hate to say it, but I'm glad our government is so full of screw ups: pity the list exists at all...

    1. Re:Why Would You Expect Otherwise? by polar+red · · Score: 4, Interesting

      One could wonder whether the project was set up to adress terrorism OR it was setup to generate media-attention ?

      --
      Yes, I'm left. You have a problem with that?
    2. Re:Why Would You Expect Otherwise? by Dan667 · · Score: 4, Interesting

      Only problem is that it actually affects people try to travel. If the US Gov want to be idiots, fine. But if they want to do it in my name like I somehow want this, there is a problem. If they want to treat me like a criminal in my own country for trying to travel in it, I have a problem. If they want to seize my laptop for no reason because I am trying to travel, I have a problem.

      I like the idea of having a fly at your own risk airline where you can just "risk it" and not have all these so called "protections". I bet it would put the airlines with the TSA out of business in a week.

    3. Re:Why Would You Expect Otherwise? by mrbluze · · Score: 2, Insightful

      I like the idea of having a fly at your own risk airline where you can just "risk it" and not have all these so called "protections". I bet it would put the airlines with the TSA out of business in a week.

      Thinking of joining the air force?

      --
      Do it yourself, because no one else will do it yourself. [beta blockade 10-17 Feb]
    4. Re:Why Would You Expect Otherwise? by Tridus · · Score: 4, Insightful

      It was outsourced. Near the bottom of TFA it says that some of the money was used to renovate a building owned by Boeing.

      Its amazing just how many "government screwups" are actually caused by politicians outsourcing to their buddies in private industry (with little to no penalties for failing to deliver what was promised), and have nothing to do with the abilities of actual government employees.

      There's actually quite a few smart IT folks in government, but they're not the ones who make decisions on who to outsource this stuff to. In fact, most of them would probably rather build a team and do it In-House, since that way you build up the knowledge internally and can more easily support it later.

      So please don't blame government employees for something that Boeing screwed up.

      --
      -- "So they told me that using the download page to download something was not something they anticipated." - Bill Gates
    5. Re:Why Would You Expect Otherwise? by HungryHobo · · Score: 4, Interesting

      That could work.
      Risk it airlines, where there are no security checks to get on board and the only security measures are to detect when a plane has been hijacked and once confirmed a killswitch is activated to simply blow it out of the sky. Might have to pay the pilots more but I'd travel on one of those.

    6. Re:Why Would You Expect Otherwise? by elrous0 · · Score: 1

      No-bid contract FTW!

      --
      SJW: Someone who has run out of real oppression, and has to fake it.
    7. Re:Why Would You Expect Otherwise? by suso · · Score: 2, Informative

      Believe it or not but there are some good applications out there in the government. I worked on a Naval base for a year as a contractor and was fortunate enough to work on a really kick ass PHP application. I can't tell you what it was, but to this day it was the best web application I've seen as far as security, design, functionality and sophistication goes. I think it was over 130,000 lines of code and was written by 2 guys over 3 years. I learned a lot from working on that application. So there are some gems out there, this so called terrorist database could have had the potential to be better. Maybe it would have been better if there wasn't so much hype around it.

    8. Re:Why Would You Expect Otherwise? by Anonymous Coward · · Score: 2, Interesting

      No need, give every able adult a weapon upon boarding, they'll have plenty of incentive to deal with any problems.

    9. Re:Why Would You Expect Otherwise? by MindStalker · · Score: 4, Insightful

      C) Keep the terror level level artificially high.
      http://www.dhs.gov/xinfoshare/programs/Copy_of_press_release_0046.shtm

      The United States government's national threat level is Elevated, or Yellow.

      The U.S. threat level is High, or Orange, for all domestic and international flights.

      So for the rest of you its only Yellow, but if your flying, its Orange!

    10. Re:Why Would You Expect Otherwise? by Abcd1234 · · Score: 0, Flamebait

      But... but... government bad. GOVERNMENT BAD! Private industry good!

    11. Re:Why Would You Expect Otherwise? by db32 · · Score: 1

      With no security checks people could bring their knives and guns and tazers and so on. It would be a damned risky endeavor to highjack that plane. I would much rather deal with the problems caused by a bullet hole in the plane from shooting a highjacker than with an automatic detonation, being shot down by jet, or being flown into a building or something.

      I could maybe even see you having to check your guns just because of the potential 'hole in the plane' problems. But the easy remedy is to give everyone an asp baton. Planes are a close quarters place, even if someone sneaks a gun on and tries something, a half dozen people with metal rods should be able to stop them relatively quickly.

      Then, for bonus security. Anyone who participates in stopping a highjacking gets to fly for free for life, a shiney trinket, and maybe a nice check too.

      --
      The only change I can believe in is what I find in my couch cushions.
    12. Re:Why Would You Expect Otherwise? by Anonymous Coward · · Score: 0

      I like the idea of having a fly at your own risk airline where you can just "risk it" and not have all these so called "protections". I bet it would put the airlines with the TSA out of business in a week.

      You're not thinking about 9/11. It's not the passengers that are being protected. It's the people on the ground. If you want to "risk it" you can. Fly a small plane. Do it yourself or rent it. There's no TSA, but you also won't be able to take down a tall building. I hope.

    13. Re:Why Would You Expect Otherwise? by Anonymous Coward · · Score: 0

      Don't give any weapons to the terr'ists tho. perhaps someone could keep a list somewhere (perhaps in a database, I don't know) of people that shouldn't be given weapons upon boarding a plane...

    14. Re:Why Would You Expect Otherwise? by zippthorne · · Score: 1

      "Private industry good" true.

      But you have to decide what you're buying. The problem comes when politicians are controlling the purse strings. Typically the thing they think they're buying is "jobs."

      --
      Can you be Even More Awesome?!
    15. Re:Why Would You Expect Otherwise? by Carlosos · · Score: 1

      You could always just hire a airplane and a pilot to fly you. If you call a flight school near an airport than you will very likely get someone to fly you for the "cheap" since many that have the license need a certain number of hours flying before allowed to fly for a big airline. I still agree with the "risk it" airline idea. I can remember when my father was able to see on TeleText (only on PAL TVs) that a flight was leaving in two hours to his destination where a customer needed help and he was able to get onto the airplane in time because the security checks didn't take 5 minutes. This will probably also save the airline money since it wouldn't have to spend so much money on the security which could make the ticket price cheaper.

    16. Re:Why Would You Expect Otherwise? by Timothy+Brownawell · · Score: 2, Interesting

      Risk it airlines, where there are no security checks to get on board and the only security measures are to detect when a plane has been hijacked and once confirmed a killswitch is activated to simply blow it out of the sky.

      Or have a solid wall between the cockpit and the passenger area, or replace the killswitch with a forced-autopilot-to-the-nearest-airport switch.

    17. Re:Why Would You Expect Otherwise? by Jason+Levine · · Score: 5, Insightful

      The Mythbusters disproved the "hole in the plane causes explosive decompression" myth.

      From http://mythbustersresults.com/episode10 :

      Explosive decompression can occur when a bullet is fired through the fuselage of a pressurized airplane, causing the hole to grow dramatically and possibly cause the plane to break up as seen in movies.

      BUSTED

      The pressure is not high enough and the hole is too small. Explosive decompression only occurred when a hole the size of a window was made with explosives. Even then, the rush of air could not suck Buster completely out of the hole. Lastly, there are proven instances of explosive decompression where the plane was still able to maintain control and land.

      (This myth was revisited in episode 38 and it was re-busted.)

      So you could theoretically have armed people on the plane shooting at terrorists and not causing huge problems if they miss. (Well, except for passengers that get in the way.)

      I think the best solution is to lock the pilot's door before boarding. Then the pilots are instructed to not open the door under any circumstances. If terrorists threaten to kill passengers, the pilots are to land the plane and won't be held accountable for any deaths that result. After all, giving into the demands to open the door and turn over control of the plane could mean the death of all on board as well as people on the ground. The pilot's door should also be bullet-proof (in case a weapon is smuggled on board).

      El Al does this (in addition to other security measures) and they haven't had a single hijacking even though they're a huge target.

      --
      My sci-fi novel, Ghost Thief, is now available from Amazon.com.
    18. Re:Why Would You Expect Otherwise? by Anonymous Coward · · Score: 0

      or just give everybody on the plane a gun.

    19. Re:Why Would You Expect Otherwise? by pembo13 · · Score: 1

      I'm sure such a plane could be built that would "eject" the cockpit, and have the pilots float safely down to earth by a parachute.

      --
      "Thanks for all the money you paid to us. We've used it to buy off ISO among other things" -Microsoft
    20. Re:Why Would You Expect Otherwise? by Anonymous Coward · · Score: 0

      A small group of smart people will always outwork a large group of mediocre people.

    21. Re:Why Would You Expect Otherwise? by Abcd1234 · · Score: 1

      "Private industry good" true.

      Tell that to Enron's customers. Or those whose investments are now destroyed by the ongoing collapse of the mortgage industry. Or those who suffered through the massive NY blackout a few years back.

      But, yeah... private industry is always good. Right.

    22. Re:Why Would You Expect Otherwise? by Anonymous Coward · · Score: 0

      If you don't want to have the list, then speak to your representative and tell them exactly what you just told us.

    23. Re:Why Would You Expect Otherwise? by krazytekn0 · · Score: 1

      The US government do everything in your name like you somehow want it... I think they call that "Representative Government" As long as you're a voting citizen that is.

      --
      Not all life is cyber. Extra Income
    24. Re:Why Would You Expect Otherwise? by Bearhouse · · Score: 1

      So you're on the list as of now.

      More seriously, the airlines don't have the option - US Gov. law requires them (and the airports) to go through all the checks. Unfortunately, its not just the lives of the passengers that are at stake, as the Twin Towers tragically demonstrated, an airliner makes an effective missile.

    25. Re:Why Would You Expect Otherwise? by Ihlosi · · Score: 1
      Unfortunately, its not just the lives of the passengers that are at stake, as the Twin Towers tragically demonstrated, an airliner makes an effective missile.

      In that case, the prospective terrorists should bring enough firepower to keep 200-odd people in check. Otherwise, they might find themselves pounded into red mush by a lynch mob of angry passengers.

    26. Re:Why Would You Expect Otherwise? by spun · · Score: 2, Insightful

      Really. So, all private industry is automatically good, or would you care to qualify that statement? The free market has failure modes, you know. Perhaps you've heard of natural monopoly, imbalance of information, and externalities?

      --
      - None can love freedom heartily, but good men; the rest love not freedom, but license. -- John Milton
    27. Re:Why Would You Expect Otherwise? by whoda · · Score: 1

      Except for the kill switch, you are describing most private charter airlines.

    28. Re:Why Would You Expect Otherwise? by Bearhouse · · Score: 1

      Urm, not sure how that would work. If there's no checks, let's assume that everyone has RPGs and automatic weapons. Sounds like a receipe for safety at 50K feet...remember, these guys *want* to die...

    29. Re:Why Would You Expect Otherwise? by db32 · · Score: 1

      Oh I wasn't really specifically refering to the decompression thing which is why I wouldn't be terribly concerned about bullet holes. I meant more of the problem of it potentially hitting something important like hydrolics, electrical systems, or fuel. A bullet could still bring a plane down if it happens to hit the right(wrong?) spot. However, even without explosive decompression, the decompression involved in holes in the plane would likely be enough to make the rest of the trip really suck. If you ever fly in a plane that isn't all nice and controlled environment like an airliner you will know what I mean. That rapid pressure change may not kill you, but if it is big enough it will cause enough pain in your ears that you will wish you were dead.

      --
      The only change I can believe in is what I find in my couch cushions.
    30. Re:Why Would You Expect Otherwise? by Anonymous Coward · · Score: 0

      For accuracy sake, there has been one hijacking of an El Al airplane. It was back in 1968 though. (http://terrorism.about.com/od/originshistory/p/1968Hijacking.htm) However, it did not result in any deaths, and El Al has maintained a very secure record in the following 40 years. We could learn a lot of things from the way Israelis do security.

    31. Re:Why Would You Expect Otherwise? by Abcd1234 · · Score: 4, Funny

      Really. So, all private industry is automatically good, or would you care to qualify that statement? The free market has failure modes, you know. Perhaps you've heard of natural monopoly, imbalance of information, and externalities?

      Hear that noise? It's the sound of thousands of libertarians plugging their ears and yelling "LA LA LA" as loud as they can.

    32. Re:Why Would You Expect Otherwise? by ColdWetDog · · Score: 2, Funny

      No need, give every able adult a weapon upon boarding, they'll have plenty of incentive to deal with any problems.

      No need to go that far. Two Marine Staff Sargent's would keep everyone in their place. Maybe three or four for the larger planes.

      'Maggot! Sit down and shut up! Now!'

      --
      Faster! Faster! Faster would be better!
    33. Re:Why Would You Expect Otherwise? by dave420 · · Score: 3, Interesting

      "On 23 July 1968, El Al flight 426 operated by a Boeing 707 on route from London to Tel Aviv via Rome, was hijacked by three members of the Popular Front for the Liberation of Palestine shortly after take-off from Rome-Fiumicino airport and forcefully diverted to Algiers. The hijacking ended after 40 days and is considered to be the only successful hijacking involving an El Al jet."

    34. Re:Why Would You Expect Otherwise? by SpiderClan · · Score: 1

      I would say that the no-bid outsourcing you're describing falls under the umbrella of government screw-ups, unless it's actually intentional incompetence. It is government employees (or government in general), then, who is responsible for allowing Boeing to screw this up.

    35. Re:Why Would You Expect Otherwise? by Jason+Levine · · Score: 1

      Thanks for that. I didn't know there were ever any successful hijackings of El Al planes. Still, only one successful hijacking in 60 years is an impressive track record.

      --
      My sci-fi novel, Ghost Thief, is now available from Amazon.com.
    36. Re:Why Would You Expect Otherwise? by dave420 · · Score: 1

      It is indeed a great record, and yeah - they're about as high-profile an airline target as you can get. The "lock the doors" idea is great. Especially if it reduces the bullshit "security" at airports.

    37. Re:Why Would You Expect Otherwise? by Minwee · · Score: 1

      The United States government's national threat level is Elevated, or Yellow.

      The U.S. threat level is High, or Orange, for all domestic and international flights.

      I think you meant to say that the threat level is Bert for everything else but Ernie for all flights.

      This is government work so it is very important to use the correct terminology.

    38. Re:Why Would You Expect Otherwise? by Anonymous Coward · · Score: 0

      Airplanes have constant aurflow into and out of the aircraft already. Thats why your ears constantly pop while in flight.

    39. Re:Why Would You Expect Otherwise? by Anonymous Coward · · Score: 0

      What if the pilot gets hungry? Or has to use the "little aviator's room"?

    40. Re:Why Would You Expect Otherwise? by KenSeymour · · Score: 1

      I like Comedian Ron White's routine about this. He starts out by saying his mother called all upset:

      "I just heard on the news that we're at terror threat level orange, what do I do?"

      He says "I don't know."

      Then he says "Nobody knows."

      His system has two levels:

      1) "find a helmet
      2) "put on the damn helmet"

      In the event of an emergency, the terror alert level will raise to "find a helmet," in which you should find a helmet.
      If the threat is real, then the alert level will raise one step higher to "put on the damn helmet."

      At least everybody knows what to do. I suppose the TSA folks and law enforcement have some different list of things
      they do at different levels. For us civilians its:

      Yellow: be alert, report suspicious packages, etc.
      Orange: be more alert, report suspicious packages, etc.

      --
      "We can't solve problems by using the same kind of thinking we used when we created them." -- Albert Einstein
    41. Re:Why Would You Expect Otherwise? by Rick+Bentley · · Score: 1

      And that junior developer was probably employed by a large military contractor who know all the right people in Washington to get a huge and massively expensive contract to create this database, then they spent 0.01% of the contract amount to hire the junior programmer, whom they fired as soon as he submitted a something that compiled and passed a simple delivery demo, and the rest of the money went to lavish offices, private jet rides, and bags of paper money to make sure they get the next contract...

      --
      My favorite quote doesn't fit into 120 characters. Now no one will like me.
    42. Re:Why Would You Expect Otherwise? by Radio_active_cgb · · Score: 1

      Only problem is that it actually affects people try to travel. .... But if they want to do it in my name like I somehow want this, there is a problem. If they want to treat me like a criminal in my own country for trying to travel in it, I have a problem.

      This could form the basis for a letter to your congress-critter. "The TSA is broken. Fix it or eliminate it."

    43. Re:Why Would You Expect Otherwise? by HungryHobo · · Score: 1

      Yes but if your only concern is to kill a number of people in a confined space and not take over a plane for other uses there are loads of trains and busses which you could bring your rocket launcher onto.
      Get a train at rush hour and you'll get much more people.

    44. Re:Why Would You Expect Otherwise? by gnuman99 · · Score: 1

      where there are no security checks to get on board and the only security measures are to detect when a plane has been hijacked and once confirmed a killswitch is activated to simply blow it out of the sky. Might have to pay the pilots more but I'd travel on one of those.

      give every able adult a weapon upon boarding, they'll have plenty of incentive to deal with any problems.

      Really? These latest comments here have got to come from some more shortsighted members of slashdot crowd.

      So, you would allow anything on the plane? No security checks because you can't hijack it anyway?

      I suspect that all the "islamic" extrimists really like your idea as well. They do not have to conceil their explosives anymore. They just have to bring a granade or two with them. Then they can "gloriously" blow the plane up and get their "900 virgins" (or whatever the number they came up this week).

    45. Re:Why Would You Expect Otherwise? by HungryHobo · · Score: 1

      nah, since everyone else is armed they'll be heavily outgunned anyway, they'd have to have a very large number of men on board to beat all the passengers and then they still have to get into the cockpit with it's nice thick door.

    46. Re:Why Would You Expect Otherwise? by gnuman99 · · Score: 1

      How about terrorists just use a grenade?

      Come on people! This is not the 1960s! The extremists DO NOT want to take over a plane. They just want to "martyr" themselves for their afterlife "virgins".

      I mean, if this is not an example how polygamy can screw up a population, I do not know one.

    47. Re:Why Would You Expect Otherwise? by Random+BedHead+Ed · · Score: 5, Funny

      This airline is sounding better and better. Kill switches to blow it up in midair, marines to put passengers in their place. I can see someone running with this idea and making a fortune, and to think we were part of the thread that first hatched the idea.

      My addition to this would be that to ensure the safety of people on the ground the planes in this hypothetical airline shouldn't be allowed to actually take off, but should instead hug the ground throughout the flight, perhaps on some sort of stabilizing rail, or a magnetic hover track. We might even build a system for running these planes across North America.

    48. Re:Why Would You Expect Otherwise? by ultranova · · Score: 1

      Then, for bonus security. Anyone who participates in stopping a highjacking gets to fly for free for life, a shiney trinket, and maybe a nice check too.

      That's a bad idea. It gives incentive for every passenger to join every fight just in case either participant happens to be a terrorist. That would be the biggest problem this airline would face, anyway - lots of armed people, knowing that they must put any hijacking attempt down quick since the hijackers will almost certainly have efficient weapons, looking for anything odd with an unhealthy amount of paranoia.

      --

      Forget magic. Any technology distinguishable from divine power is insufficiently advanced.

    49. Re:Why Would You Expect Otherwise? by sskinnider · · Score: 1

      As long as I can carry a weapon to defend myself.

    50. Re:Why Would You Expect Otherwise? by PPH · · Score: 1

      Let the flight deck crew carry firearms. Like they were allowed to until a few months before 9/11 when the Bush administration implemented a regulation prohibiting it.

      --
      Have gnu, will travel.
    51. Re:Why Would You Expect Otherwise? by Anonymous Coward · · Score: 0

      You point out why the 9/11 truthers are nothing but fail. The government has trouble with large projects.

      They didn't screw up wiring 3 sky scrappers with controlled demolition charges. A process that generally takes months. Two of which far exceed that highest building ever razed via controlled demolition. Without a single one of the 10s of thousands of people who worked in said buildings even noticing and without a single leak by any of the contractors. Oh and they all had it all work perfectly.

      Yeah right.

    52. Re:Why Would You Expect Otherwise? by Anonymous Coward · · Score: 0

      Why aren't passenger airliners designed in such a way that the cockpit and passenger cabin are not connected at all? The cockpit should have a separate entrance.

    53. Re:Why Would You Expect Otherwise? by MindStalker · · Score: 3, Interesting

      Whats sad about all this, is it never ever ever will get on green, If every single terrorist in the world was wiped out, it might, might get down to Blue, but I doubt it. Personally I'm shocked to find its at yellow.

    54. Re:Why Would You Expect Otherwise? by Anonymous Coward · · Score: 0

      Funny this story had all the hallmarks of a CACI job.

    55. Re:Why Would You Expect Otherwise? by Lost+Race · · Score: 1

      Back when the airplanes were designed it was considered more efficient to share facilities (bathroom, kitchen, etc) between the cabin and the cockpit. Weight is a big issue for airplanes.

    56. Re:Why Would You Expect Otherwise? by WetCat · · Score: 1

      Looks like it's not a terror DB, it's an error DB

    57. Re:Why Would You Expect Otherwise? by EthelSnakes · · Score: 1

      It was really set up to generate revenue for some defense contractor and more of the security "theater"

    58. Re:Why Would You Expect Otherwise? by Anonymous Coward · · Score: 1, Interesting

      I think the best solution is to lock the pilot's door before boarding. Then the pilots are instructed to not open the door under any circumstances.

      and what about meals? or are there going to be pre-stored meals that they need to heat up and eat? shall we then include a toilet as well? coffee machine? i think u get the point.

      unfortunately, everytime they open the door, it's an opportunity for a takeover.

      anyways, i like the idea of an always-locked door.

    59. Re:Why Would You Expect Otherwise? by Tridus · · Score: 1

      Could be, yes. Could be politically motivated. The article doesn't go into that level of detail.

      At that point its a matter of semantics. If it was a politician who pushed for the no-bid to go to company X, I consider it a political screwup and not a government screwup.

      Then again, I work for a government (not in the US though), so my perspective is probably different then the average taxpayer. I don't think most people differentiate between politicians and the rest of the government when money is mis-spent.

      --
      -- "So they told me that using the download page to download something was not something they anticipated." - Bill Gates
    60. Re:Why Would You Expect Otherwise? by caluml · · Score: 1

      three members of the Popular Front for the Liberation of Palestine

      Splitters!!

    61. Re:Why Would You Expect Otherwise? by belmolis · · Score: 1

      There is already an airline rather like this, with real security. It's called El Al.

    62. Re:Why Would You Expect Otherwise? by Jay+L · · Score: 2, Funny

      So for the rest of you its only Yellow, but if your flying, its Orange!

      Well, duh. The sky is blue, and when you're flying, you're closer to the sky. yellow + blue = orange.

      [For you armchair optical physicists: I'm talking about color mixing at high altitude. Your classroom yellow + blue = brown doesn't work up there, because of sunspots.]

    63. Re:Why Would You Expect Otherwise? by belmolis · · Score: 1

      Well, even El Al didn't see the need to prevent airline hijackings until they started to be a problem. So the story really is that the first hijacking alerted El Al to the problem, they took measures in response, and those measures have prevented any further hijackings.

    64. Re:Why Would You Expect Otherwise? by Anonymous Coward · · Score: 0

      That would be silly. People would simply hijack the planes with the intent of getting them blown out of the sky by the kill-switch.

    65. Re:Why Would You Expect Otherwise? by db32 · · Score: 1

      Funny...I seem to remember three pretty high profile hijackings where they DID want to take over the plane...and succeeded. So, aside from the inaccuracy, the screwball dig about afterlife virgins either tells me you are joking, or you are a joke. You sound pretty fundie yourself with those statements.

      --
      The only change I can believe in is what I find in my couch cushions.
    66. Re:Why Would You Expect Otherwise? by OldManAndTheC++ · · Score: 1

      This airline is sounding better and better. Kill switches to blow it up in midair, marines to put passengers in their place.

      We'll call it "Neo-Con Air"

      --
      Soylent Green is peoplicious!
    67. Re:Why Would You Expect Otherwise? by Sentry21 · · Score: 1

      I like your idea, but wouldn't it be amazing if we could design smaller versions of these planes, which people could then lease, rent, or even purchase? We could have a few different designs, some for families, some for small cargo, and so on, and even larger ones for carrying goods around. The economic implications would be astounding.

    68. Re:Why Would You Expect Otherwise? by Anonymous Coward · · Score: 0

      All they need to do is point www.fiendsreunited.com at the database so the Gitmos can correct their own entries and maybe even find love.

    69. Re:Why Would You Expect Otherwise? by Anonymous Coward · · Score: 0

      Ever hear of charter flights anyone?

      Not exactly cheap though, and the plane is much much smaller.

      What's great is that you don't have to deal with the bullshit large terminals either. (Fly directly from podunk to small-town municipal without the crowds, TSA, or having to deal with stupid parking and traffic, etc.) And you might even get to chat with and get to know your pilot during the flight.

      Capcha: rurally

    70. Re:Why Would You Expect Otherwise? by Anonymous Coward · · Score: 0

      See I always thought that the best airline security would be to issue everyone boarding a .44 cal sidearm. Who needs air marshals?

      --Geoff

  6. Comment removed by account_deleted · · Score: 2, Interesting

    Comment removed based on user account deletion

  7. the first person by nimbius · · Score: 5, Funny

    to code an exploit that automatically populates tables in the watchlist with entries from the TSA employee database wins.

    --
    Good people go to bed earlier.
    1. Re:the first person by LiquidCoooled · · Score: 4, Funny

      Are you sure thats possible, I thought Microsoft Access Databases were invulnerable?

      --
      liqbase :: faster than paper
    2. Re:the first person by Anonymous Coward · · Score: 0

      to code an exploit that automatically populates tables in the watchlist with entries from the TSA employee database wins.

      Stand by whilst I dust off the old C64 and knock that out for you.

    3. Re:the first person by Anonymous Coward · · Score: 2, Funny

      invulnerable and inaccessible go hand in hand yes.

    4. Re:the first person by Anonymous Coward · · Score: 0

      to code an exploit that automatically populates tables in the watchlist with entries from the TSA employee database wins.

      Unfortunately, as annoying as they are, most TSA employees have no influence to change policy.

      What you want to populate it with is the names of Congressmen, Senators, congressional staffers, spouses and relatives.

    5. Re:the first person by discogravy · · Score: 1

      Well just reboot the workstation, I'm sure it'll come up again. Security by inaccessibility: the new paradigm.

    6. Re:the first person by CDS · · Score: 1

      That's already been tried.

      Unfortunately, they screwed THAT up too, and ended up merging in the wrong direction. All of the original watchlist entries ended up getting hired by the TSA.

    7. Re:the first person by mapsjanhere · · Score: 1

      That's how they populated it in the first place (was faster than trying to type in that printout from the FBI). And that's why John Smith and Robert Miller are on the list, together with Kathy Brown and Mary Tailor.

      --
      I'm aging rapidly, I bought a new game and had no idea if my machine was good for it.
  8. It's _not_ crippled by technical flaws. by Ihlosi · · Score: 4, Insightful

    It's crippled by being a moronic concept in the first place ("You've got the wrong name and _maybe_ the wrong date of birth, and you're not flying.") and an absolutely arbitrary process of putting names on the list, and no way of ever getting a name off the list.

    Fix those points first, and _then_ worry about technical details.

    1. Re:It's _not_ crippled by technical flaws. by Hektor_Troy · · Score: 4, Interesting

      "You've got the wrong name and _maybe_ the wrong date of birth, and you're not flying."

      Oh, come on! We all know to be terrified of letting 5-year-olds onto the plane (video). If they share a name, they're bound to share ideologies. And what better place to hide explosives than in a shitty diaper?

      And that kid was only wanted by the INS! I can just imagine the hillarity ensuing when they clear an airport because another kid "made a stink bomb" in his diaper - we all know how much the TSA loves words like those.

      --
      We do not live in the 21st century. We live in the 20 second century.
    2. Re:It's _not_ crippled by technical flaws. by hellwig · · Score: 5, Insightful

      Exactly. The No Fly List is useless because it contains an estimated 1,000,000+ names (really, 1 million terrorists we can't track down?). It's useless because it contains generic entries such as T. Kennedy, which doesn't refer to a person but an alias once used in a crime (Tater Salad might be in there too). It's useless because even once they bomb a terrorist into tiny pieces his name is still on the list (sry, can't rememer who). Not only that, but the list is used for political dissidents too, not just terrorists or dangerous criminals. Apparently Nelson Mandela was on the list, until the fact was embarrasingly publicized and he was finally removed.

      --
      Eggs
      Milk
      Bread
      Cat Litter
      Soda
      ...
    3. Re:It's _not_ crippled by technical flaws. by elrous0 · · Score: 5, Funny

      Actually, I'd be pretty cool with banning 5-year-olds from planes.

      --
      SJW: Someone who has run out of real oppression, and has to fake it.
    4. Re:It's _not_ crippled by technical flaws. by daremonai · · Score: 3, Insightful

      Personally, I'd be a little worried about a 5-year-old who's still in diapers.

    5. Re:It's _not_ crippled by technical flaws. by samweber · · Score: 5, Funny

      But hey, it's not that bad! After all, since all terrorists use their real names when flying, it is sure to catch them all.

      Ever wonder why no suicide bomber has been able to strike twice? It's because of the no-fly-list, I tell you!

    6. Re:It's _not_ crippled by technical flaws. by Anonymous Coward · · Score: 4, Informative

      Technically, the Terrorist Watch List Database contains about 400,000 unique persons, of which the remainder represents known aliases. This is the so-called "green light" list, with no restrictions on them whatsoever. The "yellow light" list is much smaller, about 10,000 unique persons, and only subjects these people to desk check-ins and special searches. The *actual* No Fly list (the "red light" list) is itself a small fraction of that, perhaps 1,000 people at the most.

      Add that to the fact that Congress is starting to mandate some sanity checks and ways to be removed from the list, I could see this someday being useful... just not today.

    7. Re:It's _not_ crippled by technical flaws. by Anonymous Coward · · Score: 0

      I guess this is where racial profiling would come inâ¦

    8. Re:It's _not_ crippled by technical flaws. by clickety6 · · Score: 5, Funny

      Apparently Nelson Mandela was on the list, until the fact was embarrasingly publicized and he was finally removed.

      So, easy solution - if you don't want to be bothered by the no fly list then change your name to Nelson Mandela...

      --
      ----------------------------------- My Other Sig Is Hilarious -----------------------------------
    9. Re:It's _not_ crippled by technical flaws. by ZippyKitty · · Score: 1

      Oh, come on! We all know to be terrified of letting 5-year-olds onto the plane (video). If they share a name, they're bound to share ideologies. And what better place to hide explosives than in a shitty diaper?

      I think this might work... the explosives in the diaper I mean. When I fly with my son we carry the diaper bag, and I've not always sanitized it for flying sufficiently. So there is often a larger bottle of sun screen or something stupid like that in it. Now, by the time we hit the airport security it isn't unusual that we will have changed DS's diaper. And we use cloth - really nice ones which I am not about to throw out. So by the time we are in security there is a wet diaper nicely wrapped in a plastic bag in the diaper bag.

      Security screens the bag and sees something suspicious - like the sun screen. So they ask if it is okay to search the bag. In the interest of fairness I warn them of the other contents of the bag. You know - not once have they followed through with searching the bag. :)

      ZK

      --
      Time flies like an arrow Fruit flies like a banana
    10. Re:It's _not_ crippled by technical flaws. by Lucid+3ntr0py · · Score: 3, Insightful

      I think we should start putting everyone on the watch list. Then we don't have to worry about exceptions, and all of our wait times become the same.

      If employees of the TSA can't sort out when someone, like a 6 year old boy, is not the right person named on the terror list, then WHAT THE FUCK ARE THEY GOING TO DO WITH A REAL TERRORIST?

    11. Re:It's _not_ crippled by technical flaws. by Ihlosi · · Score: 1

      Personally, I'd be a little worried about a 5-year-old who's still in diapers.

      On a 12-hour transatlantic flight with a connection, which would you rather deal with:

      a) a dirty diaper
      b) dirty pants, underpants and maybe socks and shirt, depending on the size of the accident.

    12. Re:It's _not_ crippled by technical flaws. by still+cynical · · Score: 1

      I heard they caught the Tater. Something about an incident in a bar.

      --
      Ignorance is the root of all evil.
    13. Re:It's _not_ crippled by technical flaws. by kalirion · · Score: 2, Funny

      So do you wear diapers on transatlantic flights too? You know, in case of accidents.

    14. Re:It's _not_ crippled by technical flaws. by Anonymous+Brave+Guy · · Score: 5, Interesting

      After all, since all terrorists use their real names when flying, it is sure to catch them all.

      The irony of your post is that most of the perpetrators of recent terrorist attacks in the West had valid ID and were, in many cases, citizens of the country they attacked. Even with all the intrusive surveillance, vast databases and draconian security measures, they still got through, just by keeping a low profile until they were ready to attack. Which tells you exactly how much measures like the list we're talking about are actually worth in practice...

      --
      If you disagree, post your argument. (-1, Overrated) isn't your personal censorship tool for views you don't like.
    15. Re:It's _not_ crippled by technical flaws. by secondbase · · Score: 1

      Exactly. Imagine that the technical solution is perfect. Is the system (rules plus technical solution) a net plus or minus?

      If we believe the terrorism experts (if there are really any such), terrorist organizations are recruiting like crazy. How successful are intelligence agencies at getting valid names to add to the list? Even if a counter-terror organization has tumbled to someone, how do they know when to add the name to the no-fly list? Because when they add the name, you have to assume that that person knows they're suspected.

      Viewed as an access control system, it would still have a ridiculous number of failures of both kinds: failure to allow authorized people to fly, and failure to prevent unauthorized people from flying.

      The net result would be money wasted for a false sense of security, money that could be better spent elsewhere.

    16. Re:It's _not_ crippled by technical flaws. by Anonymous Coward · · Score: 0

      Then I guess you are also "cool" with an further extension of our recession as the tourism trade for many parts of the US is shutdown.

    17. Re:It's _not_ crippled by technical flaws. by Chris+Burke · · Score: 2, Interesting

      Not only that, but the list is used for political dissidents too, not just terrorists or dangerous criminals.

      ZOMG NO! The promised that they'd only use DHS/TSA authority to combat terrorism! They pinky swore!

      If you can't trust a government pinky-swear, what can you trust? Man, I'm so disillusioned.

      --

      The enemies of Democracy are
    18. Re:It's _not_ crippled by technical flaws. by Anonymous Coward · · Score: 0

      Do you really think that tourism is going to have a measurable effect on the recession? The fact that our country is going broke and trying to stay afloat by printing more money (thus deflating the currency) tends to dwarf that IMO...

    19. Re:It's _not_ crippled by technical flaws. by elrous0 · · Score: 1

      You would be surprised at the sacrifices I'd be willing to make to keep your snot-nosed brats off my fucking plane.

      --
      SJW: Someone who has run out of real oppression, and has to fake it.
    20. Re:It's _not_ crippled by technical flaws. by Anonymous Coward · · Score: 0

      "ZippyKitty", "ZK", and "DS" have just been entered into the Terror Watch List.

    21. Re:It's _not_ crippled by technical flaws. by R2.0 · · Score: 2, Interesting

      First, let me unequivocally state taht teh No Fly list, in form an execution, is a retarded disaster, causing more problems than it cures.

      However...

      I just read today about a female suicide bomber in Iraq who was detained prior to the explosives going off. She appeared to be drugged, and didn't know exactly what she was doing. Apparently she had just gotten married, and her husband's female relatives fitted her up with the vest and sent her out. She is 14 or 15.

      We can argue about who is to blame about terrorism, and what should be done, but it is becoming increasingly apparent that proxies are being used by terrorists, and those proxies don't fit the regular "profile". I'm not sure what to do about it, and the No Fly list certainly is no help, but saying that we should ignore folks that "don't fit the profile" isn't the answer.

      --
      "As God is my witness, I thought turkeys could fly." A. Carlson
    22. Re:It's _not_ crippled by technical flaws. by daremonai · · Score: 1

      Were you aware that airplanes (larger ones, at least) tend to have bathrooms on them? Or ... wait ... this isn't Lisa Nowak, is it?

    23. Re:It's _not_ crippled by technical flaws. by zonky · · Score: 1

      Given the ANC undertook politically motivated bombings in the 70s/80s, is that surprising?

    24. Re:It's _not_ crippled by technical flaws. by rkanodia · · Score: 1

      I can't. If these people have committed crimes, and we know who they are and where they live, then fucking arrest them already. Otherwise, leave them alone.

    25. Re:It's _not_ crippled by technical flaws. by Ihlosi · · Score: 1
      Were you aware that airplanes (larger ones, at least) tend to have bathrooms on them?

      You don't have a lot of experience with 5 year-olds, or transatlantic flights, I assume ?

      Yes, airplanes have bathrooms. And they have the annoying tendency of being occupied when you need to use them. How long do you trust your 5 year-old to "hold it" ? And physiologically, 5 year-olds may not even be able to control their excretory functions at all times and under all circumstances, especially not highly stressful ones (transatlantic flights qualify here). Yours may be in the lucky group that can, but do you really want to find out 1 hour into your 9 hour flight ?

  9. Normal? by goose-incarnated · · Score: 1

    Well, isn't this normal? We create as many tables as we need during normalisation, and then create views/stored procs/frontend scripts/whatever for the user to use.

    Sounds like they only did the half the job. The other half still needs to be done - I see no "crippling" here.

    --
    I'm a minority race. Save your vitriol for white people.
  10. This is what happens when you go for the lowest by Anonymous Coward · · Score: 0

    Some contractors win by hiring really cheap labor, and then bidding so low that the contractors with decent software engineers and database developers cannot compete. Yeah, I'm looking at you, SAIC!

    The worst part is that the government hasn't figured out that some contractors, with few exceptions, are just routinely bad and should be avoided at all costs.

    1. Re:This is what happens when you go for the lowest by goose-incarnated · · Score: 2, Interesting

      The worst part is that the government hasn't figured out that some contractors, with few exceptions, are just routinely bad and should be avoided at all costs.

      What makes you think they haven't figured it out? There is good money, bad money, corrupt money, etc ... but the best type of money is *my* money, ie money in my hand. Frankly, if I was purchasing something that's of no benefit to me I'd hardly bother with quality, I'd just like to keep as much money in my hands as possible.

      For example *ahem* if I was forced to purchase something (say, furniture) for ex-wife after she moved out, why would I bother spending money on anything more than patio chairs and a plastic table?

      --
      I'm a minority race. Save your vitriol for white people.
    2. Re:This is what happens when you go for the lowest by Tridus · · Score: 1

      Well, some governments have rules about how the bid process works. Specifically, rules that you look at cost. You don't look at the prior history of the contractor, or if its realistic to actually deliver what was promised for the stated price.

      In effect, in order to avoid corruption, the rules were designed to take decision making out of peoples hands as much as possible. The obvious problem there is that in order to pick a more expensive contractor that actually has decent engineers you have to be able to use a decision making process to say "this is worth the extra cost."

      Too bad the media will just see it as cronyism, rather then someone trying to actually get value out of taxpayer dollars by paying for a quality system.

      (I guess at this point its easy to tell that I work for a government, huh?)

      --
      -- "So they told me that using the download page to download something was not something they anticipated." - Bill Gates
    3. Re:This is what happens when you go for the lowest by compro01 · · Score: 1

      Frankly, if I was purchasing something that's of no benefit to me I'd hardly bother with quality, I'd just like to keep as much money in my hands as possible.

      In this case, you get neither quality, nor money kept in your hands.

      --
      upon the advice of my lawyer, i have no sig at this time
  11. Re:Robert'); DROP DATABASE; by Hyppy · · Score: 2, Informative

    In the comic, it's "DROP TABLE." In the summary, it's "DROP DATABASE."

  12. Re:Robert'); DROP DATABASE; by goose-incarnated · · Score: 1

    *cleans spectacles*
    Dammit

    --
    I'm a minority race. Save your vitriol for white people.
  13. Number of tables, no Poorly indexed by ericspinder · · Score: 4, Insightful

    The problem is not the number of tables, but the fact that they are apparently 'poorly indexed'. Table indexes are important, both for the speed of queries, and data integrity.

    --
    The grass is only greener, if you don't take care of your own lawn.
    1. Re:Number of tables, no Poorly indexed by ericspinder · · Score: 4, Insightful

      Wow, so create the indexes then. What's up with you all, this is elementary stuff...a few hours creating the required indexes.

      Fixing or even working on, an application and database developed without proper indexes (and foreign keys) is a real pain in the butt, and fraught with 'danger'.

      You lot are carrying on as if it's Y2K

      Hey, Y2k was 'just' changing a two digit year to a four digit year. By what seems like your standards there shouldn't any 'work' behind that either. Just because it's easy to say, doesn't mean that it's easy to do.

      --
      The grass is only greener, if you don't take care of your own lawn.
    2. Re:Number of tables, no Poorly indexed by I+cant+believe+its+n · · Score: 1

      Considering how the GW administration has acted in recent years, here is a reworked meme for you

      1. Create more efficient watchlist
      2. Profit
      3. ??????????????
      4. ??????????????
      5. ??????????????

      --
      She made the willows dance
    3. Re:Number of tables, no Poorly indexed by Anonymous Coward · · Score: 0

      The problem is not the number of tables

      Sorry, but in no-way are 463 tables good. The article says the data is scattered across 463 tables. The amount of complexity here should be considered an act of terrorism in itself. What I mean to say, is how specific are these tables? eye_color, right_eye_color, left_eye_color, toenail_color, pinkie_toe_color, next_to_pinkie_toe_color

      Sorry, but it sounds broken and exactly what I would expect a government contract to produce.

    4. Re:Number of tables, no Poorly indexed by ericspinder · · Score: 1

      Sorry, but in no-way are 463 tables good.

      Well, I'd say, it's more than just likely that 463 tables is a good indicator of a bad design. However, as I don't know what they are tracking, I couldn't say. There is little chance of us actually knowing that either.

      I'm guessing that what they are trying to do with this database is much more than just a place to put names, but a way to analyze, and perhaps even use it to add people based on their travel companions.Perhaps they have an entire table devoted to 'flights with children' believing that terrorists wouldn't travel with children.

      Also, how many records do you want in a single table? Smaller tables are easier to search, with or without proper indexes, But no matter what there should be indexes, there once was a time when really sharp people could squeeze out a little more performance in specific cases by forgoing the index, but it's just not worth it.

      --
      The grass is only greener, if you don't take care of your own lawn.
    5. Re:Number of tables, no Poorly indexed by mSparks43 · · Score: 1

      Wow, so create the indexes then. What's up with you all, this is elementary stuff. You lot are carrying on as if it's Y2K, not a few hours creating the required indexes.

      the problem is not creating the indexes, the problem for the government is all the consultancy firms have:
      crontab -e 0 0 * * 1 mysql "UPDATE `pricelist` SET 'price'=('price'*2) WHERE `client_site` LIKE '%.gov%'"
      defined on their servers, which is why the going rate for the UK government for a statement like "SELECT c.name, c.postcode FROM child_support" is 5,000GBP

    6. Re:Number of tables, no Poorly indexed by Tablizer · · Score: 1

      The problem is not the number of tables, but the fact that they are apparently 'poorly indexed'. Table indexes are important, both for the speed of queries, and data integrity.

      I don't see why every column, except perhaps large text blocks, couldn't be automatically indexed. Disk space is cheap enough. That is where the technology should be heading. In fact, column-based databases are starting to kind of do that.

      True, updates are slower if every column is indexed, but not necessarily slow enough to prevent timely updates.
         

    7. Re:Number of tables, no Poorly indexed by Firehed · · Score: 1

      I believe the system was designed to track absolutely everything and anything. 463 tables is probably reasonable. 0 indexes remains a problem.

      --
      How are sites slashdotted when nobody reads TFAs?
    8. Re:Number of tables, no Poorly indexed by Anonymous Coward · · Score: 0

      Noone should need more than 640k tables.

    9. Re:Number of tables, no Poorly indexed by SillySlashdotName · · Score: 1

      Indexes are important for query speed.

      Period.

      Full stop.

      A Primary Key, by definition, must be unique and also not null. Not null is easily checked, but Uniqueness is harder. You could scan the entire table to see if the value is already in use, though most modern rdbms systems use an index as it is just so much faster. An index is NOT required.

      A Foreign Key must refer to an entry that is in another table, and an index is the faster way to check that relationship. Again, an index is not required, but is most often used.

      Primary and Foreign Keys are useful for RELATIONAL integrity, but, except for the specific columns defined as keys, do nothing for data integrity.

      If the 'Beatles' table has the Name column as the Primary, and the values of 'George', 'John', 'Paul', and 'Ringo' are contained therein, then a table with a name column defined as a Foreign Key referencing the Name column in the 'Beatles' table will not allow the addition of the name 'Yoko'. It fails the relational integrity rules. However, if I add the name 'Yoko' to the 'Beatles' table, then I can add the name to the other table as it no longer violates the RELATIONAL requirements, although it violates the integrity of the data as 'Yoko' was not one of the Beatles. Having indexes, a Primary key, or a Foreign key did nothing for the data integrity if the wrong names were added in the first place, or validly entered at any point later.

      Continuing the theme, if no other table refers to the name 'Ringo' in the 'Beatles' table, deleting 'Ringo' is a valid operation even though the Names column is a Primary Key of the table. Again, being indexed or being a Primary Key did nothing for the integrity of the data, it only helps enforce referential integrity.

      I work with databases daily (DBA) and some of them in production are specifically set up to have no primary keys or foreign keys. One is over 600GB in size and mission critical, and works just fine without those keys. It does, however, use lots of indexes. Referential integrity is checked in the application that accesses the database, not in the database itself. I would not design things that way, but it is one database I was hired to manage, and it has worked well for us for the last 10 years (since startup).

      I work with Oracle, SQLServer, MUMPS, and some MySQL. In none of them is data integrity predicated on indexing. Referential integrity is often based on an index, but data integrity is not.

      --
      Acts of massive stupidity are almost never covered by warranty. --me.
  14. Re:is this "obvious news day" again? by PC+and+Sony+Fanboy · · Score: 4, Funny

    Because theres' nothing a non-USian can learn in such a "story", except that US-ians are teh morons.

    Hold on, that's not true! In this story, we learn that the terrorist watch list is not only a bad idea, but it is poorly implemented!

  15. The sad part by Evildonald · · Score: 1

    What is sad about this is some security-cleared development company probably charged $20 million to make it.

    1. Re:The sad part by kalirion · · Score: 1

      $20 million? For a government contract job designed to protect us from the terrists? Multiply that by a factor of 5 and you'll probably be closer.

  16. someone doesn't read xkcd by qw0ntum · · Score: 0, Redundant

    You just know Little Bobby Tables is going to grow up to be a terrorist one day.

    --
    'Every story, if continued long enough, ends in death.' --Ernest Hemingway
  17. Re:is this "obvious news day" again? by damn_registrars · · Score: 1, Funny

    Because theres' nothing a non-USian can learn in such a "story", except that US-ians are teh morons.

    Hold on, that's not true! In this story, we learn that the terrorist watch list is not only a bad idea, but it is poorly implemented!

    I think he may have been trying to indicate that we already knew that. Even more so, that pretty much everyone in the world already knew that.

    --
    Damn_registrars has no butt-hole. Damn_registrars has no use for a butt-hole.
  18. Size Comparison by Wellington+Grey · · Score: 5, Informative
    1. Re:Size Comparison by gEvil+(beta) · · Score: 1

      Why am I not surprised that Montana heads up that state list? : p

      --
      This guy's the limit!
    2. Re:Size Comparison by Anonymous Coward · · Score: 0

      http://www.census.gov/main/www/popclock.html

      pff amateurs they're missing over 300 million entries.

      oh well i'm sure they'll fix that soon enough.

    3. Re:Size Comparison by Anonymous Coward · · Score: 0

      Sorry, how many Libraries of Congress is that?

  19. Re:Robert'); DROP DATABASE; by damn_registrars · · Score: 2, Interesting

    In the comic, it's "DROP TABLE." In the summary, it's "DROP DATABASE."

    I wonder if I'm the only SQL noob who had to look up the "drop database" command to see that indeed it is valid?

    Granted, not everyone gets to play with their first database with the rights to even use the 'drop database' command...

    --
    Damn_registrars has no butt-hole. Damn_registrars has no use for a butt-hole.
  20. Quel Surprise ! by OneSmartFellow · · Score: 1

    Foolish, poorly designed, wasteful, corrupt Federal Database application fails to deliver on promises,

    Film at eleven !

  21. *gasp!* by Luke_22 · · Score: 2, Informative

    how are we going to recognise all those terrorists now?
    it may have been a good idea, but the implementation was horrible, come on....

    --
    "I was gratified to be able to answer promptly, and I did. I said I didn't know." -- Mark Twain
  22. Re:is this "obvious news day" again? by wamerocity · · Score: 5, Interesting
    Well let me give you my personal experience about it. I have a relative named "David Hall." Pretty common name huh? Well he was put on the terror watch list years ago because there is a suspicious person named David Hall. He was able to determine that the person they were after was many years older, had a different birthdate, SSN, and even lived in a state he had never been in.

    Since he flew a lot for work, the unfortunate consequence was being FULLY searched EVERY time he went through the airport. He finally called up the TSA once and told them, "How about I just come into your office. If I am your man, ARREST ME! If I'm not, then get me off of this list!" to which they responded, "I'm sorry sir, but it doesn't work that way."

    All in all, it took him over 3 years to finally get his name off. I think the criteria for being on the terror watch list are pretty well summed up here:

    -If you have the same name, initials or hair color as a felon, you're on the list.

    -If you've ever lived withing a 5 mile radius of a felon, you're on the list.

    -If you've ever flown on an airline that a terrorist has ever attacked before, you're on the list. and finally.

    -If airport security is bored, you're on the list.

    Any thoughts?

    --
    "Thank you for using Stop-n-Drop, America's favorite suicide booth since 2008"
  23. I, for one, welcome our meme neutralizing slashdot by OneSmartFellow · · Score: 1

    I, for one, welcome our meme neutralizing slashdot editor-overlords, film at eleven

    There, fixed that for you (which is, in fact, my favourite meme.)

  24. Re:$500 Million? ! by Tridus · · Score: 2, Interesting

    "Miller also alleged that some of the $500 million spent on Railhead already had been improperly used to renovate a facility owned by contractor Boeing."

    Its easy to waste a lot of money when a department that has a virtually unlimited budget outsources with little to no oversight.

    We had similar problems in Canada with the Long Gun Registry, which was a dumb idea to begin with. Then they outsourced it. All told it cost more then $1 billion to set up, and didn't work properly at first. (It does work now, though its still a dumb idea.)

    --
    -- "So they told me that using the download page to download something was not something they anticipated." - Bill Gates
  25. This reminds me of the comic Ahmed Ahmed. by BitterOldGUy · · Score: 1
    Yes that's his real name and he basically takes about 3-4 hours just to board a plane. Anyway he this routine that's hysterical! Apparently, he has the exact same name as someone who's suspected of terrorism in the Middle East.

    Someone seeing the terrorist's name: "Hey, you're that American Comic!"

    Terroists looking very serious and dangerous: "NO! I AM NOT!"

    Person: "Yes you are! You're so funny!"

    Terroist looking even more pissed: "No! Absolutely not!"

    Gotta watch it.

    It runs on PBS every once in a while Ameican Crossroads.

  26. Both by BitterOldGUy · · Score: 5, Interesting

    One could wonder whether the project was set up to adress terrorism OR it was setup to generate media-attention ?

    It was both and then some.

    I'm trying to find the link of the guy who started this BS. It was a private citizen who, IIRC, was the one who was involved with Choicepoint. He wrote some code and his algorithm pulled up most of the 9/11 hijackers and then some. He had some false positives even then, but it was the Government's wet dream and it solved some of their problems (such as that pesky little Constitutional problem of spying on Americans. It's OK if a private company does it -Choicepoint.) and it makes great security theater and it creates some big fat Governemtn contracts for some big fat cats with Government connections.

    Need more caffeine and I'm getting tons of false hits from Google trying to find the cite - it is over 7 years old, ya know.

    1. Re:Both by khope · · Score: 1

      If you Google Henry Asher Choicepoint you'll find the person and companies you seek.

      This link provides a summation of the Seisint to Matrix transformation:

      http://www.democraticunderground.com/discuss/duboard.php?az=view_all&address=364x2280827

      The key things to be noted are the company names. The fact that it's embedded in political criticism may be ignored for our purposes.

  27. Irony? by Anonymous Coward · · Score: 0

    Is it irony that this was the tagline for the article?

    "Kludge, n.: An ill-assorted collection of poorly-matching parts, forming a distressing whole. -- Jackson Granholm, "Datamation""

  28. A way to do security screening by davidwr · · Score: 1

    The "watchlist" should be more like a credit-rating report: It gives the front-line screener a "score" or more likely a redlight-greenlight.

    If there is a redlight, and the person has previously been mis-identified, he can whip out his "get on the plane free" card and the screener swipes the card and fingerprint or scans his face or something. If they match, he's green-lighted.

    Otherwise, he goes to further screening conducted by trained, relatively trustworthy professionals who look at the actual information: This person has visited Pakistan 5 times, his uncle is a member of the Indian Mafia, he's paying cash, etc. They talk to him and make a decision whether to okay him for this flight, this itinerary, or in the case of mistaken identity, photograph or fingerprint him, and give him a "get on the plane free" card.

    In a perfect world, this wouldn't be necessary, but as long as there are people who match my physical description and share my name and birth-date running around trying to blow up planes, I expect to endure the inconvenience of a single delayed flight and having to show and authenticate my "get on the plane free" card every flight. If I ever do start doing things that "fit the profile" like pay cash to flights to Pakistan or marry someone whose family is in organized crime, I expect greater scrutiny.

    There are a few things that should be off-limits though:
    Race, gender, sexual orientation, religion, place of birth, etc. However, country of citizenship and non-trivial, clandestine association with known criminals or terrorists is fair game.

    --
    Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
    1. Re:A way to do security screening by NuclearDog · · Score: 1

      "There are a few things that should be off-limits though:
      Race, gender, sexual orientation, religion, place of birth, etc."

      Err, despite being politically incorrent, using religion and place of birth is probably a good idea.

      How many Buddhists have blown things up? How many Taoists?

      How many Christians? How many Muslims?

      How many people born in Canada have gone abroad to blow things up?

      How many people born in the middle east have gone abroad to blow things up?

      Hell, given that most of the bombings are religiously motivated, and most religions don't tolerate gays, you could probably just clear most homosexuals right off the bat without worry.

      Anyways, political correctness is stupid, blah blah blah.

      ND

      --
      This statement is forty-five characters long.
  29. Just google it. by SuperQ · · Score: 1

    Why not just put up the list on "terroristwatchlist.com" and do site: google searches.. Would probably be much easier and more reliable.

  30. "Technical Flaws" by T.E.D. · · Score: 2, Insightful

    I'm not sure you can call having names on the list matching 1/3 of the population of the earth a "technical flaw".

    What they really need to do to make it useful is get it down to perhaps a couple thousand real concerns.

  31. Re:is this "obvious news day" again? by sheldon · · Score: 5, Funny

    I just put you on the list.

  32. Ethics vs. results? by Shoten · · Score: 2, Interesting

    So, the question that comes to mind for me is this: what if I were a database architecture guru who had been asked to build this system (or its replacement)? At first, my thought is that I'd refuse on grounds of my opposition to the whole thing...but now I'm suddenly wondering if some of the better options did just that, and then it got designed and built by the knob who would take the job. Unlikely, sure, but it's something that I've never thought about before. Is the ethical cost of not doing something like this (that's going to get done anyways one way or another) when you're the right guy for the job potentially higher than the ethical cost of doing it?

    --

    For your security, this post has been encrypted with ROT-13, twice.
    1. Re:Ethics vs. results? by cavePrisoner · · Score: 1

      If the database was poorly implemented because so many people refused to work on it, we should be happy. Imagine if the list was well designed and worked just the way it should have. It would still be an affront to personal liberty and the freedom to travel. Lets face it, the basic idea was silly anyway because terrorists tend to keep low profiles. Now, because it has affected so many innocent people and has needled its way into everyday life, the system will have to get a second look. If it was done right by a guru, the system could stay for decades. It might not last the next presidency at this rate.

    2. Re:Ethics vs. results? by 2short · · Score: 1

      "...it got designed and built by the knob who would take the job. Unlikely, sure... "

      Unlikely? I guarantee it. I personally know a half dozen techie types who have left jobs for government or government contractors because they were tired of working on poorly designed, ultimately pointless projects.

      Oh, I see, you're saying maybe people didn't take it due to moral objections to no fly lists, and it would be better if someone competent did it. Worry not. A perfectly designed and implemented no fly list is just as useless as this cluster, so I can't see any ethical cost of letting it suck.

    3. Re:Ethics vs. results? by ThanatosMinor · · Score: 1

      You should bear in mind that "agrees with you" and "has ethics/morals" are not equivalent concepts. Nor are "agrees with you" and "is a good database programmer."

      It is entirely possible for someone to be smart, a good programmer, have strong morals, and still disagree with you about tactics to the point where they would make different decisions in similar situations.

  33. Same say Osama, some say Usama by hughk · · Score: 1

    First of all, many terrorists have names in a non-Latin alphabet. There are multiple ways to transcribe Arabic and Cyrillic letters to the Latin alphabet.

    Funnily enough there is a lot of software around to do this and not all of it by the CIA. Since the unPatriotic act (actually before it) banks have been supposed to ID check new account holders.

    As far as the other data is concerned, often watch lists contain poor data, and passports may contain inexact data (Chinese gymnasts' DOBs, anyone). You need to have a scoring match, i.e. if the name sort-of matches and the age is within 2 yrs and place of birth is a similar sounding town in the right country, and then flag for a human to review. If there is a positive match using approximation, you really do need a trained person to make any final decision.

    --
    See my journal, I write things there
  34. Hire Google by shareme · · Score: 0

    And our so super smart congress could not figure out how to hire Google to complete the project?

    --
    Fred Grott(aka shareme) http://mobilebytes.wordpress.com
  35. More wasted money! by EvilIntelligence · · Score: 0

    As usual, the government has taken taxpayers' dollars and wasted it. I'm sure somebody at the Justice Department decided that this database should be easy to build ("It's just a list!"), and rather than bring in some professionals to design it, they slapped it together on their own. They probably decided that the data is too sensitive to have an outside data architect design it. Not only is the government messing with private citizen's rights, but they are doing it badly.

    1. Re:More wasted money! by hrvatska · · Score: 4, Interesting

      I'm sure somebody at the Justice Department decided that this database should be easy to build ("It's just a list!"), and rather than bring in some professionals to design it, they slapped it together on their own.

      If you'd bother reading the report, available at http://democrats.science.house.gov/Media/File/Commdocs/Staff_Memo_toBM_terror_watch_8.21.08.pdf, you'd see that Boeing is responsible for the current system. So, yes, a private professional company, employing experienced DBAs is responsible for the current system. If you'd spent much time consulting for private industry you'd know that this sort of thing isn't unique to the government. It's just that it's much more likely to come to light if it's a government project. I've seen many examples in private industry where companies, large and small, end up in the same same bind. This is what happens when rapidly evolving requirements are shoehorned into databases whose original designs could never have anticipated those requirements. Projects like this don't have scope creep so much as scope leap. Software messes that are difficult to migrate almost invariably occur.

    2. Re:More wasted money! by EvilIntelligence · · Score: 0

      So you're saying we should forgive the government because they rushed the job? Or should we hold them accountable for botching up a system that now impacts innocent lives? And I did read the other article that states most of the problems were related to bad contractor management and misused money that was allocated to the project. Defend all you want. This still falls on the government's shoulders!

    3. Re:More wasted money! by hrvatska · · Score: 1

      So you're saying we should forgive the government because they rushed the job? Or should we hold them accountable for botching up a system that now impacts innocent lives?

      That's not what I said, so don't put words in my mouth. I was replying to your statement that professionals weren't involved in the design of the database. You were the one who seemed to think that neither professionals nor private companies were involved. You said "and rather than bring in some professionals to design it, they slapped it together on their own." The report contradicts what you said, and clearly states that Boeing was the contractor. It's difficult to believe that you read the report before hand and made such a statement. I said nothing about accountability or impact, so I don't know why you're trying to pin those on me. Face it, you made unsubstantiated claims, someone called you on it, and now you're trying to cover your ass by putting words in their mouth. Take some responsibility for what you said. How can you go from my statement that these sorts of screw ups happen in all sorts of enterprises to absolving the government of any responsibility?

    4. Re:More wasted money! by EvilIntelligence · · Score: 0

      And you keep pointing back to one small item in my post and trying to refute my comments based on that (although it comes down to semantics. I said "professionals", not somebody who knows how to spell "Oracle".) But all that aside, it's hard to argue that the government still screwed up. I don't care who designed it, whether they drew it on a napkin or brought in an outside consultant. Without proper oversight, it doesn't work. And the one to blame is the one that owns it after its said and done. And you can't compare this to a corporate environment. If a company screws up a project, they lose money. If the government screws up, it messes with innocent people's liberties. Now go cover your own ass.

    5. Re:More wasted money! by hrvatska · · Score: 1

      I was only replying to a specific statement, nothing more. I quoted that statement. But you didn't want to address that, so you put words in my mouth. You launched into a rant implying I didn't want to hold anyone responsible. My point was that requirements and needs outpaced capability, and that this happens in organizations of all types. You seem to want to ascribe an intent to my statements that isn't there. I'm not aware that anything I said related to the type of harm bad software design can cause.

    6. Re:More wasted money! by EvilIntelligence · · Score: 0

      Understood. My point was that while I somewhat agree that requirements outpaced capability, it is still ultimately up to the government to get it right. Even now that they are looking at version 2 of this thing, it STILL looks like its going to be a bigger blunder than version 1, and this time they had time to think about it. All I'm saying is that a company only has dollars to lose, but in this case the risk is on American's liberties. Anybody on that list is a "terrorist". Period. No ifs, ands, or buts, and almost no chance of getting your name off the list. So if getting on that list will ruin your life, I bet you would want to make damn sure that the government is capable of responsibly managing that list. So far it has done a terrible job. And version 2 doesn't look to be much better!

  36. Are these names on the list... by clickety6 · · Score: 4, Funny

    http://video.aol.com/video-detail/snl-funny-terrorist-names/4040669571

    "M'balz es-Hari"
    "Haid D'Salaami"
    "Mustaf Herod Apyur Poupr"
    "Usuqa M'diq"
    "Hous bin Phartin"
    "I'zheet m'drawrz"

    --
    ----------------------------------- My Other Sig Is Hilarious -----------------------------------
    1. Re:Are these names on the list... by HowlsAtFullMoons · · Score: 1

      Even funnier would be if someone in the current administration is injected into the list... anyone want to try it? I'm sure full names and birth dates are freely available on the web. "Mr. Cheney, you'll have to come with us."

  37. No-Fly List .. by rs232 · · Score: 1

    What laws are invoked by the DHS in putting people onto this list and not allowing them to fly. I mean there is a law, isn't there. Now how about getting onto a no-water-boarding list .. :)

    --
    davecb5620@gmail.com
  38. Re:$500 Million? ! by Anonymous Coward · · Score: 0

    A good start is usually hiring IBM, or one of several other large 'service' firms.

    IBM specifically does some good things lately, but if you're truly looking to get serviced, the big consulting companies can help you out.

    Hiring relatives also generally helps.

  39. Time to reverse engineer the No-Fly List by Anonymous Coward · · Score: 0

    I mean how hard would it be to take all of the news stories about these poor Joes who for no fault of their own end up on the no-fly list.

    Then publish the daylight out of the list and force some accountability for the responsibility.

  40. The lists. by Anonymous Coward · · Score: 4, Interesting

    A friend of mine is the security manager for a fairly large company. They have offices all over the world and business in many countries. He tells me that there are at least three "terrorist" lists. The EU list, the UN list and the US list. They are listed from poor to really shitty.
    If a person or a company is on either of these lists then they aren't allowed to do business with them as they are suspected terrorists r terrorist backers.
    The US list can contain things like "Muhammad, Saudi Arabia", or "Iqbal, Pakistan".

    The lists are of no use to them and impossible to follow, but they are required to do so or risk sanctions from EU or the US.

    Happy times!

  41. upgrade is... by Anonymous Coward · · Score: 0
    ...worse than the original? So it's a Microsoft product?

    Ok ouch ok I'll shut up and sit ouch in a ouch stop it! corner now.

  42. Re:is this "obvious news day" again? by Anonymous Coward · · Score: 2, Interesting

    This happened to one of the guys at the company I work at, who has a pretty common name and flew at least once a month. Every single time, he'ld be datained a couple of hours.

    It took several years and several thousand dollars of lawyer fees to fix (company paid, I assume, since they needed him to travel).

  43. Polymorphic names! by mlush · · Score: 1

    If your a terrorist please stop reading here! It would not do at all for this information to get into terrorist hands!

    This story says it's possible to bypass the list by using a legal variant of your name ie Capt. James Robinson said he has learned that "Jim Robinson" and "J.K. Robinson" are not on the list.

  44. Oh hey by kjzk · · Score: 1

    I want to be on the terrorist watch list.

    1. Re:Oh hey by pluther · · Score: 4, Interesting

      I want to be on the terrorist watch list.

      I was for a while. I apparently got taken off of it a few months before they publicly admitted its existence.

      It was fun. During my time on it, I flew 37 times. I got "randomly" selected for the extra search all 37 times. I ran the numbers for a TSA agent once who insisted it was purely random, and came up with something like one in a few hundred quintillion chance of that actually happening if it was truly random. Still failed to convince the agent it was not, though.

      It was great when I had to fly out of LAX. Unlike most airports, that one had a special line for the special searches. So, instead of standing in line for an hour and a half to walk through the metal detector in ten seconds like most people, I waited in line for five minutes, then spent another 2-3 getting searched.

      Most airports made me wait in line with the non-terrorists, though.

      I'm still not sure what it was that got me on the list, whether it was carrying a knife onto the plane, twice, or the rather obvious joke I made while taking off my shoes. ("It's a good thing that that guy didn't put the bomb in his underwear").

      Did you know that it's illegal to even say the word "bomb" in an airport? TSA explained this to me at great length that day.

      (The knife, by the way, was a cub scout pocket knife, and it had already been through three searches without being noticed. Four if you count my checking the bag before I left to make sure I didn't leave anything in it.)

      Anyway, at some point I got dropped off the list. I don't know why. Maybe it got too full, or maybe they decided that after 37 flights I wasn't a threat, or perhaps they were cleaning up the database before they publicly admitted its existence.

      Before I dropped off of it, though, I purchased one-way tickets for a couple of friends who'd helped me move to another state. (We drove out, they flew back). They've both been pulled over for the extra "random" searches now, too.

      --
      If the masses can keep you down, you're not the Ubermensch.
  45. Re:is this "obvious news day" again? by Krinsath · · Score: 5, Interesting
    Mr. Stewart and his Daily Show summarized it well when the watch list hit 1,000,000 names:

    "If you want to know if you're on the list just visit the website and start scrolling and by the time you get to the bottom you'll be on it."

    My uncle had a similar experience to your relative when he was returning from Jamaica (he was there for his anniversary). He had the exact name (middle too) of a wanted felon and was detained in customs for hours before they finally figured out he was from the other side of the country as his evil name-twin. As he pointed out at the time, "If I was the person they were looking for, would I be quite so stupid as to travel under my real name with genuine IDs in my name?" It's not like the guy was just "suspected"...he was pretty much a known criminal/fugitive.

  46. technical flaws? by dongola7 · · Score: 1

    "Technical flaws"? I think "technical flaws" are the least of their concerns. The whole system has been marred with logical flaws from its inception.

    Arguing the system is hampered by database problems is the equivalent of building a car without an engine and then complaining it doesn't run because the tires are the wrong size.

    1. Re:technical flaws? by T3Tech · · Score: 1

      shhh.. The logical flaws contributed to the technical flaws, but there's no money in blaming the logical flaws, now hush.

      --
      Of course I didn't RTFA... why would I do that? You really are new here aren't you? Don't let my UID fool you.
  47. Reminds me... by Anonymous Coward · · Score: 0

    George Carlin rant on the general topic of airport security...

    http://www.youtube.com/watch?v=KBxzvSbGJ2w

    " All this airport security the searches, the screenings, the cameras, the questions. Its just one more way to reduce your liberty and remind you that they can fuck with you anytime they want."

  48. Data integrity? by SuperKendall · · Score: 2, Interesting

    Please do explain how data INTEGRETY is affected by the way you define indexes, as opposed to the ways in which you have denormalized tables for performance.

    From the article, it would be good to see an explanation of just what they mean by "poorly indexed". That seems much more likely to refer to the need for more indexes for faster search results, rather than indexes done badly...

    --
    "There is more worth loving than we have strength to love." - Brian Jay Stanley
    1. Re:Data integrity? by Fweeky · · Score: 1

      Please do explain how data INTEGRETY is affected by the way you define indexes

      You don't think a database might lose some degree of integrity by lacking primary, foreign and unique key indexes?

    2. Re:Data integrity? by moore.dustin · · Score: 2, Informative

      Nice dodge. That is not what he is saying.

      A table has to have a primary key and foreign/unique columns are both keys and as such, double as indexes. What the GP was talking about was how would actual indexes affect data integrity and the answer is, they don't. Having or not having indexes set up in your database will only help with the speed of queries and has nothing to do with data integrity. For example, if you are calling Name, DOB, and Address anytime you scan for a match, if you do not have an index for that query it would take much longer than without one. It goes for just about any query you call with regularity - you want an index set up to make it quicker. Now having too many indexes you don't use could lead to excess overhead and actually slow things down that way, which is perhaps with TFA meant when it mentioned indexes.

    3. Re:Data integrity? by claytonjr · · Score: 1

      Please do explain how data INTEGRETY is affected by the way you define indexes

      You don't think a database might lose some degree of integrity by lacking primary, foreign and unique key indexes?

      Maybe I'm reading this wrong. But, an index is not the same as a pk or a fk.

      Integrity is determined by pk and fk and the type of relationships that they hold.

      An index is handy for making speedy queries.

      Also, 460 tables has little to do with the poor design, if the designers went a little over-board with data normalization. I doubt that its normalized because it was "poorly indexed." (I don't even know what that means.)

      However, it could be several tables that all hold similar data, yet they *could* be house in a master table. If that is the case, thats just bad design.

    4. Re:Data integrity? by thePowerOfGrayskull · · Score: 1

      Having the database enforce RI requires foreign and primary key indices. WHile this isn't the only way to enforce integrity (your applications can do it too), it's nearly always going to be the most efficient.

    5. Re:Data integrity? by DragonWriter · · Score: 0

      Maybe I'm reading this wrong. But, an index is not the same as a pk or a fk.

      A primary key is both a constraint and an index, at least in every RDBMS I've ever seen (it is, IIRC, in the standard semantically equivalent to UNIQUE NOT NULL, which is an index that implies a constraint and a second constraint, though SQLite, again IIRC, treats it only as UNIQUE.)

      A poorly indexed table may or may not have a PK (it could be poorly indexed and still have a PK), but not having a PK would be one example of a poorly-indexed table.

  49. Re:is this "obvious news day" again? by Anonymous Coward · · Score: 1, Insightful

    Mods mod this flamebait? Bad bad bad, parent is merely explaining the post of ggp. Valid mod options: Informative, Redundant.

  50. Might be beyond the reach of MS-Access by tjstork · · Score: 0

    You know, since it is the government, I think we should probably let them know that sending around DVD's with Terrorists.mdb is probably not the thing to do. I wonder what will happen when they have more than 2gb of suspects?

    --
    This is my sig.
  51. Re:Robert'); DROP DATABASE; by kalirion · · Score: 4, Funny

    I wonder if I'm the only SQL noob who had to look up the "drop database" command to see that indeed it is valid?

    Why look it up when you can test it out for yourself?

  52. We already have a list... by Anonymous Coward · · Score: 0

    Its called an arrest warrant. This other thing is an extra-constitutional fallacy.

  53. Amazing... by EddyPearson · · Score: 1

    The incompetance of US Government contractors is nothing short of astonishing.

    How has this been allowed to happen? From the little info I've managed to glean from TFA it seems the schema has been designed by somebody who doesn't know even the rudiments of database design.

    How did somebody like this get such a lucrative contract? Is there no accountability in your Gov?

    At best it seems the Government gives these contracts out at random, without even the most basic vetting procedures ("Does your company have anything to do with software design?"). A more distrustful person might suggest there is something more sinister going on...

    --
    You feel sleepy. Close your eyes. The opinions stated above are yours. You cannot imagine why you ever felt otherwise.
    1. Re:Amazing... by MarkvW · · Score: 2, Interesting

      Hope these thoughts are useful:

      (1) Contractors bid to get the contract. The lowest bidder able to perform gets the contract. They'll provide to exact spec, and not a bit more. They make their REAL money with change orders. Change orders are not bid out. Contemplate this.

      (2) Government specs can suck. This is quite understandable, because the people who want to use the software may not know how the software works. This invites the change orders described above. (When a consultant is hired to write the specs, you magnify the problems outlined in (3) and (4).)

      (3) At the outset, contractors usually know nothing about the nuts and bolts of the government business that they are writing software for. The BUSY government people have to teach them. Power and control issues also play a role here. Details can easily get lost.

      (4) Interactions between the government and the contractor become really intertwined. How would the government ever prove to a jury that any defect is the contractor's fault when the final product is an inseverably intermixed product of both the contractor and the government?

    2. Re:Amazing... by EddyPearson · · Score: 1

      All valid points, but unrelated to this issue.

      The people hired to do this projet should NEVER have been allowed to bid, they obviously don't have the developers capable of creating even the most basic DB design to the required standard.

      The problems with the DB don't appear to be ones born through poor speccing, it is incompetance. There is never an excuse for un-indexed tables.

      --
      You feel sleepy. Close your eyes. The opinions stated above are yours. You cannot imagine why you ever felt otherwise.
    3. Re:Amazing... by MarkvW · · Score: 1

      "Should NEVER have been allowed to bid?" Everybody gets to bid in America. You can't keep people from bidding--that would be called corruption (and would invite an all expense paid stay in la casa grande).

      Your insight into the qualifications of the application database developer are based on 20/20 hindsight. From the government's perspective, at the front end of the deal, how would you suggest the equal and economic evaluation of every single contractor that bids for the job? Good luck.

      There is not enough information provided in the article to support your last point. I can easily see how indexing problems could be a problem that arose somewhere between the government and the contractor. If the relationships between the tables are not effectively expressed to the contractor, how is the contractor going to know how to relate those tables by index number?

      Your point about unindexed tables is trivial. Anybody can put an index on a table after the fact. I think that the article was relating to a failure to provide adequate secondary, tertiary indexing, etc.

  54. Since I've had some time to digest this story.... by OneSmartFellow · · Score: 1

    ...I thought I might share my train of thought:

    1.) Why are all Federal Government databases a complete mess ?

    2.) Isn't it actually a good thing that all Federal Government databases a complete mess ?

    3.) It's possible that somebody is ensuring that all Federal Government databases are a complete mess ?

    4.) I for one welcome our new Federal Government Database Overlords !

  55. Re:is this "obvious news day" again? by bonehead · · Score: 5, Insightful

    -If you have the same name, initials or hair color as a felon, you're on the list.

    -If you've ever lived withing a 5 mile radius of a felon, you're on the list.

    ................

    Any thoughts?

    It takes more than just being a felon.

    I have a felony conviction (non-violent). I've flown 3 times since being discharged from parole and haven't run into any difficulties at the airports.

    There are many different types of felonies. Many felons are, indeed, very very bad people. However, I personally know several convicted felons who I would trust to babysit my children, or loan money to. Most of the people I know in that category got their felony convictions as a result of substance abuse issues and have since cleaned up their act.

    Just wanted to point out that having a felony conviction doesn't necessarily mean somebody is an evil person.

  56. Terrorism measures and the TSA by DesScorp · · Score: 5, Insightful

    One could wonder whether the project was set up to adress terrorism OR it was setup to generate media-attention ?

    I work at an airport, in administration, and trust me when I say this has very little to do with dark political conspiracies, and a lot to do with the government's haste to show they were "doing something" after 9/11. This project was quickly rushed into service, and has been widely reviled by airports and airport police departments across the country. And other similar measures... the current background check process for giving access to secured areas, and the very creation of TSA itself, were all measures to reassure the public that something was getting done. The problem is that government enterprises like these tend to become bipartisan boondoggles, with every state and major city wanting a piece of the political and funding action these things entail. Federal agencies tend to become monsters that need to justify their own existence by constant growth. TSA in particular is quickly becoming a large federal law enforcement agency, not just a baggage security team. When they were first set up, several of their nascent teams moved and basically tried to take control of several airports... I know of one major southern airport where they simply showed up one day, declared that a series of offices now belonged to them, and when the airport director came down to see what was going on, they tried to have him arrested by his own police force for "violating federal facilities". Anyone that works with AAAE members (airport execs group) knows what incident I'm talking about.

    Did you know that TSA will now be issued police-like blue uniforms, with metal badges, just like cops? Airport police and the metropolitan police departments that supplement them just looooove that, and there's the inevitable talk of actually giving said TSA agents firearms. Unlike some other police departments, TSA agents are being encouraged to wear their uniforms and badges in their spare time, in order to enhance the agency's "visibility" to the public. There are already jokes that TSA SWAT teams are inevitable at airports. The problem is, the laughter doesn't last very long when we realize that the way things are going, that might not be a joke so much as a prediction of the future.

    --
    Life is hard, and the world is cruel
    1. Re:Terrorism measures and the TSA by Chris+Burke · · Score: 2, Insightful

      I work at an airport, in administration, and trust me when I say this has very little to do with dark political conspiracies, and a lot to do with the government's haste to show they were "doing something" after 9/11.

      I didn't need an airport administrator to tell me that this is all just Security Theater, but thanks for the confirmation just the same.

      Did you know that TSA will now be issued police-like blue uniforms, with metal badges, just like cops? Airport police and the metropolitan police departments that supplement them just looooove that, and there's the inevitable talk of actually giving said TSA agents firearms. Unlike some other police departments, TSA agents are being encouraged to wear their uniforms and badges in their spare time, in order to enhance the agency's "visibility" to the public.

      Oh goody, we can have our very own Security Theater Troupe performing for us, only with non-voluntary audience participation!

      --

      The enemies of Democracy are
    2. Re:Terrorism measures and the TSA by stubob · · Score: 1

      Well sure, there's nothing in the name that only requires them in airports. Think about TSA checkpoints at every bus station, train station, metro stop, border crossing and toll booth. How big is that budget? All for your safety, of course.

      --
      Planning to be moderated ± 1: Bad Pun.
  57. Re:is this "obvious news day" again? by TravisO · · Score: 3, Funny

    So I'm guessing their Access database just looks like this:

    ID | First | Last

    I guess they just took KISS way too far.

  58. Problems by trum4n · · Score: 1

    The only problem with the watch list is my buddy Bob Smith. Real guy, accountant, nice Audi. He's on the list. He flies about 70 times a year for his job. Every time it takes him about 4hours to get through security. It's things like this that cause people to snap and become terrorists.

    1. Re:Problems by Shados · · Score: 1

      With airports and air carriers being the way they currently are, that 4 hours merely gives him something to do while he waits for his plane that is inevitably late.

  59. Re:$500 Million? ! by TravisO · · Score: 1

    They should have just hired TicketMaster, as absurd as it sounds, they're already experts in the field. Although you'd have to pay an extra $8 to get your ticket printed right then at the train station.

  60. Popular Front for the Liberation of Palestine? by BancBoy · · Score: 2, Funny

    Splitters!

    --
    [UID-HeinzIntel]
  61. Investigative database problems. by Animats · · Score: 1

    The FBI ran into a similar problem with their case automation system. Investigative databases contain items like "informant 345 reports white male, 20s, tan windbreaker, called "Harry" was seen in a bar on 4th street talking about a robbery at 10th and Main last week". How do you utilize a few million items like that? The usual approach is to start with fully-identified people and work outward, but this leads to the traditional cop vice of finding info that reinforces preconceptions. True correlation of loosely identified items is tough, although there are similarity metrics which can help.

    Worse, the terrorism people have to deal with names from cultures that have low name uniqueness.

  62. Re:is this "obvious news day" again? by SQL+Error · · Score: 2, Funny

    I'm sure he'll not be missed.

  63. Little Billy by BancBoy · · Score: 1

    *wooosh*

    You're right! They do get cuter when they're small.

    --
    [UID-HeinzIntel]
  64. Why complain about the technical flaws? by Anonymous Coward · · Score: 0

    After all, it's also crippled by moral and logical flaws.

  65. Re:is this "obvious news day" again? by Pontiac · · Score: 5, Informative

    My co-workers 2 year old Daughter was on the list. It took 4 years to get her name removed.

    It must have been her evil plot to drop a bomb in her diaper.

    --
    If you think it's expensive to hire a professional to do the job, wait until you hire an amateur. --Red Adair
  66. Re:is this "obvious news day" again? by PC+and+Sony+Fanboy · · Score: 4, Funny

    Just wanted to point out that having a felony conviction doesn't necessarily mean somebody is an evil person.

    ... nah, it just means that they didn't have a very good lawyer.

  67. Re:Number of tables (addendum) by Tablizer · · Score: 1

    I should point out that meta tables are not "wide" tables by themselves. It's also possible to use wide tables without meta (attribute) tables, so I suppose that's a third option. But generally for a larger system, those who want to avoid a large quantity of tables will use a combination of wide tables for attributes that are stable and common and meta(s) table for attributes and/or components that change often or are rare.
           

  68. Large Systems are Hard by Tablizer · · Score: 1

    Rather than bash government, to be fair, large systems are difficult to get right regardless of whether its public or private. Private companies also have big messes. However, they are closed such that outsiders generally don't hear about it. Or else they fail because of their mess and disappear. Economic darwinism thus plays a role for private companies and companies with bad systems eventually fade into oblivion or get bought out by companies with better systems.

    But, generally such trial-and-error is not an option for public agencies. They are expected to get it right the first time. I think its realistic to let them get something up and running that half-works, and then apply those lessons to a second generation design. Trial-and-error is sometimes a necessary evil.
                   

    1. Re:Large Systems are Hard by Free+the+Cowards · · Score: 3, Informative

      Sorry, you're not allowed to create an unnecessary and disruptive large system and then pull the excuse that "large systems are hard!" when it fails badly.

      If DHS created a program with a goal of kicking every single American citizen square in the nuts, and that program ended up being fraught with budget overruns, cases of mistaken identity, citizens getting kicked square in the nuts twice, some citizens not getting kicked square in the nuts at all, and people complained about the system, would you stand up and say "don't criticize them too much, large systems are hard"?

      A sane person should say that TSA does a pointless job in a worthless manner, and this, not the fact that it's a "large system", is the root of the problem.

      --
      If you mod me Overrated, you are admitting that you have no penis.
    2. Re:Large Systems are Hard by IceCreamGuy · · Score: 2, Insightful

      I think your comment is pretty irrelevant since the TSA has only gotten worse since it's inception. Not only has it made mistakes, but it has expanded and pursued its mistakes to a point where, like the GP implied, we have to take a step back and say "this has gotten a little out of control."

    3. Re:Large Systems are Hard by Citizen+of+Earth · · Score: 1

      goal of kicking every single American citizen square in the nuts, and that program ended up being fraught with budget overruns, cases of mistaken identity, citizens getting kicked square in the nuts twice, some citizens not getting kicked square in the nuts at all

      This seems like an especially good metaphor considering that the root goal isn't even theoretically possible.

    4. Re:Large Systems are Hard by Free+the+Cowards · · Score: 1

      I'm ashamed to say that I only noticed that problem after I posted the comment. But I agree that however accidental it is, it does line up nicely with what's currently happening.

      --
      If you mod me Overrated, you are admitting that you have no penis.
    5. Re:Large Systems are Hard by Tablizer · · Score: 1

      I was commenting on it from a technology standpoint, not from a political needs standpoint. I agree that our constitution has been kicked in the kabonzo's, but that's another subject.

    6. Re:Large Systems are Hard by Sentry21 · · Score: 1

      would you stand up and say "don't criticize them too much, large systems are hard"?

      I might, unless I'd managed to slip through the cracks thusfar.

    7. Re:Large Systems are Hard by stubob · · Score: 1

      You could make that argument about pretty much every government agency. That's the nature of government.

      --
      Planning to be moderated ± 1: Bad Pun.
  69. Re:is this "obvious news day" again? by sjames · · Score: 2, Funny

    They also thought there was a comma and that it was hiring advice: "Keep it simple, stupid".

  70. Re:is this "obvious news day" again? by Anonymous Coward · · Score: 0

    Just wanted to point out that having a felony conviction doesn't necessarily mean somebody is an evil person.

    Of course not. It's not the conviction that makes you a bad person, it's the felony you committed that makes you a bad person.

  71. Re:Robert'); DROP DATABASE; by mweather · · Score: 1

    I thought the first thing you learned with SQL was creating and deleting databases. I've never met anyone who learned the former, but not the latter. You must have a TON of databases on your system.

  72. HOMICIDE Bombers!!! by Anonymous Coward · · Score: 0

    It's not SUICIDE bombers, it's HOMICIDE bombers! Just watch Fox news! They know that unlike suicide bombers who die when they blow themselves and everyone around them into little pieces, these eveil terrorsists didn't commit suicide. So they can kill again and again and again!!!!

  73. Easy solution by morgauo · · Score: 1

    Stick the server in a burlap sack and pour water over it...

  74. Re:is this "obvious news day" again? by thePowerOfGrayskull · · Score: 1

    Wait - she was added at the age of -2?!

    /me is suddenly very, very frightened.

  75. Maybe by christoofar · · Score: 1, Insightful

    they should stop using MSAccess.

  76. Re:is this "obvious news day" again? by Anonymous Coward · · Score: 0

    Haven't you heard? You've gotta watch out for dirty bombs that the terrorists are making. You never know when one of them is going to try to sneak one onto the airplane.

  77. Re:is this "obvious news day" again? by Chris+Burke · · Score: 2, Interesting

    Well let me give you my personal experience about it. I have a relative named "David Hall." Pretty common name huh? Well he was put on the terror watch list years ago because there is a suspicious person named David Hall. He was able to determine that the person they were after was many years older, had a different birthdate, SSN, and even lived in a state he had never been in.

    Since he flew a lot for work, the unfortunate consequence was being FULLY searched EVERY time he went through the airport. He finally called up the TSA once and told them, "How about I just come into your office. If I am your man, ARREST ME! If I'm not, then get me off of this list!" to which they responded, "I'm sorry sir, but it doesn't work that way."

    Yeah, I was on the watch list myself, in some relatively minor category I guess. "Chris Burke" isn't exactly an uncommon name. Despite not being hassled by security since a few months after 9/11 (obviously I fell into some random Scary Hippie profile that they grew enough of a clue to stop using), suddenly I started getting the super-search every time I went through security, and couldn't use self check-in, and other minor inconveniences.

    I found out when I asked an airline ticketing clerk what was up. She said there must be an evil Chris Burke out there (hey, I thought that was me!), made a phone call, said it was all cleared up, and after getting the super-MEGA-search going through security, I haven't had any problem since.

    So not nearly as annoying as the cases where it takes years to get off the list and requires some act of God -- I guess there must be different levels of watch list that you can be arbitrarily placed in -- but still stupid.

    --

    The enemies of Democracy are
  78. Re:is this "obvious news day" again? by mounthood · · Score: 2, Funny

    I just put you on the list.

    Yea, but did you add his name to all 463 tables?

    --
    tomorrow who's gonna fuss
  79. 463 tables? by pluther · · Score: 2, Interesting

    Having designed a couple of poorly-designed databases myself, I can understand how this can happen.

    What I don't understand is why the hell there are 463 tables in this thing?

    I mean, what all information do they need in there? Names, maybe a list of known addresses, social security numbers, phone numbers, other identifying information?

    Perhaps a reason why they're on the watchlist at all? List of evidence putting them there? Political activities they've been involved in, letters to congress they've written? Types of books they've checked out of the library?

    Maybe a list of all flights they've taken, and notes on how much trouble they've given to the TSA people when going through the checkpoints?

    OK, that's three tables. What on earth are the other 460 for??

    --
    If the masses can keep you down, you're not the Ubermensch.
    1. Re:463 tables? by Spudds · · Score: 1

      So let me sum up:
      *Names
      *list of known addresses
      *social security numbers
      *phone numbers
      *other identifying information
      *a reason why they're on the watchlist
      *List of evidence putting them there
      *Political activities they've been involved in
      *letters to congress they've written
      *Types of books they've checked out of the library
      *all flights they've taken
      *notes on how much trouble they've given to the TSA people when going through the checkpoints

      and you think:

      OK, that's three tables.

      Have you ever BUILT an information system/database before???

      Having designed a couple of poorly-designed databases myself

      ..oh

      Please hand in your geek card. You're done.

    2. Re:463 tables? by pluther · · Score: 1

      Have you ever BUILT an information system/database before???

      No.

      I mean, not unless MS Access counts.

      OK, so so far, I've been down-modded, and insulted (sort of), but nobody's actually answered the question at all.

      Even if you assume every data type has its own table (would it really?)that's still only a couple of dozen tables. Why are there 463? What possible information could be in this database that makes it so big?

      For example, some things we know are not in the database are:

      - Date of birth (or else a five-year-old would not have been confused with a 35-year old with a similar name)

      - Social Security Number (or else it wouldn't keep confusing people with similar names)

      - Previous flight history (or else it would figure out that terrorists don't fly twice a week for months on end)

      - Employment information (or else it wouldn't have caught members of congress)

      So what is in this database? Basically it's a list of names, with very little additional information on each. What is it that uses 463 tables?

      --
      If the masses can keep you down, you're not the Ubermensch.
  80. Re:is this "obvious news day" again? by Z00L00K · · Score: 1

    Just make sure that we add a few names to the list, George Bush, Dick Cheney etc... And we'll see what happens!

    --
    If builders built buildings the way programmers wrote programs, then the first woodpecker would destroy civilization.
  81. Re:is this "obvious news day" again? by tgd · · Score: 1

    Just wanted to point out that having a felony conviction doesn't necessarily mean somebody is an evil person.

    Yeah, thats pretty much what I'd expect a felon to say...

    (yes I'm kidding)

  82. Re:is this "obvious news day" again? by Anonymous Coward · · Score: 0

    "I'm a relatively respectable citizen -- a multiple felon, perhaps, but certainly not dangerous."

    - Raoul Duke

  83. xkcd rules by juliohm · · Score: 0

    period

    --
    Julio Henrique Morimoto juliohm@gmail.com
  84. Yes, criminals are that stupid. by cat_jesus · · Score: 1

    "If I was the person they were looking for, would I be quite so stupid as to travel under my real name with genuine IDs in my name?"

    Criminals have been known to return to the scene of a crime to fetch their dropped wallet, write "This is a bank robbery, give me all of your money" on the backs of their own bills, checks, etc... They have even been known to withdraw money from their own bank account before robbing said bank. Some criminals are stupid enough to call the police for other reasons and don't understand that the cops will identify and arrest them once they show up.

    Criminals are largely stupid. Most people realize that the amount of effort and planning it takes to be a successful criminal can be used to legitimately make money with far less risk.

    1. Re:Yes, criminals are that stupid. by Krinsath · · Score: 1

      Ah, but here's the part you're overlooking, the police CAUGHT them. This is someone who had, to that date, eluded the police (I don't know their current status). Those who can do that tend to be cut from a different cloth than the bumbling ones you refer to.

      Just like it's possible for an IT admin to set up 463 poorly indexed tables in a database to cock everything up is certainly a possibility and the "dumb" ones might very well end up doing such a thing. However, most admins employed by database companies would never make such a basic mistake...otherwise they would have been fired a long time ago and nobody would be hiring them. Just like the dumb criminals get caught and the police stop looking for them.

  85. Re:is this "obvious news day" again? by Anonymous Coward · · Score: 0

    Nothing at all! You think they use 'our' transportation systems? Why, that's for commoners!

  86. Who built it? by PPH · · Score: 2, Interesting

    Was this built in-house or by a contractor?

    I ask, because I've been involved with government contracting work, specifically for the FAA. One aspect of the relationship I've repeatedly seen is private business' efforts to cripple the in-house engineering and software expertise of government agencies they do business with. We'd hire their key people away and call the legislators we owned to get funding for in-house projects killed just to drive the work out to us. Once the agency fell on its face a few times, political pressure would grow to quit wasting money and contract it out. To us. For big money.

    Back when I was still in that biz, the Australian government's equivalent of the FAA, CASA, had undertaken a project to build some advanced air traffic control systems in-house. The attitude of our management was rage. "If this had been the United States, we'd have had them shut down."

    If you need work done fast, you need people who can do it on the inside. Even if it goes out for contract, you've got to get the requirements written down correctly.

    --
    Have gnu, will travel.
  87. MS-SQL only! by Anonymous Coward · · Score: 0

    > Actually, I think the SQL 2012 standard only supports the short form, "SADDAMIZE TABLE".

    Isn't that an MS-SQL-only extension? I'm sure that I've seen it used on both Microsoft Access & Microsoft SQL Server...

  88. you've been warned by mistahkurtz · · Score: 1

    here about the dangers of posting a link to xkcd on /.

    shame on you. I missed 1 meeting, half of lunch, and didn't do anything all morning.

    --
    not only is time travel possible, it's irrelevant.
  89. Re:Robert'); DROP DATABASE; by Antique+Geekmeister · · Score: 1

    Some people never, ever, ever, delete their email, either.

  90. Re:is this "obvious news day" again? by e-scetic · · Score: 0

    If you're right and "terrorist" == "wanted felon" then you Americans are in deep shit.

    I suspect you're somewhat right, though. I suspect people are being added by virtue of their "suspicious" beliefs or their participation in civic protests. There have been many stories on Slashdot about how police databases are not equipped to handle protesters or political speech - since they're set up only to record crimes, so police have been incorrectly designating civilians as "terrorists."

    David Hall was probably someone arrested in a protest somewhere, or who gave a political speech the authorities didn't agree with.

  91. Re:is this "obvious news day" again? by terjeber · · Score: 1

    You forgot

    - if you are the same species, you are on the list

    The government is a bunch of morons elected mainly by retards (that is us, the people). They hire brainless idiots to "run" the country and in the process totally screw it up. Government never does anything worth while. Oh, and please note, that goes for any company older than 10 years with more than 2,000 employees. Such companies evolve in exactly the same manner as government does.

    It is beyond belief that people in the world actually think that the retards who try to run this country would be able to pull off something like a 9/11 "coup". Government employees are lucky if they put their pants on the right way every morning.

  92. Re:Since I've had some time to digest this story.. by Anonymous Coward · · Score: 0

    Its simple ... talented DBAs don't want to work for peanuts, which is why they don't work for the government.

  93. Suuuuuuure..... by raehl · · Score: 1

    Just wanted to point out that having a felony conviction doesn't necessarily mean somebody is an evil person.

    That's exactly what an evil person would say.

  94. So, it doesn't work... by John+Hasler · · Score: 2, Insightful

    ...and yet despite it's failure to protect us, we have not been attacked.

    Perhaps, just perhaps, this is evidence that it is not necessary?

    --
    Warning: this article may contain humor, sarcasm, parody, and perhaps even irony. Read at your own risk.
  95. Re:is this "obvious news day" again? by Anonymous Coward · · Score: 0

    I'm a felon, and I'm not on the list.

    How Ironic is that?

  96. Re:is this "obvious news day" again? by element-o.p. · · Score: 3, Interesting

    ...when the watch list hit 1,000,000 names...

    Holy crap...that's like one in three hundred Americans on the watch list. Think about that for a second. This means on any given airliner, chances are the government considers at least one of your fellow passengers a person of interest.

    Me thinks the signal to noise ratio of this list is mighty, mighty low (not that I expected much, but still, 1:300).

    --
    MCSE? No, sir...I don't do Windows. Yes, I am an idealist. What's your point?
  97. Re:is this "obvious news day" again? by element-o.p. · · Score: 1

    Ugh...a dirty bomb. Those are the worst!

    --
    MCSE? No, sir...I don't do Windows. Yes, I am an idealist. What's your point?
  98. Re:Since I've had some time to digest this story.. by OneSmartFellow · · Score: 1

    Sure, but there's a huge difference between talented and incompetent. Surely this database can't be so complicated that it requires almost 500 tables - I bet I could design a database for the Encyclopaedia Britannica with fewer tables than that

  99. Terrorist Congressmen by natoochtoniket · · Score: 1

    The way to repeal this monster is to insert the names of all of our Congressmen, their families, and their office staff. Add the names of every confirmed administration official, with their families and staffs, and the repeal bill will be signed instantly.

    Alternatively, insert the name of every federal judge, and it will get declared unconstitutional in a few days.

    Throw in some Governors and other state-level politicians, some state judges, and all of the candidates for office (this is an election season), and it will really get noticed.

  100. Re:is this "obvious news day" again? by Krinsath · · Score: 1

    Well, that IS the full list (including international "persons of interest") and names is just that, names. Not people. If your name is James Wright but you're also known as Jimmy W, Jimmy the Wright and the Wright Stuff that's actually four names on their list.

    Again going back to the Daily Show quips, if this was a list of Mafia guys from Jersey a million names is about 20 people. :)

  101. Re:Robert'); DROP DATABASE; by damn_registrars · · Score: 1

    I thought the first thing you learned with SQL was creating and deleting databases. I've never met anyone who learned the former, but not the latter. You must have a TON of databases on your system.

    That may be a philosophical choice for the DBA to make regarding the SQL noobs in question. Couldn't an argument be made that each SQL noob should have the ability to create and delete tables, not databases, within an instance?

    --
    Damn_registrars has no butt-hole. Damn_registrars has no use for a butt-hole.
  102. That name looks familiar ... by jc42 · · Score: 1

    How long until there's a terrorist named Robert'); DROP DATABASE; --?"

    I have a friend from Southeast Asia whose name, when you zero out the high-order bits of the usual UTF-8 encoding, comes out to just that. It'll be fun seeing what happens the next time he flies home to visit his family.

    --
    Those who do study history are doomed to stand helplessly by while everyone else repeats it.
  103. It wasn't the editors... by Anonymous Coward · · Score: 0

    If you look at the firehose, you will see that I, the submitter, was the one to add that XKCD link. The editors didn't do it.

    I also changed the SQL injection because I didn't want to guess or type in all 463 tables. DROP DATABASE is so much more efficient.

    - I Don't Believe in Imaginary Property

  104. Re:is this "obvious news day" again? by element-o.p. · · Score: 1

    Ah...point taken. I will scale my incredulity back a little.

    --
    MCSE? No, sir...I don't do Windows. Yes, I am an idealist. What's your point?
  105. Database isn't the only form of the lists..... by Anonymous Coward · · Score: 1, Informative

    The TSA also distributed the lists as separate searchable Excel spreadsheets. The last time I saw them, (roughly 6 months ago) the selectee and no fly lists were pushing 40MB and 15MB respectively. The airline security department would download a new list from the TSA on a daily basis. The Excel version was used as a backup in case the airline's database driven version rolled over and died (which it did frequently).

    If you're wondering, I'm a former airline employee. I'm the one that the ticket counter agents would call to bypass the check-in restricted response when someone was flagged as a selectee or No-Fly. After verifying that they are or aren't a match based on the information provided, I'd make an entry in the computer that allowed the counter agent to check the person in.

    The lists included all sorts of interesting data, like Birthdate/Birthplace, SSN, Driver's License Numbers, Passport Numbers, Description of the Person, State of Residence, etc.

    I'd love to have downloaded them and posted them for the world to see, but I don't cherish the federal prison time that would have come with it.

  106. Re:is this "obvious news day" again? by Jon+Abbott · · Score: 1

    Yes, but what makes you think they would worry about having a primary key? ;^)

  107. Re:is this "obvious news day" again? by chuckymonkey · · Score: 1

    There is some truth to that. I was recently in a conversation with a manager about that, he said "I wouldn't hire anyone with a felony, you just can't trust them.". I wondered about that a little as I personally know several felons that are actually pretty good people, one who borders on sainthood. That guy is amazing, true story follows: He broke down outside my parents house, does not know the first thing about cars and asks my dad for help. My dad flushes the cooling system and does a couple other repairs right there by the road, turns out this guy started a business in hardwood flooring and was extremely good at it. Well my parents hardwood floor is cut from the cherry trees that were on the property when my grandfather built it, he went out and matched the wood as close as he could then completely repaired and finished this floor for them. Then he found out about a friend of theirs that had to choose between food and presents for their kids on Christmas, so he went out and filled top to bottom, front to back his jeep grand cherokee with food, clothing, toys and drove it 300 miles to give to them. He's also a violent felon, who would have thought huh? If he does this for random people, I wonder what else he does?

    I bet he's on the watch list as well, not that he cares though as he has to drive his work truck wherever he needs to go. Not all ex-cons are like this guy, but damn people like him give you hope.

    --
    "Some books contain the machinery required to create and sustain universes."-Tycho
  108. Re:is this "obvious news day" again? by Pseudonym · · Score: 1

    I wondered about that a little as I personally know several felons that are actually pretty good people, one who borders on sainthood.

    Nelson Mandela, Aung San Suu Kyi, Mohandas Gandhi and Mordechai Vanunu, are (or were) felons.

    --
    sub f{($f)=@_;print"$f(q{$f});";}f(q{sub f{($f)=@_;print"$f(q{$f});";}f});
  109. Stalemate by symbolset · · Score: 1

    Leaving one party with the power of the executive branch and the other with the power of the legislative branch ensures both active branches of government will battle each other and accomplish very little. This is perhaps the best a reasonable person can hope for and I believe it's that way by design. Given reign of both branches one party can do a great deal of damage to civil liberty in a very short time. Properly done, though, we should trade off which is which so that what energies they have left from fighting each other can be employed in reversing the actions of their predecessors. That way each generation will begin the same place the last generation did, and the power seekers will have been successfully turned from the tyrannical ways they seek and harnessed to the useful task of depleting the surplus productivity.

    Please, don't hope for efficiency in government. History is full of efficient governments and living was free and easy under none of them.

    --
    Help stamp out iliturcy.
  110. Re:is this "obvious news day" again? by RealGrouchy · · Score: 1

    Holy crap...that's like one in three hundred Americans on the watch list.

    If it helps, more than one in one hundred US citizens are in jail.

    Helps depress you, that is.

    - RG>

    --
    Hey pal, this isn't a pleasantforest, so don't waste my time with pleasantries!
  111. Re:is this "obvious news day" again? by Sentry21 · · Score: 1

    I thought it was an insulting way of telling people what to do with erroneous data that ended up in the database: 'Keep it, simple stupid'

  112. I'm not quite on the list by Nursie · · Score: 1

    As a man with the same name as an ex-Gitmo inmate, I get hassle.

    Thankfully I'm not on the no-fly, but because my namesake was an inmate I'm denied luxuries like online checkin on US flights, use of automated checkin machines at airports and a bunch of other stuff. Not only that but at checkin desks I get, at the very least, the agent having to call upstairs and more usually a stern looking man taking my passport off for checks for a few minutes and then coming back and giving the all clear.

    This speaks to me of broken systems because surely they have my passport number on record...

    Anyway, it's an annoyance.

  113. Re:is this "obvious news day" again? by ORBAT · · Score: 1

    How do I mod something "+1 tragicomic"?

  114. Re:is this "obvious news day" again? by stubob · · Score: 1

    I'm on the list as well, and share the same name as a certain famous comedian. I asked an agent what the problem was and was told "Oh, you've probably got the same name as someone." I even went so far as to go through TSA's grievance site https://trip.dhs.gov/ with no luck.

    The weird thing is that it is different from airline to airline. On United, I can check in online, but my wife can't. On Frontier, I can't check in online but she can't.

    I guess I should have taken HER name when I got married, and not the other way around.

    --
    Planning to be moderated ± 1: Bad Pun.