A Department of Homeland Security Office of Inspector General audit found that the Transportation Security Administration is failing to protect passenger facial recognition data. The audit - summarized publicly while withholding classified details - identified a “significant weakness” in TSA’s Credential Authentication Technology 2 (CAT-2) program: a vendor was able to access and extract sensitive passenger information, including driver’s license and passport images, during troubleshooting and system work without TSA’s knowledge. TSA lacked clear policies and oversight to track when data were extracted, could not verify that extracted information was properly deleted, and did not notify travelers when biometric or biographic information may have been stored. The OIG issued one finding and three recommendations to strengthen controls, improve oversight, and increase transparency; TSA concurred, with two recommendations marked resolved and one still open.
Civil liberties advocates emphasize that these failures illustrate broader harms of government facial-recognition use: large-scale biometric collection creates mass-surveillance risks, increases exposure to data breaches and unauthorized access, and compounds known error rates that have led to misidentifications and wrongful arrests. Given those risks and the OIG’s findings, travelers are reminded that TSA allows opting out of facial-comparison photo capture without delay or penalty, and advocates continue to press for stronger safeguards or limits on government biometric programs.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
Flock CEO states that achieving a crime-free society requires sacrificing privacy. Countries with low crime rates often have widespread surveillance cameras and minimal privacy protections. (neowin.net)
Expedia, which controls 80% of online hotel bookings, is accused of raising hotel prices by as much as 30% through a price-fixing conspiracy. This dominant market position allows Expedia to impose high commissions on hotels, which are passed on to consumers, contributing to rising travel costs. (thebignewsletter.com)
Capsem is a Rust-based hypervisor that sandboxes AI agents in air-gapped Linux VMs, ensuring security and control. It offers quick setup, comprehensive inspection, and enterprise policy enforcement for AI development environments. (capsem.org)
Bank of America hired 1,000 contractors in the second quarter to fix software vulnerabilities exposed by advanced AI models like Anthropic's Mythos. The move highlights the bank's efforts to address AI-driven security risks in internal and vendor systems. (runtimewire.com)
Immigration and Customs Enforcement (ICE) plans to implement AI software to monitor detainee calls, video, and movements continuously. The system will use voice recognition and data integration to identify security threats and criminal activity. (washingtonsun.com)
Concerns are raised about Rust's corporate backing and the potential influence of major tech companies on its development. Critics argue that the culture of rewriting projects in Rust may benefit corporations at the expense of software reliability and safety. (oxetene.net)
Today's best Hacker News stories, summarized and screenshotted, one email a day.