CLEAR "Security Vulnerabilities" Questioned by Congress
Senior members of the House Committee on Homeland Security questioned the TSA after being informed of "security vulnerabilities related to identity verification" with CLEAR biometric identity verification systems used at airport security checkpoints nationwide.
The letter, obtained by IPVM, demands that the TSA "immediately require all passengers" to go through ordinary TSA identity checks in order to "ensure the accurate vetting of passengers against terrorist watchlists." No parties would confirm if that would indeed happen.
** **** ******, **** ******** *** document *** ******** ********* **** *****, the ***, *** *** ****** ******** of *** ******** ******** *********.
**********
** ******** **, ****, *** ***** Committee ** ******** ************ * ****** ** *** ************* David **************** *************** **** *** "*** ******** notified *** ********* **" ** ***** systems, ****** ** (*** ******) ******** Rep. ****** ******** (*-**) *** ******* Member ***. **** ***** (*-**):
*** ******** ******** *** ********* ** security *************** ******* ** ******** ************ processes *** ************ ** *** ********** traveler ******* ** ******** ** *****.
***** ******** ********* ********* ********* *** TSA *********** ** ** ******** ****** the ****** ******,********* ** *** *******. *** ******* ***** $*** *** year, ******** ******* ** *** ********* security ***** **** **** ******** *** identity ************.
******: *****
*** *******, ********* * ****** ********** official, **** **** **** *** ********** "security **********" ********** **** **,*** ***** users, **** ** ***** ******** *** systems ******* ** ******** **** ***** users ****** * ******** **** ** the ******. ***** **** **** **** TSA ** ********* ~**,*** ***** ** "re-enroll" **** ******** ****** **** ******** verification, *** ******** **** ***** *** "security **********."
***** **** *** ***********, * ******** of *** ~** ******* ** *****, are **** ******** ** **-****** ******* their ********** **** ********* ******** ****** than **** **** ***********.
*** ****** ***** *** ** "*********** require *** **********" ** ** ******* ordinary "******** ************ ********* ******* *** by *** *********" ** ***** ** "ensure *** ******** ******* ** ********** against ********* **********."
** ***** ** ******* **** *** immediately ******* *** **********, ********* ********** traveler ******* ************, ** ** ******* the ************** ******** **************’* (***) ******** verification ********* ******* *** ** *** employees *** ************ ***** ** ******** TSA *********** *** ******** *********.
*** **** *** ** ******* ***** sensitive *************** ********** *** ****** *** accurate ******* ** ********** ******* ********* watchlists ** ** ******* ***** ********* to ** ******* ***-******** ******** ************.
** * *********, ****** ******** ** the ******** ******** ********* ***************** *. ************:
** **** **** *** ** *** swiftly ** ******* *** ******** *************** so ********* *** ** ********* ** the ****** ** *** *****.
*** *** ******* ** ******** ******* questions ***** *** ***************, *** **** they *** ******* ** ****** ***** users ******* ******** ************ ***** *** Credential ************** ********** (***). * *** spokesperson **** ****:
*** ***** ** **** *** **********, including ***** *** *** ******* ** the ********** ******** ******* [**** ** CLEAR], ****** ***** ******** ** *** CAT *****.
CLEAR *********
*** ***** ****** ** ****** *** there **** *** **** **,*** “******** violations” ** ********* ** **** ******. CLEAR *** * ************ ********** *******, including ********** ** ******* ** ********* ID, * *********-***** ************** **** (*.*. mother's ****** ****, ********* *******, ***.), and ****** ***** ********** ********* *** person ** ***** ***** **. *** policy *** ** ******* ******* ******** for *** **** ******** **** *** facial ********** ***** *** ******* * match ** *** ********** ** ***** ID - ** ******* *** **** reasons, **** ** ******** ***** *******, damaged ** ** **** ********.
*** *** *** ***** ** ** re-enroll ************* *** ********* (* **** small ********** ** *** **** **** member ****) - *** *** **** through **** ****** ****** ******* *** authentication **** **** ***** *** *** a ****** ***** - *** **** re-enrollment ******* ** ****-********. ** *** not ***** ** ****** ************** ***** instances ** “******** **********” ** *** state **.
**** ****** ******** **** *********** **** not, “******** ******* **** *** **** profiles **** *** ******** *********, *** that **** **** ********** ******* *** PreCheck.” **** ** *********. *** ********** PreCheck ****** ** *** **** ********** and ** *********** ** *** ********** process. ***** **** *** ****** ******** security *********. ***** ******** ******** ***** the ********** ******** ** *** ***.
***, ** ****** **** *********:
**. *** ***** ******* *** ***** of *** ************* ********* ** ***** security **********?
**. ** **** *** *** *** “security **********” *** **** *** *** not ***** ** ****** ****** *** claim **** ** ****. *** ******* and *** ********** *** ******. ** are ***** ** *** ***** ****** of ********* **** *** ******** ******** verification (**** *** ******* ************ ***** 2010) *** ******** *********.
**. *** ***** ***** *** *************? If ***, **** ** ***** ***** to ******* **?
**. *** *** *** ***** ***** to **-****** ************* **,*** *********. *** required **-********** ** **** ***** ** not * *************. ***** *********** **** approved ** * ******* ******* * manual ****** ******* ***** ********** ******** authentication, ******* * ********* ***** **** but ***** ** ********* ****** ***** could *** ** ********* - ** happens *** **** *******, **** ** document ***** *******, ******* ** ** poor ********. **** **-********** ******* ** well ********.
**. ** ***** ********* **** *** vulnerability ******* *** ****** ** *** flying ******?
**. *** ******** **-********** ** **** group ** *** * *************. ******** at ***** ** ********* ***** ** our ***** ****** ** ******. *** mission ** ********* ******** *** ******** frictionless *********** *** ********* - *** we *** ***** ** ******* **** the *** ** ** **** ***** day.
**. **** *** ************* ****** ***** deployments ******* *** ****** ******? ** not, *** *** ***** ******** ****?
**. ***** ***** ********* ******* ** the ** ****.
TSA *********
******** ************ ** *** ** ***’* critical ****** ** ******** ********. ***’* frontline ********* ******* *** ******** ** each ********* ***** **** **** ******, with *** ********* ** ********* *** participate ** *** ********** ******** *******. For ***** **********, *** *** ****** required **** * ********** ** ******** selected *** ******* ***’* ******** ************ processes, ********* ************ ******* ********** ************** Technology (***). *** ** ******* **** CLEAR, *** ********** ******** ********, ** ensure ***'* **** ********* *** ***** consistently *** *** **** ***’* *******-********* security ********** ** ***** ********* ** all **********. ***** ** ******** ** authenticate ************** ******* * ******* **** includes ********* *** ***** **** ** ID ** ***’* ********** ** **** with *** *********.
*****'* ******** ******* **** ********** **** the *********'* ******, ** *** ****** for **-********** ** ****, ** ******.
** **** ******* ******** *** ********, even ** ***-***** *****, ***** ***** photo ** ********.
*********, ** **** **** ******** ****** to **? * ***'* *** ***** passengers ****** * **** *** ****** the **** *** ******** ** ********.
***** ** **** *** *** **** show. *** *** ****** *** ***-***** became "**********" ** ***** ****** ******** has **... **** ** *** ****** on ***-***** *** ***** ******* ** less ** **** **.