The super duper classified high security no-flight list was shared internationally via a public ftp server with the username and password anonymous:anonymous.
A hacker that disclosed that responsibly got into lots of troubles for exposing that. [1]
So I'd argue indeed I assume that TSA and border control use the most incompetent and most lying way to solve anything when the control mechanism are privacy laws. They literally care 0% about that. If they say they delete something, I assume they keep a physical copy.
And I totally understand people worrying a lot about that, given the golden age of deep fakes we live in. Imagine what's possible 10 years ahead when that biometric data can be used to imitate and authenticate you.
The super duper classified high security no-flight list was shared internationally via a public ftp server with the username and password anonymous:anonymous.
A hacker that disclosed that responsibly got into lots of troubles for exposing that. [1]
So I'd argue indeed I assume that TSA and border control use the most incompetent and most lying way to solve anything when the control mechanism are privacy laws. They literally care 0% about that. If they say they delete something, I assume they keep a physical copy.
And I totally understand people worrying a lot about that, given the golden age of deep fakes we live in. Imagine what's possible 10 years ahead when that biometric data can be used to imitate and authenticate you.
[1] https://news.ycombinator.com/item?id=34446673