Its a really, really bad problem, says Billy Rios, the director of threat intelligence at Qualsys. Several other pieces of TSA equipment have the same universal-password bug, according to Rios, although the Itemiser is the most important one. The TSA has already begun to shift from the Itemiser 3 to a newer version of the machine — the Itemiser DX — but Rios says the replacement has the same problem. There may be nothing the TSA can do but replace the machines outright.