Alternatively, by searching various scanners' web pages, which anyone can find using google, they will see which ones are Government certified. For example, the Rapiscan WaveScan 200, advertises that "the WaveScan 200 millimeter wave sensors do not image anatomical details, thus protecting privacy."
How much of a leap is it from that advisement to figuring out hiding explosives in one's crotch will not be detected?
I can't tell if TSA is using the Rapidscan 200 yet, but it has been using the RapidScan 1000, whose web page contains this notice:
Certifications
The United States Department of Homeland Security has certified the Rapiscan Secure 1000 as an approved product for homeland security. Please visit www.safetyact.gov for more information.
If you go to Safetyact.gov, you'll find all sorts of helpful information, such as this list of approved HSA airport equipment:
The following "Approved Product List for Homeland Security" is provided pursuant to 6 U.S.C. § 442(d)(3) (the Support Anti-terrorism by Fostering Effective Technologies Act of 2002, or “SAFETY Act”) and 6 C.F.R. § 25.7(j) (2004) (Regulations to Support Anti-terrorism by Fostering Effective Technologies):
You can then peruse the list and find, for example,
Rapiscan Systems, Inc.: Secure 1000®
December 18, 2006 – Rapiscan Systems, Inc., provides the Secure 1000®, a non-intrusive personnel screening system designed to detect both metallic and nonmetallic objects (such as ceramic, plastic, metallic, and organic matter, including liquid and solid explosives) concealed under a person's clothing. This Designation and Certification will expire on December 31, 2011.
You can also find what airports the machines are used in, for example, Melbourne.
And,Manchester, UK, which is using RapidScan's backscatter.
Or how about the Smiths Detection, Inc.: Sentinel II
December 13, 2005 - Smiths Detection, Inc. provides the Sentinel II, a non-intrusive walkthrough portal that detects trace amounts of explosive material on the human body. This Designation and Certification will expire on December 31, 2010.
If you go to the website for the Sentinel, it says:
Applications
The IONSCAN SENTINEL II answers the need for screening people for trace explosives or narcotics. With it’s high throughput, the SENTINEL II is ideal for applications where large numbers of people need to be screened for threats quickly, such as at airports, customs, military bases, correctional facilities, at high profile facilities and public events.
Past security incidents, evidenced by the “shoe bomber”, show the lengths that terrorists will go when attempting to carry out their plans. Only the SENTINEL II from Smiths Detection dislodges particles from head-to-toe for sampling. By increasing the area from where samples are taken, the SENTINEL II is better equipped to help you determine whether explosives or narcotics may be concealed on a person, or when traces of these substances may remain on someone after handling explosives or narcotic material.
It even tells you what it's capable of detecting:
Technology: Ion Mobility Spectrometry (IMS)
Explosives Detected : RDX, PETN, TNT, Semtex, NG and others
Narcotics Detected :Cocaine, Heroin, PCP, THC, Methamphetamine, Ecstasy and others
The company conveniently lists all their security checkpoint machines on one page.
Googling the machine will let you know some of the airports it is deployed in, like Heathrow, Senegal, San Juan, JFK and Washington, Sacramento and Newark.
And finally, through EFF's FOIA lawsuits, lots of additional information on backscatters and whole body imaging is available, including which airports are using them.
These machines do reduce our privacy, but they are unlikely to stop someone who made a concerted effort to find out what airport is using what machine, and what that machine shows and doesn't, and how to get around it. So former Secretary Chertoff's arguments don't hold much water.
The machines are very expensive. Relying on them to safeguard us is just playing into the terrorists' plans. They aim to invoke fear and panic, and they realize they can do so even when their attack fails, as in Detroit. They know our reaction will be to ramp up security and spend vast amounts of money on machines that won't make a difference in the long run.