The TSA is investigating how an outdated version of the ‘no-fly list’ was exposed online. A self-described cyber-security researcher says she found the list online on an unsecured server.