tag:blogger.com,1999:blog-22202011.post3633981740536677314..comments2023-12-11T08:49:46.305+00:00Comments on Dizzy Thinks: Passports stolen but are "unusable"?Unknownnoreply@blogger.comBlogger9125tag:blogger.com,1999:blog-22202011.post-21299598593839204682008-07-30T07:32:00.000+01:002008-07-30T07:32:00.000+01:00First, passports don't use the same technology as ...First, passports don't use the same technology as the Oyster system. Oyster uses Mifare memory cards, now well and truly compromised, so system level security measures have to be relied on. Passports use a microprocessor chip capable of strong security functions, but unfortunately govt overdid it again by telling us all about the security before they had managed to implement more than a little bit of it (on the chip and in the systems). They are still not going to implement the system level functions needed to allow us to electronically verify a passport.dreamingspirehttps://www.blogger.com/profile/00324207120279777521noreply@blogger.comtag:blogger.com,1999:blog-22202011.post-33883592192703172502008-07-29T21:38:00.000+01:002008-07-29T21:38:00.000+01:00I assume that these passports will have to have so...I assume that these passports will have to have some sort of digital signature on a hash of the personal details before the electronic parts function properly, and that the government believes that the signature key is still secure.<BR/><BR/>How long the key will remain secure is a very interesting question. The current hack is not relevant as that should not reveal the key (unless they have really ******* up the implementation), but it's hard to believe it's all that secure.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-22202011.post-92049313570177473822008-07-29T18:17:00.000+01:002008-07-29T18:17:00.000+01:00There are lots of uses a passport can be put to th...There are lots of uses a passport can be put to that don't need the security chip. Banks, for example, use passports as ID for opening accounts and moving large amounts of money, but they can't read the chip.<BR/><BR/>Typically, our home office only thinks of a passport how <I>they</I> use it.marksanyhttps://www.blogger.com/profile/01520830611440112455noreply@blogger.comtag:blogger.com,1999:blog-22202011.post-86526327016501344782008-07-29T17:47:00.000+01:002008-07-29T17:47:00.000+01:00Quis custodiet ipsos custodes?<A HREF="http://thelakelandersview.blogspot.com/2008/07/your-passport-photos-are-ready-mr-smith.html" REL="nofollow">Quis custodiet ipsos custodes?</A>Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-22202011.post-59952893040727077802008-07-29T13:31:00.000+01:002008-07-29T13:31:00.000+01:00Of course not. Our government are full proof -- do...Of course not. Our government are full proof -- don't you know...RobWhttps://www.blogger.com/profile/02255978974948870928noreply@blogger.comtag:blogger.com,1999:blog-22202011.post-31550310314699430502008-07-29T11:06:00.000+01:002008-07-29T11:06:00.000+01:00And it's not compulsory for every border check poi...And it's not compulsory for every border check point to actually have the e-passport reader, is it?<BR/><BR/>I was greatly amused by Grunwald's hack that sabotages any attempts to read it by code injection.<BR/><BR/>See <A HREF="http://www.wired.com/politics/security/news/2007/08/epassport" REL="nofollow">here</A> for details.silashttps://www.blogger.com/profile/18101902217665655616noreply@blogger.comtag:blogger.com,1999:blog-22202011.post-16794631910226524722008-07-29T10:15:00.000+01:002008-07-29T10:15:00.000+01:00The ones with the RFID bit which is only guarantee...The ones with the RFID bit which is only guaranteed for two years when the passport has a lifespan of ten? The chips which use a similar technology to London's crappy Oyster system?<BR/><BR/>I feel safe.Old BEhttps://www.blogger.com/profile/06974090439936326476noreply@blogger.comtag:blogger.com,1999:blog-22202011.post-6044786916143446642008-07-29T10:09:00.000+01:002008-07-29T10:09:00.000+01:00The claim that the passports are 'unusable' is cle...The claim that the passports are 'unusable' is clearly nonsense. <BR/><BR/>They might not be usable for travel, but there are loads of uses for a dodgy passport as a false government-issued ID at places that almost certainly don't check the electronic chips. Like buying mobile phones on contract. Or obtaining other identity documents. Or passing through a security check.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-22202011.post-84276696942115292162008-07-29T09:35:00.000+01:002008-07-29T09:35:00.000+01:00Yep, those are the ones.Yep, those are the ones.Lolahttps://www.blogger.com/profile/04586735342675041312noreply@blogger.com