funsec mailing list archives

New UK ID cards supposed unforgeable - it took expert 12 minutes to clone


From: Juha-Matti Laurio <juha-matti.laurio () netti fi>
Date: Mon, 10 Aug 2009 14:04:31 +0300 (EEST)

"Adam Laurie is no ordinary hacker. In the world of computing, he is considered a genius
- a man whose talents are used by government departments and blue-chip companies to guard against terrorists and 
cyber-criminals.

But even by his standards, what he is about to demonstrate is mind-boggling - and deeply disturbing.

Laurie is holding one of 51,000 ID cards issued by the Home Office to foreign nationals currently working or studying 
in Britain. 

It is similar to the ID card for British citizens unveiled last week by Alan Johnson, the Home Secretary,
as part of the Government's ongoing National Identity Scheme.

Embedded inside the card for foreigners is a microchip with the details of its bearer held in electronic form:
name, date of birth, physical characteristics, fingerprints and so on,
together with other information such as immigration status and whether the holder is entitled to State benefits.

This chip is the vital security measure that, so the Government believes, will make identity cards 'unforgeable'.

But as I watch, Laurie picks up a mobile phone and, using just the handset and a laptop computer, 
electronically copies the ID card microchip and all its information in a matter of minutes.

He then creates a cloned card, and with a little help from another technology expert,
he changes all the information the card contains - the physical details of the bearer, name, fingerprints and so on."
--clip--

More at
http://www.dailymail.co.uk/news/article-1204641/New-ID-cards-supposed-unforgeable--took-expert-12-minutes-clone-programme-false-data.html#ixzz0NmDol5DT

Juha-Matti
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: