funsec mailing list archives

Faux security with the DHS border crossing card


From: "Richard M. Smith" <rms () computerbytesman com>
Date: Tue, 28 Aug 2007 08:42:05 -0400

This is totally unbelievable.  DHS is knowingly going with an RFID
technology that is insecure and clonable by the bad guys.  What is the DHS
thinking?

In addition, any company or organization that wants to track the comings and
goings of people can set up and run their own network of RFID reader to read
these new ID cards on the sly.

Richard

http://www.washingtontechnology.com/cgi-bin/udt/im.display.printable?client.
id=washingtontechnology_daily&story.id=31282

Washington State officials have said they will place on the cards Generation
2 RFID tags that can be scanned at 30 feet. Critics also contend those types
of RFID tags cannot be encrypted and can be easily cloned. To protect
privacy, DHS and Washington State have said the RFID tag will transmit
wirelessly only a reference number, which must be matched to a database to
obtain personal information. DHS is planning to use a similar technology in
its People Access Security Services identification card to be created for
people who frequently cross the borders. 

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: