Flaw exploited in RFID-enabled passports

[InfoSec News <alerts () infosecnews org>]

http://news.com.com/2061-10789_3-6130396.html

By Robert Vamosi
October 27, 2006

Security researchers have released proof-of-contact code that they say 
enables an attacker to read the passport number, date of birth, and 
passport expiration date from passports with RFID tags enabled.

Researcher Adam Laurie, known for his proof-of-concept attacks on 
Bluetooth-enabled devices, reported the new code on the Bugtraq mailing 
list Friday afternoon.

This is the latest in a series of security questions leveled against 
wide-scale adoption of RFID tags, which have raised privacy and security 
concerns. Earlier this week, researchers at the University of 
Massachusetts revealed flaws in RFID-enabled, or so-called contactless, 
credit cards.

-=-

The Bugtraq post is here:
http://www.securityfocus.com/archive/1/449926/30/0/threaded

The code has been released here:
http://rfidiot.org


_________________________________
Visit the InfoSec News store!
http://www.shopinfosecnews.org