Bad news for America travelers

[harley]

Hackers Clone E-Passports

I tend to be a pessimist/realist about technology issues, especially when implemented by the gov't. There was never any question that the tech would be obsolete before they even started using it. However, I never even thought about the bad guys using the RFID signature to allow IEDs to detect when an American is walking by in order to target us.

 

[BunsGettingFirm]

They really need to turn to the ISO 14443 standard so your passport can only be read from 4 - 6 inches so that you're not a walking IED detonator.

According to the article, the data on the RFID e-passport are not encrypted, so that German hacker didn't do anything amazing.

 

[figner]

I may be paranoid, but it doesn't seem excessive to carry anything containing an RFID chip in a foil bag.

 

[lucija]

Well... RFIDs are not indestructible. If you're really worried, do a decent bending/folding/crumpling exercise on your passport. The passport will remain valid even with a no longer functioning RFID.

 

[kumquat]

I may be paranoid, but it doesn't seem excessive to carry anything containing an RFID chip in a foil bag.

Like under my hat?

 

[figner]

Like under my hat?

Perfect.

 

[FUEGO]

I wonder how much the military version of "stick a bunch of passports on the end of a few broomsticks ducktaped together and attach that to the front of your vehicle" would cost to implement in the field as a counter-IED measure? Anyone have DARPA's phone number handy? I'm guessing a million or two per implementation at least.

 

[Alan]

They really need to turn to the ISO 14443 standard so your passport can only be read from 4 - 6 inches so that you're not a walking IED detonator.

According to the article, the data on the RFID e-passport are not encrypted, so that German hacker didn't do anything amazing.

When we renewed our British passports a year ago we also bought a couple of protective sleeves to carry them in. This blocks the RFID from the passport chip. Cheap enough solution as it was already well known that forgers were able to easily read the id's from passers by and reproduce them to add to forged passports.

This is the first I have heard of IED's being triggered by them and it seems a bit far fetched as terrorists usually go for much softer targets.

 

[harley]

The IED thing was just a proof of concept test, especially since they haven't even started distributing the RFID passports yet. And the passport covers are supposed to have metal threads woven in to protect against them being read, but even open half an inch (ie. loose in your backpack) was enough for him to read. Another point was using other RFID tags in the passport to fool a computerized check, although not a visual one. I think his main point is why spend these huge amounts of money on tech that isn't going to accomplish it's goal? But this is the gov't we're dealing with. IMHO the RFIDs make a lot more sense than taking off my shoes in the airport.

 

[Alan]

Another point was using other RFID tags in the passport to fool a computerized check, although not a visual one. I think his main point is why spend these huge amounts of money on tech that isn't going to accomplish it's goal? But this is the gov't we're dealing with. IMHO the RFIDs make a lot more sense than taking off my shoes in the airport.

I couldn't agree more. Our new British passports cost a lot more to pay for the new technology plus another $20 for the protective cover to stop criminals reading the unencrypted signal.

We renewed our US passports a few months ago so at least we avoid the RFID tags for a few more years.

 

[gandalf42]

IMHO the RFIDs make a lot more sense than taking off my shoes in the airport.

This really annoys me. Some version of psuedo security. I presume they are checking everyone's shoes due to the goofball that tried to have a bomb in his shoes and (unsuccessfully) detonate it.

So if this makes sense, if some bomber sews a bomb into his pants, will they make everyone drop their drawers?

 

[cantlogin]

The IED thing was just a proof of concept test, especially since they haven't even started distributing the RFID passports yet...

I received a new US passport last summer and it does have the RFID logo on the cover.

 

[harley]

I received a new US passport last summer and it does have the RFID logo on the cover.

I guess I was wrong. Unless, of course, they just put the logo on the cover. Sort of like having the signs for an alarm system, but no system.

If you do have the RFID, just make sure to keep the cover closed tight while vacationing in the Al-Anbar province.

 

[Alan]

I received a new US passport last summer and it does have the RFID logo on the cover.

DW and I got ours in October and December and no RFID - I wonder if it depends on which office issues the Passport

 

[cantlogin]

DW and I got ours in October and December and no RFID - I wonder if it depends on which office issues the Passport

I guess I got cheated again. Bummer.

 

[Grep]

This is the first I have heard of IED's being triggered by them and it seems a bit far fetched as terrorists usually go for much softer targets.

I may have buns of steel, but the general area of my back pocket is still a comparatively soft target.

I tend to view RFID, etc., as theater rather than security. I'd rather have someone actually look at faces and photos, etc., than at a computer screen.

 

[BunsGettingFirm]

The IED thing was just a proof of concept test, especially since they haven't even started distributing the RFID passports yet. And the passport covers are supposed to have metal threads woven in to protect against them being read, but even open half an inch (ie. loose in your backpack) was enough for him to read. Another point was using other RFID tags in the passport to fool a computerized check, although not a visual one. I think his main point is why spend these huge amounts of money on tech that isn't going to accomplish it's goal? But this is the gov't we're dealing with. IMHO the RFIDs make a lot more sense than taking off my shoes in the airport.

Hey, us non-retired techies still need the teats of the government! My ideas are all in the NFC/e-wallet/e-ID fields. Then when the new tech bombs, I'll sell the fixes as well.

 

[FUEGO]

Hey, us non-retired techies still need the teats of the government! My ideas are all in the NFC/e-wallet/e-ID fields. Then when the new tech bombs, I'll sell the fixes as well.

Nice pun!

 

[Alan]

phish and chips ?

 

[harley]

phish and chips ?

Phish and String Cheese

 

[BJ Johns]

YouTube - RFID HUMAN CHIP IMPLANT NEW WORLD ORDER - Part 1-2

 

[ls99]

OK, no RFID chip implants, how about a nice barcode tatto on the forehead?