If You Think Your RFID Passport Is Secure, Think Again
in [Airline Travel]
|
From: Kurt Ullman on 11 Dec 2009 16:02 In article <7ofpt9F3qcm75U1(a)mid.individual.net>, "tim...." <tims_new_home(a)yahoo.co.uk> wrote: > and just how useful is knowing someone's name and date of birth, if you > don't know their address? > At least in the US, if you the date of birth it makes it a lot easier to get addresses. -- To find that place where the rats don't race and the phones don't ring at all. If once, you've slept on an island. Scott Kirby "If once you've slept on an island"
From: Sancho Panza on 11 Dec 2009 16:48 On Dec 11, 9:45 pm, "Sancho Panza" <otterpo...(a)xhotmail.com> wrote: > "tim...." <tims_new_h...(a)yahoo.co.uk> wrote in message > > news:7ocv9kF3q6nkoU1(a)mid.individual.net... > > > > > > > > > "Sancho Panza" <otterpo...(a)xhotmail.com> wrote in message > >news:4b205286$0$22549$607ed4bc(a)cv.net... > >> December 8th, 2009 > >> RFID passport identity theft made simple > >> Posted by Robin Harris @ 11:20 pm > >> <http://blogs.zdnet.com/storage/?cat=5>, Public policy > >> <http://blogs.zdnet.com/storage/?cat=8>, Security > >> <http://blogs.zdnet.com/storage/?cat=7> > > >> You're confident your RFID passport is safe in its signal-blocking wallet > >> as you pass through immigration. What you don't know is that the man > >> behind you is recording the data sent by your passport's RFID chip as it > >> is scanned. > > > And why should I worry about this? The only things that are broadcast are > > the things that can be obtained by reading the passport, > > > I really don't see why anybody sees this as a problem. > > > Scare mongering for the sake of it > > A lot more people are victims of ID theft. I agree
From: tim.... on 11 Dec 2009 18:11 "Kurt Ullman" <kurtullman(a)yahoo.com> wrote in message news:kurtullman-2EAF3E.16022611122009(a)70-3-168-216.pools.spcsdns.net... > In article <7ofpt9F3qcm75U1(a)mid.individual.net>, > "tim...." <tims_new_home(a)yahoo.co.uk> wrote: > >> and just how useful is knowing someone's name and date of birth, if you >> don't know their address? >> > At least in the US, if you the date of birth it makes it a lot > easier to get addresses. This is a circular argument If there is a publicly accessible database that enables you to find someone's address from a name and date of birth, then there is also a publicly accessible database that enables someone to find a date of birth from an address and a name. ISTM that the ID thief is far more likely to have the name and address of the person who they wish to target than their name and date of birth. So, it is the accessibility of this database that is the major risk factor here, not the fact that chipped passports are potentially insecure. tim
From: Sancho Panza on 11 Dec 2009 21:06 "tim...." <tims_new_home(a)yahoo.co.uk> wrote in message news:7og1uqF3q6agdU1(a)mid.individual.net... > > "Kurt Ullman" <kurtullman(a)yahoo.com> wrote in message > news:kurtullman-2EAF3E.16022611122009(a)70-3-168-216.pools.spcsdns.net... >> In article <7ofpt9F3qcm75U1(a)mid.individual.net>, >> "tim...." <tims_new_home(a)yahoo.co.uk> wrote: >> >>> and just how useful is knowing someone's name and date of birth, if you >>> don't know their address? >>> >> At least in the US, if you the date of birth it makes it a lot >> easier to get addresses. > > This is a circular argument > > If there is a publicly accessible database that enables you to find > someone's address from a name and date of birth, then there is also a > publicly accessible database that enables someone to find a date of birth > from an address and a name. "Your name, nationality, gender, birthday, birthplace and a nicely digitized photo is in his hands. With that info he can photoshop up a passport, get a copy of your Social Security card and with that get credit cards and bank accounts in your name."--Such useful databases include Nexis and others that charge even more and provide far more information. > > ISTM that the ID thief is far more likely to have the name and address of > the person who they wish to target than their name and date of birth. So, > it is the accessibility of this database that is the major risk factor > here, not the fact that chipped passports are potentially insecure. Such databases are available to the public through workplaces, libraries and even anyone's home computer., if the price is paid.
From: Kurt Ullman on 11 Dec 2009 23:22
In article <7og1uqF3q6agdU1(a)mid.individual.net>, "tim...." <tims_new_home(a)yahoo.co.uk> wrote: > "Kurt Ullman" <kurtullman(a)yahoo.com> wrote in message > news:kurtullman-2EAF3E.16022611122009(a)70-3-168-216.pools.spcsdns.net... > > In article <7ofpt9F3qcm75U1(a)mid.individual.net>, > > "tim...." <tims_new_home(a)yahoo.co.uk> wrote: > > > >> and just how useful is knowing someone's name and date of birth, if you > >> don't know their address? > >> > > At least in the US, if you the date of birth it makes it a lot > > easier to get addresses. > > This is a circular argument Nonsense. You asked how useful it was to get the name and date of birth if you did not have an address. I said, that at least in the US, name and dob made finding the address easier. > > If there is a publicly accessible database that enables you to find > someone's address from a name and date of birth, then there is also a > publicly accessible database that enables someone to find a date of birth > from an address and a name. Yeah, but as I outlined that is not my interpretation of the original statement you made. You seemed to be suggesting that if someone had a name and dob (from the passport) it would be less than useful unless they had an address. My suggestion was that what was available from the passport, made finding the missing piece easier. > > ISTM that the ID thief is far more likely to have the name and address of > the person who they wish to target than their name and date of birth. So, > it is the accessibility of this database that is the major risk factor here, > not the fact that chipped passports are potentially insecure. > The two go together. You need the chipped passport to start the process by allowing you to get the first two bits of information. Now how real any of this, don't know, don't care/ -- To find that place where the rats don't race and the phones don't ring at all. If once, you've slept on an island. Scott Kirby "If once you've slept on an island" |