If You Think Your RFID Passport Is Secure, Think Again
in [Airline Travel]
|
From: Mxsmanic on 12 Dec 2009 03:00 William Black writes: > Any evidence that anyone has done this yet? Nobody has shot down a civilian airliner with a missile in the U.S. yet, but that doesn't mean that the risk isn't credible or significant. > I don't mean someone has done something clever in a lab, I mean a > criminal stealing an identity via a passport at an airport. Criminals don't usually announce the sources of the identities they steal.
From: Mxsmanic on 12 Dec 2009 03:01 tim.... writes: > and just how useful is knowing someone's name and date of birth, if you > don't know their address? For one thing, it makes it a lot easier to find out the person's address. The more you have, the more you can find. A name attached to a photo is perhaps some of the most useful information of all.
From: Mxsmanic on 12 Dec 2009 03:02 tim.... writes: > If there is a publicly accessible database that enables you to find > someone's address from a name and date of birth, then there is also a > publicly accessible database that enables someone to find a date of birth > from an address and a name. Right. > ISTM that the ID thief is far more likely to have the name and address of > the person who they wish to target than their name and date of birth. So, > it is the accessibility of this database that is the major risk factor here, > not the fact that chipped passports are potentially insecure. These are targets of opportunity, not premeditated targets.
From: tim.... on 12 Dec 2009 08:06 "Kurt Ullman" <kurtullman(a)yahoo.com> wrote in message news:kurtullman-7B0895.23225311122009(a)70-3-168-216.pools.spcsdns.net... > In article <7og1uqF3q6agdU1(a)mid.individual.net>, > "tim...." <tims_new_home(a)yahoo.co.uk> wrote: > >> "Kurt Ullman" <kurtullman(a)yahoo.com> wrote in message >> news:kurtullman-2EAF3E.16022611122009(a)70-3-168-216.pools.spcsdns.net... >> > In article <7ofpt9F3qcm75U1(a)mid.individual.net>, >> > "tim...." <tims_new_home(a)yahoo.co.uk> wrote: >> > >> >> and just how useful is knowing someone's name and date of birth, if >> >> you >> >> don't know their address? >> >> >> > At least in the US, if you the date of birth it makes it a lot >> > easier to get addresses. >> >> This is a circular argument > > Nonsense. You asked how useful it was to get the name and date of birth > if you did not have an address. I said, that at least in the US, name > and dob made finding the address easier. > >> >> If there is a publicly accessible database that enables you to find >> someone's address from a name and date of birth, then there is also a >> publicly accessible database that enables someone to find a date of birth >> from an address and a name. > Yeah, but as I outlined that is not my interpretation of the > original statement you made. You seemed to be suggesting that if > someone had a name and dob (from the passport) it would be less than > useful unless they had an address. No, I'm suggesting that it's information that they can get from elsewhere so there's no new security risk form getting it this way tim
From: tim.... on 12 Dec 2009 08:08
"Sancho Panza" <otterpower(a)xhotmail.com> wrote in message news:4b22faa9$0$4996$607ed4bc(a)cv.net... > > "tim...." <tims_new_home(a)yahoo.co.uk> wrote in message > news:7og1uqF3q6agdU1(a)mid.individual.net... >> >> "Kurt Ullman" <kurtullman(a)yahoo.com> wrote in message >> news:kurtullman-2EAF3E.16022611122009(a)70-3-168-216.pools.spcsdns.net... >>> In article <7ofpt9F3qcm75U1(a)mid.individual.net>, >>> "tim...." <tims_new_home(a)yahoo.co.uk> wrote: >>> >>>> and just how useful is knowing someone's name and date of birth, if you >>>> don't know their address? >>>> >>> At least in the US, if you the date of birth it makes it a lot >>> easier to get addresses. >> >> This is a circular argument >> >> If there is a publicly accessible database that enables you to find >> someone's address from a name and date of birth, then there is also a >> publicly accessible database that enables someone to find a date of birth >> from an address and a name. > > "Your name, nationality, gender, birthday, birthplace and a nicely > digitized photo is in his hands. With that info he can photoshop up a > passport, get a copy of your Social Security card and with that get credit > cards and bank accounts in your name."--Such useful databases include > Nexis and others that charge even more and provide far more information. what use is a passport with a photo of someone else What you need to steal someone's identity, is a passport in their name with *your* photo tim |