Your Web News in One Place

Help Webnuz

Referal links:

Sign up for GreenGeeks web hosting
February 23, 2018 05:37 pm PST

US Customs and Border Patrol made forging e-passports easier

One of the things that make every RFID implanted US Passport 'safe' is each document's unique cryptographic identifier. Customs and Border Patrol can use this key to verify the authenticity of each passport, if they'd bother to install the software to do so.

For 12 years they have not.

Via Wired:

Passports, like any physical ID, can be altered and forged. That's partly why for the last 11 years the United States has put RFID chips in the back panel of its passports, creating so-called e-Passports. The chip stores your passport informationlike name, date of birth, passport number, your photo, and even a biometric identifierfor quick, machine-readable border checks. And while e-Passports also store a cryptographic signature to prevent tampering or forgeries, it turns out that despite having over a decade to do so, US Customs and Border Protection hasn't deployed the software needed to actually verify it.

This means that since as far back as 2006, a skilled hacker could alter the data on an e-Passport chiplike the name, photo, or expiration datewithout fear that signature verification would alert a border agent to the changes. That could theoretically be enough to slip into countries that allow all-electronic border checks, or even to get past a border patrol agent into the US.

...and they need a wall.


Original Link: http://feeds.boingboing.net/~r/boingboing/iBag/~3/YMe6QO6ZJ_g/us-customs-and-border-patrol-m.html

Share this article:    Share on Facebook
View Full Article