[extropy-chat] RFID smartcard passports and driver's licenses

Samantha Atkins sjatkins at mac.com
Sun Apr 10 20:12:03 UTC 2005


On Apr 10, 2005, at 12:50 PM, Mike Lorrey wrote:

>
> --- Samantha Atkins <sjatkins at mac.com> wrote:
>>> Beyond this, the risk is that you have to trust any piece of
>> equipment
>>> that demands to scan you. This is vulnerable to man-in-the-middle
>>> attacks similar to the fake-ATM scam, where you would see some
>> kiosk
>>> providing some product or service you wanted (stamps, ATM, subway
>>> passes, concert/theater/airline/sports tickets, candy or other food
>>> vending, etc) that would demand your retina scan and a scan of one
>> of
>>> your payment cards for something real.
>>
>> The only equipment scanning you is on your person and owned by you
>> and is not broadcasting that information.  So such an attack is not
>> germane.
>
> How so? Is the government or credit agencies going to trust implicitly
> any equipment I own and control that simply says "He is Mike"??? Not
> bloodly likely. They want control of the equipment.

Having just enough access to confirm identity and having access to all 
your information are very different things.

- samantha




More information about the extropy-chat mailing list