Monday, August 07, 2006

On vulnerabilities

The AP reports that the technology used in radio-frequency identification passports, which is exactly what the U.S. plans to use itself (and likely require of Canada in the name of compatibility), is already vulnerable to duplication:
A demonstration by German computer security expert Lukas Grunwald showed how personal information stored on the documents could be copied and transferred to another device.

It appeared to contradict assurances by officials in government and private industry that the electronic information stored in passports could not be duplicated.

“If there is an automatic inspection system, I can use this card to enter any country,” Mr. Grunwald said, holding up a computer chip containing electronic information he had copied from his German passport.
Not that it should be any surprise that the RFID system is much most others in having some significant vulnerability - particularly given the value to those who are able to find the problems. But the revelation should make it clear that the mere fact that the U.S. backs a security measure doesn't make that measure either invincible or indeed necessarily effective. And if that fact gets recognized on both sides of the border, then there will be all the less basis for the U.S. to continue pushing its passport-or-RFID-card plan on Canada.

No comments:

Post a Comment