Fresh articles

» Strange Martian crater
» 100 Petabits per second
» Artificial life created
» Space rock contains organic molecular feast
» 10 Failed Doomsday Predictions
» Universal phone charger
» Moon buildings
» Epassports RFID danger
» 500Gb optical
» Asteroid near earth

 
 

 
 

 Index

Sexy things-> Sexy things (4)
Bulk-> Bulk (15)
Technology-> Technology (41)
Space-> Space (35)
UFO-> UFO (5)
Funny-> Funny (4)
Earth Life-> Earth Life (9)
Internet-> Internet (10)
Health-> Health (1)

 
 

 
 

 Most popular

»X-ray
»Scientists Levitate Small Animals
»500Gb optical
»Moon buildings
»Russia building nuke barge to power Arctic
»Spectacular new images of Mars
»Galaxy Collision
»Sings in countries
»How Cells Store Fat
»Play Video Game Just By Thinking

 
 

 
 

 Other articles

»ASA Orbiter Reveals New Details of Mars, Young and Old
»New Arctic Inhabitants: Trees
»Windows Vista failures
»Plastic back to oil
»No sun link to climate change
»New Wiki
»Full Moons and Injuries
»U.S. Population Passes 300 Million
»Jupiter details
»Moon buildings
»Super Computer
»Wireless recharging
»UFO Photographed over Capilla del Monte, Argentina
»Arctic melt
»Second-Life market
»CERN Pictures
»Are your Web surfing fingers getting tired?
»Moon total eclipse
»Ocean Discovered Inside Earth
»Scammer jailed

 
 

 
 

Searched
peliculas pormo gratis
red tube vidio porno
liseli pono izle
SEKSİ FİLM
videos pormo gratis
porrn video gratis
pormo film seks video
sikiÅŸ filimi
tube 8 prono +18
ver videos de pormo gratis
filim izle seks
poron videos 18
erotika seks video free
89 porrn video
sikiÅŸ
filme pono gratis
pormo film seks video 2010
erotika seks video youtube
bedava fılm ızle
x videos pornos
sikiÅŸ 21
x videos pornos gratis
sikiÅŸ form
poron videos 18 izle
pormo film
erotika seks video youtube 18
video pormo gratis
redtube porrn video
seks video
videos pornos gratis
sikiÅŸ porna
sikiÅŸme
Seks Izle Bedava
analseks fİlİmlerİ
youporrn. com 18
erotika seks 18 video
erotika seks video film
videos pormo gratis you tube
tube 8 prono site free videos
porrn video
youporrn free video
porno sikiÅŸ
google videos pornos gratis
videos pormo gratis male
türk pormo
sikiÅŸ filmi izleme
google videos pormo gratis
poron video 18
redtube porrn video gratis
türk pono
porna filim
erotika seks +18 video
animals seks video
pormo film 18
sikiÅŸli filim
sikiÅŸ filmi
ver videos pormo gratis
filme pono gratis youtube
videos xxx gratis
bedava pono izle
sikiÅŸ porno
18 seks video
seksfilimi
peliculas pornos en youtube
youporrn free video x
youtube.porno
tube 8 prono free videos
x videos pono gratis
sex sikiÅŸ
sikiÅŸ filimleri
videos pormo grati
sikiÅŸ videosunu izle
peliculas porno gratis
sikiÅŸ videosu
ÅŸikiÅŸ izle
analseks video izle
animal porno ÅŸikiÅŸ
ÅŸikiÅŸ filmi izle
sikiÅŸfilimleri
tube8 prono site free videos
sikiÅŸ izle
sikişli türk filimi
sikişli türk filimi
videos pornos
türk sex izle
porno filim bedava
pornos gratis
pormo film seks video gratis
peliculas porno
peliculas pormo
erotika seks video
porno ızle
erotika seks video izle
red tube porrn
ver filmes porno gratis
you tube videos pormo gratis
porrn gratis
videos de sexo anal gratis
erotika seks film
pormo film izle

 
 
 
 

The Risk of ePassports and RFID

Let's take a look at a few other things now possible with ePassports:

ePassports aid Data Theft:

The 3 meter barrier has recently been broken for reading RFID data (e.g. your ePassport data)
from a distance 3 meters away. Attacks always get better. They never get worse. The next barrier
is 5, 10 and 20 meters.

An attacker can read the data from your ePassport (while you walk in the street!) and can use
your credentials to authenticate himself or duplicate your passport.

ePassports aid Terrorism:

Thanks to the ePassports is it now possible to build Smart-IED's. A Smart-IED waits until
a specific person passes by before detonating or let's say until there are more than 10
americans in the room. Boom.

Do ePassports make you feel more safe now as the government says they would do?
Breaking in?
The weakness is in the way the system has been rolled out. The terminal accepts
self-signed data.

This attack is different to the grundwalk attack. VonJeek's attack makes it possible to copy,
forge and modify the data so that it is still accepted as a genuine valid passport by the terminal.

Using a Certification Authority (CA) could solve the attack but at the same time
introduces a new set of attack vectors:

1. The CA becomes a single point of failure. It becomes the juicy/high-value target for the attacker.
Single point of failures are not good. Attractive targets are not good.

Any person with access to the CA key can undetectably fake passports. Direct attacks, virus,
misplacing the key by accident (the UK government is good at this!) or bribery are just a few
ways of getting the CA key.

2. The single CA would need to be trusted by all governments. This is not practical as this
means that passports would no longer be a national matter.

3. Multiple CA's would not work either. Any country could use its own CA to create a valid
passport of any other country. Read this sentence again: Country A can create a passport data
set of Country B and sign it with Country A's CA key. The terminal will validate and display the information
as data from Country B.

This option also multiplies the number of 'juicy' targets. It makes it also more likely for a CA key to leak.
Revocation lists for certificates only work when a leak/loss is detected. In most cases it will not
be detected.

Note: The last item received some comments. Some readers suggested that this can be fixed. Yes,
of course, any system can be fixed. Indeed it would be a first good step by the terminal to check
that a passport from country A is also signed with the CA key of country A and not by the CA key of
country B.

The current implementation and plans make it unlikely that this will be implemented securely. In the
end we are trusted those people who gave out ePassports that can be read by anyone and not just
authorized terminals. We are trusting those people who say that good security practice to verify
the validity of a passport is optional and not mandatory.

So what's the solution? We know that humans are good at Border Control. In the end they
protected us well for the last 120 years. We also know that humans are good at pattern
matching and image recognition. Humans also do an excellent job 'assessing' the person
and not just the passport. Take the human part away and passport security falls apart.
 Read this article Email this article

Article ©2009-05-06 22:15:30 News, Technology, Space, Science - Breaking News and interesting storiesShare

 
 

 
 
 
 

You need to login first



Satellite Shooted down

 
  Did you know?...

- Women in ancient Egypt prevented pregnancy with
plugs made of crocodile droppings?

- Based on artifacts and cave paintings, Ice Age women were likely to enjoy sex as much as their male mates?

- In 2005, the average first time for US girls occurred at the age of 17?

- Known aphrodisiacs of the food world include chocolate, oysters and spicy foods?

- That females have a weaker sex drive than men is a  cultural misconception?

- The most common sexual problem among men is premature ejaculation?

- It is a common misconception that pregnancy can’t occur without male orgasm?

- Whether put to use or not, males produce about 300 million sperm every day?
 
 

 
 

 Visit:

CNN Page

NASA Page

BBC UK

Google News

World of Warcraft News

Romanian Web Hosting

Romanian Domain Registrar

.BIZ Domain Registrar

Advertising

Funny Things

Golden Sands Bulgary

Web Hosting News

Web Hosting Romania

Gadgets Resources

Top Video Games Online
 
 




Members

Username
Password:

[New account] [Forgoten password]


 
 

Keyword:

 
 

©03-Sep-2010