>From - Sat Mar 02 00:57:22 2024
Received: by 10.180.207.18 with SMTP id e18mr137443bkg.4.1231873141296;
Tue, 13 Jan 2009 10:59:01 -0800 (PST)
Return-Path: <tsc..._at_shaddack.mauriceward.com>
Received: from 121.235.cust.netway.cz ([85.239.235.121])
by mx.google.com with ESMTP id 3si63686fgg.7.2009.01.13.10.58.59;
Tue, 13 Jan 2009 10:59:01 -0800 (PST)
Received-SPF: pass (google.com: domain of tsc..._at_shaddack.mauriceward.com designates 85.239.235.121 as permitted sender) client-ip=85.239.235.121;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of tsc..._at_shaddack.mauriceward.com designates 85.239.235.121 as permitted sender) smtp.mail=tsc..._at_shaddack.mauriceward.com
Received: (qmail 4032 invoked by uid 0); 13 Jan 2009 19:58:57 +0100
Date: Tue, 13 Jan 2009 19:58:57 +0100 (CET)
From: Thomas Shaddack <tsc..._at_shaddack.mauriceward.com>
To: TSCM-L2006_at_googlegroups.com
Subject: Re: [TSCM-L] {3257} Re: new passport 'card'
In-Reply-To: <BLU149-DS1965632F9F9EB97E80884BCD90_at_phx.gbl>
Message-ID: <0901131942190.0_at_somehost.domainz.com>
References: <BLU149-DS31A90619487837F69DCDEBCD90_at_phx.gbl>
<0901131848290.14723_at_somehost.domainz.com> <BLU149-DS1965632F9F9EB97E80884BCD90_at_phx.gbl>
Mime-Version: 1.0
Content-Type: TEXT/PLAIN; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
The sleeve seems to be just a piece of conductive material. As it's=20
government-issued, I don't expect it to be mu-metal, therefore attenuating=
=20
the signal significantly but not fully; the magnetic field will get=20
through. I can vividly imagine a coat rack in a pub, with a beefed up=20
reader coil hidden behind the wooden panels on the wall...
I did some experiments with a 125 kHz reader. A naked card was readable=20
from 15 cm. A card wrapped in aluminium foil was readable from a=20
centimeter or two. A card laid on a steel sheet was readable from similar=
=20
distance. A card sandwiched between two thin steel sheets was totally=20
unreadable.
I assume qualitatively similar (but higher attenuation) results for 13.56=
=20
MHz chips.
Then there's the issue of listening to the communication between a chip=20
and a "legitimate" reader. I assume that such passive listening could be=20
possible from significant distances.
> Tom,
> Your forgetting the 'protective sleeve' that is used to thwart such attem=
pts!! hahaha
>=20
> ----- Original Message -----=20
> From: Thomas Shaddack<mailto:tsc..._at_shaddack.mauriceward.com>=20
> To: TSCM-..._at_googlegroups.com<mailto:TSCM-..._at_googlegroups.com>=20
> Sent: Tuesday, January 13, 2009 11:54 AM
> Subject: [TSCM-L] {3256} Re: new passport 'card'
>=20
>=20
>=20
>=20
> ....and, it will be clonable.
> And hackable.
>=20
> Heck, it probably already is.
> http://www.vnunet.com/vnunet/news/2229073/researcher-hack-border<http:/=
/www.vnunet.com/vnunet/news/2229073/researcher-hack-border>
>=20
> Also some more RFID-related news.
> http://arstechnica.com/news.ars/post/20080807-faking-passport-rfid-chip=
s-for-120.html<
http://arstechnica.com/news.ars/post/20080807-faking-passpor=
t-rfid-chips-for-120.html>
> http://www.engadget.com/2006/08/03/german-hackers-clone-rfid-e-passport=
s/<
http://www.engadget.com/2006/08/03/german-hackers-clone-rfid-e-passports=
/>
>=20
> ....and there are more. WAY more.
>=20
>=20
>=20
>=20
> On Tue, 13 Jan 2009, Its from Onion wrote:
>=20
> > Now, mind you the new 'card's' RFID chips contains no 'personal' data=
. Not now anyway.=20
> >=20
> > And we all trust the government, right? "Have your papers, sir"
> >=20
> >=20
> >=20
> >=20
> >=20
> > _____________________________________________________________________=
______
> >=20
> > THE U.S. PASSPORT CARD IS NOW IN PRODUCTION!
> >=20
> > We began production of the U.S. Passport Card on July 14, 2008. To d=
ate, we have issued over 700,000 U.S. Passport Cards. Applications for the =
U.S. Passport Card are being processed in approximately 3 weeks from the ti=
me of application.
> >=20
> > The wallet-size passport card is convenient and less expensive than t=
he passport book. However, the U.S. Passport Card cannot be used for intern=
ational air travel. This new travel document can be used to enter the Unite=
d States from Canada, Mexico, the Caribbean, and Bermuda at land border cro=
ssings or sea ports-of-entry.=20
> >=20
> > Note: A current or previous passport book holder, who is eligible to =
use Form DS-82<
http://travel.state.gov/passport/forms/ds82/ds82_843.html<ht=
tp://travel.state.gov/passport/forms/ds82/ds82_843.html>> , may apply for a=
passport card as a renewal by mail<
http://travel.state.gov/passport/get/re=
new/renew_833.html<
http://travel.state.gov/passport/get/renew/renew_833.htm=
l>>. First time applicants<
http://travel.state.gov/passport/get/first/firs=
t_830.html<
http://travel.state.gov/passport/get/first/first_830.html>> for =
a U.S. Passport, and those not eligible to use Form DS-82, must apply for a=
passport card in person using Form DS-11<
http://travel.state.gov/passport/=
forms/ds11/ds11_842.html<
http://travel.state.gov/passport/forms/ds11/ds11_8=
42.html>>.=20
> >=20
> > The card has the same period of validity as the U.S. Passport Book: 1=
0 years for an adult and 5 years for minors under age 16. The card costs $4=
5 for a first-time adult passport applicant and $35 for all minor applicant=
s under age 16, regardless of whether they are previous passport book or ca=
rd holders. Adults who already have a fully valid passport book may apply f=
or the card as a passport renewal by mail<
http://travel.state.gov/passport/=
get/renew/renew_833.html<
http://travel.state.gov/passport/get/renew/renew_8=
33.html>> and pay only $20.=20
> >=20
> > To facilitate the frequent travel of U.S. citizens living in border c=
ommunities and to meet DHS's operational needs at land borders, the passpor=
t card contains a vicinity-read radio frequency identification (RFID) chip.=
This chip points to a stored record in secure government databases. There =
is no personal information written to the RFID chip itself.
> >=20
> > With RFID technology, Customs and Border Protection inspectors will b=
e able to access photographs and other biographical information stored in s=
ecure government databases before the traveler reaches the inspection stati=
on.=20
> >=20
> > The passport card uses state-of-the-art security features to prevent =
against the possibility of counterfeiting and forgery. In addition, a prote=
ctive sleeve is provided with each passport card to protect against unautho=
rized reading or tracking of the card when it is not in use.=20
> >=20
> >=20
> >=20
> > >=20
> >=20
>=20
> =20
>=20
> >=20
>=20
Received on Sat Mar 02 2024 - 00:57:22 CST