as more and more commercial players are announcing eID buy-in to process their customers' identities.

border control is just one of many applications of the eID, there are many others where only part of the data is processed and impersonation is just too easy with all we know now !

This means fo...

[ more ]  [ reply ]

The two countermeasures mentioned above can both be defeated by the fact that there is a human agent in the middle of the process. The agent compares the digital and printed information. The agent could be sloppy, tired or a co-conspirator. The big caveat with the second measure is "if the keys a...

[ more ]  [ reply ]

The Smart Card Alliance's assurances are pure snake oil.

The amount to saying:

1. It's OK that if the chip is compromised, because another, unrelated control will be there too

2. The data on the chip can be certified as having come from the nation's passport authority.

So what? If the d...

[ more ]  [ reply ]