The Smart Card Alliance's assurances are pure snake oil.

The amount to saying:

1. It's OK that if the chip is compromised, because another, unrelated control will be there too

2. The data on the chip can be certified as having come from the nation's passport authority.

So what? If the data was copied in a usable form, then whether its source can be verified is immaterial.

If clowns like this are even let into the building at DHS, then God help us all.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/newsbriefs/276/1275#1275