Slashdot Mirror


Belgium Rolls Out Java ID Cards

An anonymous submitter points us to this page describing Belgium's rollout of Java-based smart cards as a national ID card.

274 comments

  1. I'm in conflict... by chrisseaton · · Score: 3, Funny

    "national ID card" : bad
    Java : good

    1. Re:I'm in conflict... by Anonymous Coward · · Score: 2, Insightful

      "national ID card" : bad
      Why is that bad? How is it any different from a damn driver's license in the states? It's not. You think a cop in one state can't get your info just as fast as one in another? And do you realize how much easier it would be to write software if the whole country used the same damn format? And how much easier it would be for you to have one number to remember?
      Java : good Java sucks. Slow junk. Ugly. You can always tell a Java app from another. Pathetic.

    2. Re:I'm in conflict... by Graspee_Leemoor · · Score: 1

      luke: I can feel the conflict within you, father! ID cards are good- Let go of your hatred!

      vader: I have decided java is bad. There is no conflict.

      graspee

    3. Re:I'm in conflict... by Anonymous Coward · · Score: 0, Troll

      Chill dude, he's obviously just saying that cos he's on slashdot.. u know 'trendy' to be a 'geek' (whatever the hell that is) n all that. slashdot geeks must love java. it's the done thing, just like hating microsoft!

    4. Re:I'm in conflict... by Anonymous Coward · · Score: 1, Informative

      Java sucks. Slow junk. Ugly. You can always tell a Java app from another. Pathetic.

      Hey, when you get down from your soap box, you might want to investigate Java as of the last...oh... 2+ years. It's not slow. It's not ugly. Get with the program.

    5. Re:I'm in conflict... by Anonymous Coward · · Score: 0

      slashdot geeks must love java. it's the done thing

      I thought the Slashdot way to do Java was to have the same confusion about what Java is, and what Swing is, every time the subject is brought up.

    6. Re:I'm in conflict... by stuffman64 · · Score: 3, Interesting
      "national ID card" : bad
      I agree that a national ID card is bad; we've been over it many times before. However, I am all for a national standard for driver's licences. I work at a fairly busy convience store at Penn State University, and oftentimes I have the privledge (if you can call it that) of selling cigarettes to help college students kill themselves faster. Since the town also has quite a large secondary school system, it is absolutely necessary to card everyone who buys cigarettes as not to sell to minors.

      Checking licences is quick, but is not as convienient as you may think. Since many students are out of state, I see at least 7 different states' licences (and thier many variations) at each shift. Every state has a different layout, orientation, and material (for instance, New Jersey licences seem to be nothing more than laminated paper, while PA licences are thick plastic cards). Worse yet, no state ever puts the date of birth in the same spot. While this may not seem like a problem at first, it is quite time consuming to constantly scan cards for DOB, picture, and expiration (as you cannot sell cigarettes to someone with an expired license).

      If everything was standardized, things would be much less time consuming. I know people become mighty frustrated when they have to hurry off to get drunk with their friends but need thier smokes right now. What would be so hard about having a standard layout? States could still embellish and add thier own features for security or other reasons, but to anyone who works with IDs all day, this would surely make life easier. The whole vertical layout for people under 21 is also a good idea, as it is really easy to tell if someone is of age by the orientation of the license, but it seems as this may be too easy to fake. Any ideas?
      --
      --- At my sig, unleash hell.
    7. Re:I'm in conflict... by Jameth · · Score: 1

      First off, it's not as easy for a cop in one state to get your info as it is for a cop in another state to get your info. If you get stopped in a different state, it'll usually take quite a while longer for them to pull up specifics.

      More importantly, though, ID cards and Driver's Liscences are NOT the same.
      That's why JUST a drivers liscence isn't valid ID for lots of things. A drivers liscense only has:
      Name
      Date of Birth
      Sex
      Eye-Color
      Photograph
      Weight when you got it
      Address when you got it
      [ it can include anatomical gift info ]

      Sure, that's a lot, but it isn't everything, nor is it tied into every major database. Also, it isn't needed for anything besides checking that you can drive if you are pulled over. There are many other ID types that can be used for other purposes, such as social-security-number and student ID cards (yes those are valid for lots of things).

    8. Re:I'm in conflict... by jackb_guppy · · Score: 1

      Electric Flow:Bad
      Electric Flow though Smart Card:Not Smart Card

    9. Re:I'm in conflict... by VanillaCoke420 · · Score: 1

      Some people think I'm a geek, yet I don't like Java. I think the programming of me failed.

    10. Re:I'm in conflict... by Threni · · Score: 1

      Its bad because you are expected to be accountable to the authorities, rather than what happens now, in most countries, which is that they are accountable to you. If you`re committed no crime, been charged with nothing, you need say or do nothing.

      Anyway, you missed the more obvious error in his post:
      Java : good!

      everybody knows that C++ would have been a much better choice of language!

    11. Re:I'm in conflict... by kauff · · Score: 1

      FOX: Great

      Erm..."d'uh", I guess

      [...]

      --

      - Does it have a MIDI Interface?
      - What's MIDI in your face?

    12. Re:I'm in conflict... by nutshell42 · · Score: 4, Insightful
      Well, let's take a short look at my ID (German), it contains:

      photograph
      name
      date and location of birth
      nationality
      date of expiry
      signature
      address
      height
      eye-color
      the authority which validated it
      and the date when it was printed

      So, which thing exactly is so much worse about that than about your driver's license?

      --
      Don't think of it as a flame---it's more like an argument that does 3d6 fire damage
    13. Re:I'm in conflict... by Daleks · · Score: 4, Funny
      Java : good
      Exception in thread "main" java.identity.IdentityNotFoundException:
      Try explaining that to the police at 2AM.
    14. Re:I'm in conflict... by Anonymous Coward · · Score: 0

      A national ID card would be an awesome idea though. You could have standard readers at all stores like yours that you just swipe it through to validate the age. It could also check at the same time to see if there are any outstanding warrants or other violations on the person, take an automatic snapshot of them at the register, and then upload it to a central database while alerting police silently if necessary. This would allow tracking potentially dangerous people as they move throughout the area.

    15. Re:I'm in conflict... by tealover · · Score: 1, Funny

      Yeah, but German id cards are used to round up jews whenever war breaks out.

      --
      -- You see, there would be these conclusions that you could jump to
    16. Re:I'm in conflict... by Anonymous Coward · · Score: 0

      Apart from that's a lie.

    17. Re:I'm in conflict... by vrt3 · · Score: 2, Insightful
      I don't really get this: you hate national ID cards, but you have no problem with using driver licenses as an ID? Only difference I see is that someone who doesn't learn how to drive (assuming that such people exist in your country) doesn't have a driver license.

      Frankly, I don't really see what's so wrong with national ID cards. Perhaps it's just because I'm so used to it (I am from Belgium), but could someone explain why they are such a bad thing?

      --
      This sig under construction. Please check back later.
    18. Re:I'm in conflict... by Anonymous Coward · · Score: 2, Interesting

      Really.

      "Today is the deadline for males from the second round of Arab and Muslim countries and North Korea to register with the United States immigration authorities under new security rules. Amnesty International is calling on the US authorities to ensure respect for the human rights of non citizens and to review the special registration process to ensure that it is administered fairly and complies with the principle of non-discrimination under international law."

    19. Re:I'm in conflict... by nutshell42 · · Score: 1

      How? No religion on them - now have a guess why =)

      --
      Don't think of it as a flame---it's more like an argument that does 3d6 fire damage
    20. Re:I'm in conflict... by Anonymous Coward · · Score: 0

      It's a good idea to track immigrants. Specially those from nations you've labeled as supporting terror.

    21. Re:I'm in conflict... by lseltzer · · Score: 1

      No, you dipshit. Foreign nationals (i.e. non-citizens) from certain countries, including muslim countries, have to register. None of this applies to US citizens and it's not specifically because of their ethnicity or religion. Non-arabs and non-muslims from these countries have to register too.

    22. Re:I'm in conflict... by dadragon · · Score: 1

      My driver's licence contains my date of birth, signiture, address, height, expiry date, and eye colour.

      Anything else is too much information for a drivers licence.

      --
      God save our Queen, and Heaven bless The Maple Leaf Forever!
    23. Re:I'm in conflict... by Anonymous Coward · · Score: 0

      Well, apart from North Korea, they're all arabic countries. I can't find any figures off hand, but I'd guess well over 90% of those people are muslim. This is just the same as descriminating from someone based on what suburb they have on their address, knowing that that neighbourhood is lived in mostly by, for example, blacks (the same thing happens with Catholics in Northern Ireland).

    24. Re:I'm in conflict... by Anonymous Coward · · Score: 0

      You're missing the point entirely then.

      You shouldn't be carding the poor kids in the first place.

    25. Re:I'm in conflict... by Frymaster · · Score: 1
      "national ID card" : bad
      Why is that bad?

      dude. you're posting as an ac and you're asking why mandatory id is bad?

      How is it any different from a damn driver's license in the states?

      becasue a driver's license is for driving which is entirely optional. an id card is just for every day existing which is not. i don't know about in the us (you guys have gone a little "security" crazy recently) but in canada, if you're not driving you are not required to carry a driver's licence.

      And how much easier it would be for you to have one number to remember?

      more difficult than having none to remember.

      Java sucks. Slow junk

      people who have done actual research beg to differ

    26. Re:I'm in conflict... by DanThe1Man · · Score: 1

      yes, and the Jews shouldn't have caused the loss of WW1 for the Germans.

    27. Re:I'm in conflict... by Anonymous Coward · · Score: 0

      God that's funny. A ha ha... ha. Stop it. No really.

    28. Re:I'm in conflict... by Phroggy · · Score: 1

      and expiration (as you cannot sell cigarettes to someone with an expired license).

      I've never understood this. The point of checking ID is to verify that you're above the legal smoking age, right? The point of the ID expiring is to make sure the info stays current, but your DOB isn't gonna change. So, if the only reason to check ID is to verify DOB, then why isn't an expired ID sufficient verification of your DOB?

      --
      $x='S24;r)>63/* h@<5+oZ)32"5cz';$me='phroggy'x$];
      $x=~y+ -xz+\0-Tx+;print$_^chop$me for split'',$x;
    29. Re:I'm in conflict... by Anonymous Coward · · Score: 0

      exactly.

    30. Re:I'm in conflict... by Anonymous Coward · · Score: 1, Insightful

      The "from" means that they're not US citizens, otherwise they'd be "from" the US (whether nationalized or born here).

      If you're a visitor to someone else's home, then they have a right to track you while you're in their home. If you don't like that, don't visit their home.

    31. Re:I'm in conflict... by Anonymous Coward · · Score: 0

      All states allow you to get an ID that is just like a driver's license except you can't drive with it.

    32. Re:I'm in conflict... by Anonymous Coward · · Score: 0

      It's to make sure that the picture stays current. A lot of younger kids look like their older siblings at an older age.

    33. Re:I'm in conflict... by MillionthMonkey · · Score: 1

      i don't know about in the us (you guys have gone a little "security" crazy recently) but in canada, if you're not driving you are not required to carry a driver's licence.

      You don't need to carry a driver's license around. You just need one while you're actually driving. And even that varies from state to state. Usually you need to be able to produce the license on demand when you're pulled over. I know that in New Jersey if they catch you driving without the license on your person, you might as well be an unlicensed driver. In other states (e.g. Pennsylvania) the requirement is that you must produce the license within 24 hours of being pulled over.

      State governments always like to emphasize that driving is a "privilege, not a right" (which puts driving in the same category as eating). Although it's a privilege that everyone expects. In general, it's very easy to get a diver's license in the U.S. You can be on acid and get one.

      Although I lost my license for three years because of epilepsy. Most state governments (e.g. New Jersey, California) require your neurologist to inform the DMV if he knows you had a seizure. While this sounds like a good policy, it creates an enormous incentive to lie to your doctor and underreport seizures, which leaves you dangerously undermedicated. I was unlucky enough to actually have a seizure in the doctor's office, so that's how they busted me. In the intervening period I ended up getting a non-driver ID because there were so many situations where I needed one. Usually they're required by non-state entities- it's hard to open a bank account or rent a video without a photo ID from the state.

      Credit cards are quickly acquiring this status of de facto required ID as well- which is really annoying since those three years of not being able to drive effectively destroyed my credit rating. Just last week I was stranded at an airport because I couldn't produce a major credit card at an Alamo car rental counter, despite having had a reservation for weeks. Apparently they've had this policy since June, but their website doesn't mention it. I guess they like surprises.

    34. Re:I'm in conflict... by Anonymous Coward · · Score: 0

      He's being sarcastic you idiot. The Nazis blamed the Jews for Germany losing WW1.

    35. Re:I'm in conflict... by anonymous+cupboard · · Score: 2, Informative
      Easy, your id no can be used to access your registration with the tax authority (Finanzamt). In Germany, you pay tax to the church that you belong to (Can I put 'Open Source' as my religion) which is collected by the tax authority to benefit the church. Incidentally, this is the Scientologists beef, they aren't recognised to be ablt to do this.

      It means that although the id card doesn't carry religion, it is relatively easy to determine this from the files and possible for a possible future government to overstamp the id.

    36. Re:I'm in conflict... by Anonymous Coward · · Score: 0

      That it's maintained by the federal government and not a local government. Drivers licences in the US are managed by the individual states and not the federal government. Up until now this information has not been automatically shared with the federal government, although some states are starting to.

      Compartmentalization of information is good.

    37. Re:I'm in conflict... by Anonymous Coward · · Score: 0

      Great troll! Too bad nobody took the bait :(

    38. Re:I'm in conflict... by Minkey+Brines · · Score: 1

      Nothing. That's the problem. They're both just as bad. For the good of all people, NOTHING should be used as *universal* identification. It's too dangerous in the hands of any (past, present, or future) government. This also goes for Social Security Numbers, or any other number we're dumb enough to be convinced by the clerk caste that we must provide upon demand.

      Why does this then occur? It's about power. OF COURSE governments know better. It's just another way to take advantage of the common man. If you can identify him, you can know where he goes, what he does, and practically treat him like a criminal *before* he does a crime. How efficient!

      Why, in free countries, do we citizens let this happen? It's because we're sheep. We're more ruled by our petty material desires and our fear than by a sense of justice and a sense of goodness borne out of a connection to our fellow man.

      Universal identification = ultimately efficient and ultimately dangerous

      It's a sick, sad world. However, just knowing that doesn't help. Doing something about it might.

    39. Re:I'm in conflict... by Minkey+Brines · · Score: 1

      So says the clerk caste...

      In essence: (begging ensues) "Please, pretty please make my job easier by sacrificing another of your freedoms"

      So also says the police caste and the politician caste and the...

    40. Re:I'm in conflict... by Anonymous Coward · · Score: 0

      you dumb, bitch. i was being sarcastic, too.

    41. Re:I'm in conflict... by Anonymous Coward · · Score: 0

      Um, dude, don't cigarettes kill EVERYONE faster, college student or not? You should find a different occupation...or do you do you find your career of convenience store clerk financially rewarding and intellectually stimulating?

    42. Re:I'm in conflict... by stuffman64 · · Score: 1

      How would making state's ID cards physically similar sacrifice freedom? I never said to make a national ID card (which I am against), only to have ID cards use a common formatting. Read a little deeper next time, please.

      --
      --- At my sig, unleash hell.
    43. Re:I'm in conflict... by Anonymous Coward · · Score: 0

      (as you cannot sell cigarettes to someone with an expired license).

      So... If someone has a valid license that states they are above the minimum age for purchasing cigarettes, and then their license expires...

      Do they suddenly drop below the minimum age again?

      If so, does it also remove the fine lines and wrinkles that come with age (not to mention the male pattern baldness)?

    44. Re:I'm in conflict... by hesiod · · Score: 1

      > This is just the same as descriminating...knowing that that neighbourhood is lived in mostly by, for example, blacks

      No, it's like discriminating based on location because that location has more criminals.

    45. Re:I'm in conflict... by hesiod · · Score: 1

      > Why, in free countries, do we citizens let this happen? It's because we're sheep

      Bull... It's not because we're sheep, it's because most of the people are too F*%#!ng lazy to think for themselves. They'd rather go about their day-to-day lives, sitting on their asses and believing there is someone in charge doing "good" things.

      Every time a generalization is made it is wrong.

    46. Re:I'm in conflict... by alexpage · · Score: 1

      Gah, I'm in conflict too... I support ID cards but dislike Java!

  2. National ID cards by martyn+s · · Score: 4, Funny

    I hope the U.S. and A. uses C# for our National ID cards!

    1. Re:National ID cards by Blaine+Hilton · · Score: 4, Funny

      With all of the .net security holes we could choose to be anybody....

    2. Re:National ID cards by inertia187 · · Score: 4, Funny

      With all of the .net security holes we could choose to be anybody....

      They tried it. It's called Microsoft Passport.

      --
      A programmer is a machine for converting coffee into code.
    3. Re:National ID cards by Anonymous Coward · · Score: 0

      no... I dont want people signing me up for credit cards and crap

      Delivery man: errm, heres your package. **package is a large sex toy or something embarresing like that, clearly written on it Ordered by Joe

      Joe: I didn't order that shit

      Delivery man: but its got a tracker sticker thingy on it like when you use your id card to verify your order

      Joe: fuck.. my card got hit again.. time to get another id, thats the 4th time this month

    4. Re:National ID cards by ergo98 · · Score: 1

      Um...which .NET security holes would that be? References please.

    5. Re:National ID cards by SweetAndSourJesus · · Score: 1

      Never let the facts get in the way of a good Microsoft bashing.

      --

      --
      the strongest word is still the word "free"
    6. Re:National ID cards by The+Analog+Kid · · Score: 1

      I'll be Neil Peart, or Ozzy Osbourne. Juuuuuuskthjja....SHARON!

    7. Re:National ID cards by rbolkey · · Score: 1

      Yes, but with the DMCA, you're not allowed to steal anyone's identity using the default password, "password". ::knock, knock:: Whoops ... I've said too much.

    8. Re:National ID cards by owlstead · · Score: 1

      Actually, they tried to build a Smartcard OS once themselves, and failed. But no worries, they still have the mobile phone, pda, touchscreen and - last but not least - the gaming industry to play around with. --- boolean sig = false;

  3. yeah by Anonymous Coward · · Score: 1, Funny

    Well its about time humanity cracked down on indentification

  4. Can it be updated with GJC? by RLiegh · · Score: 0, Troll

    Well, can it? ;)

    1. Re:Can it be updated with GJC? by robslimo · · Score: 3, Insightful

      Say... by my reckoning and based on your sig, you oughta be posting AC. Freakin' troll.
      - - - - - - on a more serious note - - - - -

      Having Read The Fine Article and a few earlier posts, I'd have to say:

      (a) National ID's are bad (good)
      (b) Java is bad (good)
      (c) how the bloody hell is anyone going to make 'smart cards' smart enough to prevent [ID] theft?

      If, after all these years, Hughes (DirecTV) and others have not been able to prevent signal theft using 'smart card' technology, how safe should we feel entrusting our personal identification to this tech?

      "Ohh!," say some, "this is safer yet than the old methods of identifying us to our government. This is much safer than an easily forged picture ID."

      But this technology *is* assumed to be 'safer'. It is assumed to be (and marketed as) 'secure'. That also means that our govn'ts may assume that it is *true*. If a transaction, waypoint in your vacation journey, or an arrest is logged in your 'Nat'l ID' account, it will be assumed to be true... because it's safe and secure technology, right? They may be much less likely to doubt any misinformation in you recored, so think again about DTV and how secure their system is. Please think.

    2. Re:Can it be updated with GJC? by quax · · Score: 1

      There is something very wrong in the overall picture if you can not trust your own government to not abuse a national ID card.

      Can't blame you though, I wouldn't trust it either. Pretty sad state of affairs.

    3. Re:Can it be updated with GJC? by robslimo · · Score: 1

      For the most part, I was not referring to trusting the government, but to trusting 'smart card' technology too deeply. If a 'smart card' ID is assumed to be secure, those whose security has been compromised may be assumed to still be secure... making the compromise potentially more damaging.

      Regarding trusting the government... The USA was founded by a bunch of 'nuts' who carefully crafted its constitution to prevent that very same government from becoming the same sort of tyranny(s) that they fled before. And for that, I thank them

    4. Re:Can it be updated with GJC? by quax · · Score: 1

      The USA was founded by a bunch of 'nuts' who carefully crafted its constitution to prevent that very same government from becoming the same sort of tyranny(s) that they fled before. And for that, I thank them

      There is no doubt that these "nuts" deserve the greatest praise, having shown the world that a more free, secularly organized society can function on the greatest scale. Yet, I can not help but feel that the process how a president gets elected could need some adjustment. I think it doesn't make all that much sense anymore, that the importance of your weight entirely depends on where you live. It is like the USA were the first to implement a working system for a democratic society, lets say v1.0. Most other civilized countries are now running version 5.x with lots of cool new features but the USA never bothered to update.

  5. Belgium?! by Chocaholic · · Score: 0, Flamebait

    I suppose you could hack them to find out if there really are any famous Belgians. OTOH, Belgium, for goodness sake - who would *want* to hack them?!

    1. Re:Belgium?! by jay-be-em · · Score: 2, Informative

      The most beautiful woman in the world, audrey hepburn, was born in Belgium, iirc.

      --
      "Orthodoxy means not thinking--not needing to think. Orthodoxy is unconsciousness." --Eric Blair
    2. Re:Belgium?! by bart_blabla · · Score: 2, Funny

      If we look at your passport picture, I suppose it's for your own sake that those things are hidden on a Java card.

      Greets from Belgium.

    3. Re:Belgium?! by Gorgonzola · · Score: 1

      Wrong, that was that little country north of Belgium, AKA the Netherlands.

      --
      -- Spelling and grammar errors tend to be a sign of erroneous thinking.
    4. Re:Belgium?! by Anonymous Coward · · Score: 0

      The most beautiful woman in the world, audrey hepburn, was born in Belgium, iirc.

      Yes, and smartly she moved to the United States.

    5. Re:Belgium?! by VanillaCoke420 · · Score: 1

      According to IMDB Audrey was born in Belgium. And I agree with the other poster; yes she was very beautiful.

    6. Re:Belgium?! by Gorgonzola · · Score: 1

      Yup, I stand corrected. According to her biography she was born in Brussels to a Dutch mother and a English father. That's the bit in my memory that got me mistaken. There wasn't a whole lot Belgian to her anyway.

      --
      -- Spelling and grammar errors tend to be a sign of erroneous thinking.
    7. Re:Belgium?! by Chocaholic · · Score: 0

      Hey, thanks man!

      "Uh?", you say, "why is this dude thanking me for flaming him?"

      Ah well. I was in a leetle bet last night - whether it was actually possible to flamebait Slashdot without invoking Godwin's Law. So, while my friend anxiously worked out whether he did actually have enough money to buy me a full bottle of Scotch, I flamebaited away - the rules of the bet saying that it had to be on the most recent story.

      It was touch-and-go early on - I got modded down as flamebait, but the follow-ups were all eminently reasonable. And then, BAMF! A flame!

      So, thanks man, you won me a bottle of whisky. It *is* possible to flamebait Slashdot - but only just.

      Yeah, I was bored.

      Hello Belgium, I've actually got nothing against you at all! :)

    8. Re:Belgium?! by matthiasvangorp · · Score: 1

      René Magritte was a belgian, and since everyone keeps asking, someone made a website about it.

    9. Re:Belgium?! by jawtheshark · · Score: 1
      Hey, thanx for the site! Really cool!

      Some americans should be reminded of this famous belgian . Many people think it's an american invention...

      --
      Ahhh...the great dumpster continuum. Many a free computer will be found there. -- sowth (748135)
  6. Well, by Subnirvana337 · · Score: 5, Insightful

    I always thought the term smart card was a bit..Oh I don't know, unfounded? It has a digital signature, great, what happens when it's stolen? And used against the owner? I'd like to see a card that had an image of your retina so they could tell if it was you, the eye has so many patterns, its almost impossible to fake. Cosmetics can already make someone look like someone else, but they havent figured out to replicate the eye yet...

    1. Re:Well, by neurostar · · Score: 2, Informative

      Well, there's ways to fool retina scans IIRC. Bruce Schneider talked about one method a while back...

      neurostar
    2. Re:Well, by Subnirvana337 · · Score: 3, Interesting

      I did see Minority Report, that's very true...Identies will ALWAYS be stolen, if people are determined to do something, they will. I quote Jimmy Buffet "Keys and locks are destined to be busted." By making it harder for the average person (or con "artist") to do some illegal, they'll work that much harder..

    3. Re:Well, by adamruck · · Score: 1

      thats true.. eyes and fingers are much harder to steal then cards

      --
      Selling software wont make you money, selling a service will.
    4. Re:Well, by primus_sucks · · Score: 3, Interesting

      Personally I've had two identity theft incidents. One time someone in Japan (I'm in the US) used my credit/debit card number and cleaned out several thousand dollars from my bank account. Another incident, someone printed or obtained fake checks with my name on them. With the present system anyone with a laser printer can make checks and anyone who works at restaurant or gas station can collect credit card numbers. At least this system will hopefully make it harder. And hopefully if someone does steal your card or something you won't be held accountable for damages.

    5. Re:Well, by itchyfidget · · Score: 1

      The point is, it doesn't matter how identity is encoded - the rate-limiting step is the intelligence of the user (that's us). And users will mislay cards, or have them stolen.

      I'm not in favour of ID cards in any form, because they can very easily be abused, and also used to deny basic rights to non-holders.

      I live in the UK, where the introduction of ID cards is currently under consideration. I wrote to my MP recently about my concerns; he forwarded it to the Home Secretary and eventually I got back a secretary's letter which read along the lines of "Thank you for your views. Now f*** off."

      If ID cards were introduced here, I'd want to see some kind of photographic identifier on the card. My debit card was swiped and copied last year and the thieves ran up about £1K ($1.5K) in a day. A simple mandatory photographic ID on cards would stop this kind of fraud, and potentially also halt the abuse of ID cards. But let's hope it never gets that far.

      --
      Mod early, mod often.
    6. Re:Well, by MourningBlade · · Score: 2, Informative

      There are all sorts of ways to secure identity. Most good smartcard rollouts specify an interaction protocol, and the data required, and let the individual implementors come up with something to please people.

      Most people don't know just how much damage you can do with just someone's phone bill, and that's usually much easier to steal than their birth certificate.

      The point is that there are many, many areas of poor security. Expecting a smartcard (which can be de-activated under many systems, unlike a phone bill or a birth certificate) to have a level of security as good as, or better than, a safe enclosed in concrete and buried in the Marianas Trench is a bit much.

      Yes, that was hyperbole.

      The thing is that most people tend to freak out whenever we put something security-related on a digital medium. Chill out.

      If you do it correctly, you can have the cards not contain any information beyond keys used to access and prove identity. Those keys can be changed. Quickly (again, barring incompetence, which your example of biometrics does as well - if you have an incompetent bioreader, you will be locked out of your card. Bioreaders are much more complex than, say, a 4-key pad).

      Security should be leveled. No one layer is enough. The basic security model of a good smartcard system goes something like:

      • You have to have the card.
      • You have to know something to use the card.
      • Even if you could somehow get to the information on the inside of the card, it wouldn't do you any good after time t.

      You could optionally enhance this out to include:

      • You have to have the card.
      • You have to have something that's only with you to use the card (your face, your eye, your thumb).
      • You have to have a prior arrangement regarding your card and the specific place you are going to.
      • Your card, and your information to get to use the card has to match up with the information on file with the specific place you are going to.
      • You have to know something to use the card.
      • Even if you did have all of that, the keys on the card are automatically deactivated every t hours (24, 48, 72, 168, optionally with grace period).

      As you can see, the level of security can quickly be ramped up to "insane."

      Optionally, you could set a "policy identifier" that is part of the request sent to the smart card by the reader that states what meatspace authentication protocols were used. You could set your card to refuse anything that did not include certain checks.

      This is mostly a "polite" check, and by no means should deactivate the other parts of authentication. It's just to give the places you do business with a list of the things they should do. Sure, the business could lie about it. The only thing that would get them, though, would be permission to interface with the security methods on your card.

      As an idea of what could be done with this: you could have your smartcard set to have two keys. Depending upon the policy identifier, it would cause the smartcard to use either your low security key, or your high security key. The information you attach to each one could be different (two credit card numbers, one with a $200 limit, one with a $20,000 limit. Electronic cash, one with $20, one with $2,000).

      Anyway, just something to think about: don't concentrate so much on one layer of security, like biometrics. It can be fooled. The difficulty of fooling one authentication mechanism goes up linearly. The difficulty of fooling combined authentication goes up exponentially (consider: you know your boss's passcharacter, but could you: get his card, look like him, look like him enough to fool people at the place he normally shops at while they're looking at a picture of him on their monitor, do it all before that night and before he notices? Oh, and self-employed people can't compete in this test. ;-)

    7. Re:Well, by gskc · · Score: 1

      Having physical ownership of a smart card probably doesn't enable you to go around using the card (even if the picture on the card resembles you very closely) -- you'd need to know the PIN stored in the card in order to go around signing digital documents, or making purchases. Furthermore, there is the mechanism for cardowners to get their ID card revoked when they discover that it is missing just like for credit cards. There is a .pdf white paper for these European electronic ID cards here

    8. Re:Well, by Anonymous Coward · · Score: 0

      I'd like to see a card that had an image of your retina so they could tell if it was you, the eye has so many patterns, its almost impossible to fake.

      Yeah, that sounds like a great idea. Until a one-eyed man steals your eye and puts it in his empty socket. Personally I'd prefer a sort of identification where stealing a body part is NOT a way of getting around it. Like signature recognition (also nearly impossible to fake if done well).

    9. Re:Well, by MourningBlade · · Score: 1

      If ID cards were introduced here, I'd want to see some kind of photographic identifier on the card. My debit card was swiped and copied last year and the thieves ran up about £1K ($1.5K) in a day. A simple mandatory photographic ID on cards would stop this kind of fraud, and potentially also halt the abuse of ID cards.

      Well, you said that they swiped and copied your card. How would a mandatory photographic ID help? I mean, if they copied it onto a card with THEIR picture, they'd still be home free.

      The only situation that would help in is if a) your photo was also stored by the credit card company, and compared to you as well as the photo on the card or b) the store makes a photocopy of your credit card with picture when you make a purchase (so there's a record for the cops. Not as trustworthy as above, but still a deterrent).

      A photo on the card is a good portion of security, as it does make the cards harder to forge. But it doesn't stop the kind of fraud you're talking about.

    10. Re:Well, by Dinjay · · Score: 1

      I always thought the term smart card was a bit..Oh I don't know, unfounded?
      The term "Smart Card" is suppose to reflect the fact that the card has a chip and therefore can process information. This is as oppose to the magnetic-strip cards which can only store information.

      It has a digital signature, great, what happens when it's stolen? And used against the owner?
      You can protect the information in the card with a password. The card can even be further protected by programming it to ask the User questions to which only the valid User would know the answers.

      I'd like to see a card that had an image of your retina so they could tell if it was you, the eye has so many patterns, its almost impossible to fake.
      This can be done by the smart cards and I believe some companies are already doing this. You can also use fingerprint information for even more security.

      --
      You break all the laws of physics and you seriously think there wouldn't be a price?
    11. Re:Well, by Tim+C · · Score: 2, Insightful

      the eye has so many patterns, its almost impossible to fake

      Interesting use of the word "almost" there. So, what happens if/when a method to fake arbitrary retinal patterns is developed?

      The great thing about usernames and passwords, PINs, etc, is that if you have reason to think that someone else knows it, you can change it. You can't change your retinal pattern, or any other biometric data.

      If someone manages to fake your thumb print or retinal pattern, you're stuffed - you can't change them, and if that's the only official method of identifcation, you can't even revoke them and use a PIN.

      Besides, the problem isn't people managing to copy retinal patterns, its people managing to fool detectors into accepting other patterns, or even a photograph of the correct eye...

    12. Re:Well, by Ed+Avis · · Score: 1

      You need to store the picture electronically on the card - then a card reader (a handheld computer, POS system or whatever) will display it on screen. All the data on the card is digitally signed by the guvmint. Then unless you know the private key it should be pretty impossible to forge ID cards.

      Ideally, there shouldn't be any information on the card which is not digitally signed - so it should just be a smooth piece of plastic with 'id card' on it. OK, maybe it would have some picture or cartoon of a bunny or mushroom or other abstract thing so that you could recognize your id card if you lost it - but it shouldn't have your name or address printed on the outside, because such information is liable to forgery.

      --
      -- Ed Avis ed@membled.com
    13. Re:Well, by watzinaneihm · · Score: 1

      Will they ban X-Ray machines now?

      --
      .ACMD setaloiv siht gnidaeR
  7. Hmm by CableModemSniper · · Score: 2

    The new mark of the beast?

    --
    Why not fork?
    1. Re:Hmm by AndroidCat · · Score: 1
      I get a flyer in the door once a year or so from those crazy "mark of the beast" loonies.

      Come to think of it, isn't their leader a guy called michael? Hmm.

      --
      One line blog. I hear that they're called Twitters now.
  8. Direct TV by synthox · · Score: 2, Informative

    Lets hope that a kid with a glitcher cannot reprogram these cards and steal identites like stealing satellite tv from Direct TV.

    --
    ~~Some people never go crazy what truly horrible lives they must lead.~~ Charles Bukowski
    1. Re:Direct TV by Cipster · · Score: 1

      I hope so, I could finally fulfill my life long dream of becoming Jean Claude VanDamme!!!

    2. Re:Direct TV by Old+Uncle+Bill · · Score: 1

      Yeah, and those folks have been working on card security for 10+ years and they are still weak. Good to see it's not just the US government that is pure evil.

      --
      Yes, I am an agent of Satan, but my duties are largely ceremonial.
  9. Java based??? by Beetjebrak · · Score: 4, Interesting

    Does a smartcard actually run a Java VM? I've always been under the impression that smartcards contain only data, and that applications run on the machines you plug your card into. Java-based smartcards sound like marketing speak to me really.

    --
    Learn from the mistakes of others. There isn't enough time to make them all yourself.
    1. Re:Java based??? by Hrshgn · · Score: 2, Informative

      Well, many smart cards (all?) have a microprocessor inside running their own firmware. They are powered by the reading machine though.

    2. Re:Java based??? by c_oflynn · · Score: 5, Informative

      There are many types of smartcards.

      Some are the memory only type, where the card just has some sort of (normally secured) memory on it.

      Then there are also the microcontroller cards. These cards have memory and a microcontroller built into them. You can write a program on it to do something, however you don't exactly have a lot of I/O lines or anything (just a communications link actually).

      Most of the microcontroller smartcards have built-in encryption and decryption as well.

      Java is pretty popular for programming smartcards, but they even have BASIC for smartcards.

      The microcontroller only needs an external clock and power source, and will execute whatever program is on it.

    3. Re:Java based??? by one9nine · · Score: 1

      I heard while Dr. Evil's smart card runs J2SE, Mini-Me's smart card run J2ME.

    4. Re:Java based??? by Wesley+Felter · · Score: 4, Informative

      Yes, Java Cards run a crippled, stripped-down, bastardized Java VM. There are also traditional smart cards that only do crypto and data storage, and then there are fake smart cards that hold data but can't do any processing.

    5. Re:Java based??? by philfr · · Score: 5, Informative

      Memory cards only contain data, some parts read-only, some parts read-write, and some parts write once. They have been used since a long time for prepaid public phone cards or access control.
      Smart cards also contain a CPU, sometimes highly optimized for e.g. RSA encryption, and their data is available through a file system abstraction. Smart card suppliers call this an operating system...
      Multiple applications can run on these smart cards, which means you could theoretically have only one card for your ID card, your electronic purse and various loyalty cards (if your are not too worried about security/privacy issues in case of breaking into such a chip).
      Memory cards are also called synchronous cards and smart cards asynchronous cards. That's because of the nature of the serial protocol they use to communicate with the device that reads them.
      Smart cards have a real UART embedded, and implement one of two protocols (T0 and T1) defined in ISO 7816, the second of which is fairly complex and allows to multiplex communication between multiple applications running in the card reader and their peer inside the smart card.
      JavaCards embed a "JVM", but a very limited one: you can't just open a network connection or dynamically load a class. Sun specifies the precise subset of Java that corresponds to a JavaCard profile. But, yes, they run Java "cardplets"...

    6. Re:Java based??? by Wesley+Felter · · Score: 1

      J2SE you say? I figured he would use J2EE (Java 2 Evil Edition).

    7. Re:Java based??? by axxackall · · Score: 1
      You are American, arn't you? Or at least Canadian. Both countries are far behind Europe in card technologies.

      OK, here is the difference. In North America you use magnetic cards for everything. Magnetic card only keeps data, while software works on a card reader device.

      All Europe use smart cards which are sort of micro-computers, the main task of which is encryption handling, doing it together with software on a card reader and thus doing it smarter. So, in Europe, card stealing doesn't help - it's too expensive to crack it.

      Pretty smart, isn't it? In Europe people are smart and they use smart cards. In America... now you got a point. I am sorry.

      --

      Less is more !
    8. Re:Java based??? by jawtheshark · · Score: 1
      Loot at his website: .nl That's dutch. And his nick "BeetjeBrak" is dutch too. In the netherlands they have the chips on the cards too (smart-card).
      Apart from that, you're right. In Europe we're moving from the magnetic strip to the smart-card version. Yes, the smart-card-version is more secure than the magnetic version. However if I recall correctly, the SIM cards for GSM's were cracked some time ago, it just required an enourmous amount of effort. That's the same technology.
      However, VISA cards and the like are still magnetic. I'm eagerly awaiting the smart-card version of VISA cards, but I think the magnetic strip will last for a long time due to back-ward compatibility.

      Apart from that, nice Ameri-bashing, which I enjoy to do as the next guy ;-)

      --
      Ahhh...the great dumpster continuum. Many a free computer will be found there. -- sowth (748135)
    9. Re:Java based??? by matfud · · Score: 1

      You haven't changed your credit card/debit card recently have you? Most new cards issued have a chip in them. not sure if its ram/rom or smartcard though.

      matfud

      (UK)

    10. Re:Java based??? by jawtheshark · · Score: 1
      My debet card has had a chip for years. My VISA is still magnetic only and I got a new one last month.
      The problem is that VISA has to work worldwide, so it has to work in the US, so it cannot be based on smartcard technology.
      Besides, ever gone to the US? They look weird at you if you tell them you only have one credit card. I've never needed more than one, and I've never had credit card debt. I've heard stories of people that went to the US with one creditcard, checked into the hotel and the hotel blocked the card in order to be sure to get payment. After that, your credit card was useless, so you needed more than one. Never happened to me, luckily.

      jawtheshark
      (Luxembourg)

      --
      Ahhh...the great dumpster continuum. Many a free computer will be found there. -- sowth (748135)
    11. Re:Java based??? by soundofthemoon · · Score: 1

      Memory cards have some non-volatile memory and some security circuitry to check keys, etc. Processor cards have a programmable CPU. Prior to JavaCard, processor cards were programmed almost exclusively in assembly code. Microsoft tried to compete with JavaCard with MS Windows for SmartCards (I'm not kidding here), but the system was lame and doesn't seem to have much support anymore.

      JavaCard smart cards can be programmed using the Java programming language, but are restricted to a subset of the language. There are no Floats, Strings, or other big data types, but just int, char, byte, short and objects. But you get full inheritance, interfaces, etc. JavaCard has its own VM that has some similarities to the Java VM but is really a different beast. The bytecode set is optimized for execution on 8 and 16 bit processors and for the subset of the Java language that is practical to run on such limited hardware.

      There is also some very cool security built into the language runtime for controlling access to objects based on the application execution context, so even if you can forge a pointer to an object in another application, the VM still won't let you execute its code. This level of security is needed to make financial service companies comfortable with putting 3rd party software on their cards.

      Eventually as smart cards get bigger, the JavaCard VM will probably give way to the KVM (Java Micro Edition), though there may have to be some extensions added so the extra security from JavaCard isn't lost.

  10. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion

  11. Please upgrade by Anonymous Coward · · Score: 4, Funny
    I am sorry sir. You can not get your prescription filled here. This Pharmacy is not Java enabled. Please wait until the next service pack release.

    Thank you. Please come back soon.

    1. Re:Please upgrade by Anonymous Coward · · Score: 1, Interesting

      I know you meant this as a joke, but here in Belgium we've already had a smart card for medical data for quite a while. And, yes, you do need it to get your prescription at the pharmacy.

    2. Re:Please upgrade by Anonymous Coward · · Score: 0

      Wow... Yeah, just a joke, but to ask a serious question of someone who is in the system, Have you had, or do you know people who have had problems with these cards? Getting the things they need if the card does not work, or not validatable? Pharmacueticals are pretty important.

    3. Re:Please upgrade by vrt3 · · Score: 1

      Never heard of problems with it after the trial period, and I'm sure it would have been all over the media.

      --
      This sig under construction. Please check back later.
    4. Re:Please upgrade by teslatug · · Score: 1

      Just go to Walgreens, apparently all you have to do to get authenticated is tell them your name. It would help if your name is not John Smith.

  12. Big Brother or Good Sense? by Anonymous Coward · · Score: 3, Interesting

    I'm very conflicted over the concept of a national ID system. One the one hand it could overcome many of the inadequacies of our state based identity system, like the ease of creating a viable fake. But combine a national ID system with a national database and I can just hear the Big Brother proponents rubbing their hands together in glee, as well as looking for an opportunity to persecute every illegal alien in the country. If the United States gives in to a national ID in the name of replacing an outdated system, must we at the same time provide the government with yet another tool to restrict our privacy?

    1. Re:Big Brother or Good Sense? by Anonymous Coward · · Score: 0

      Man, many countries use national ID cards... no prob here you know... Why do you guys allways think the u.s. way is the only sollution to a problem. Seriously, why can't you guys just admit that there are coutries that way ahead ...

    2. Re:Big Brother or Good Sense? by Anonymous Coward · · Score: 0

      What's the largest country that uses smart cards? (This is a real question!)

  13. Comment removed by account_deleted · · Score: 0

    Comment removed based on user account deletion

  14. Good or bad? by Blaine+Hilton · · Score: 2, Interesting
    I realize there are many great uses for these Java cards, but I'm not sure if making it a national ID card is the best idea. The government can easily use this against the people and the privacy concerns are enormous. I believe a better implementation would be for banks to issue such as with credit cards and such, not as a device that every citizen may be required to ware.

    Go calculate something!

    1. Re:Good or bad? by Anonymous Coward · · Score: 0

      What ARE the privacy concerns? As an ID card, what makes it more dangerous than a non-electronic ID card with a unique serial number?

    2. Re:Good or bad? by rastamutz · · Score: 0

      Hey i live in Belgium... and i have now already 2 smartcards in my wallet
      one is for our social security system (the best in the world but it's very expensive)
      second is for getting money out of the wall combined with proton=like virtual pocket change
      so now i get a third one... maybe if i can crack them and put al the info on one smartcard THEN that would be really handy...

    3. Re:Good or bad? by Saib0t · · Score: 3, Insightful
      but I'm not sure if making it a national ID card is the best idea.
      As a belgian citizen, I can tell you that we already have a mandatory national ID card, so it's not much of a point.
      My national ID card has this on it:
      a picture
      Name
      Given Names
      Sex
      Date of Birth
      Place of Birth
      Signing authority
      My signature
      Address
      ID Card Number (2 of them)
      Spouse
      Children names

      It bears several things on it that make its counterfeiting difficult (like a nice color changing hologram-like shape of the country)

      The government can easily use this against the people and the privacy concerns are enormous.
      All these concerns are very legit in the USA, but from the people I have talked to, this is the "only" country where people are so afraid of being bigbrothered. I have a national ID card and I use it very seldom, and I really don't have the feeling that it is being used as a way to track my habbits down. On the other hand, my bank uses that ID number in their files, so does my social security company (social security is built in into the belgian system, but you have to have a "company" paying your stuff), and if I could, I'd actually encourage all these government bodies who require identification at one point or another to create that database, and give access to information about me on a need basis.

      The problem does not come from the traceability, these problem are a minor concern compared to the advantages.
      The real problem comes from trusting your government. The belgian political landscape (if I may speak of it thus) consists in dozens of parties, with 5 or 6 big players. This ensures that the same person don't stay in power very long if they don't do a good job, and there ARE alternatives to what is in place at the moment, and it's always a coalition of several parties that is running the country. This is one of the reasons I trust my government (to a large extent).

      Trust is the real problem...

      --

      One shall speak only if what one has to say is more beautiful than silence
    4. Re:Good or bad? by jawtheshark · · Score: 1
      Trust is the real problem...

      Well said! (not only that sentence, but it's your summary). I wish I had modpoints, you'd get them at once!

      --
      Ahhh...the great dumpster continuum. Many a free computer will be found there. -- sowth (748135)
    5. Re:Good or bad? by Blaine+Hilton · · Score: 2, Interesting

      Great response! I believe you hit it on the head about trusting the government. Here in the states we have 2 main political parties. Many people don't vote just because you can only vote for the lesser of the evils. You don't get a "warm fuzzy" feeling for voting for the good guy, because they are all pretty much a bag of liars. Lawers and politicans.... can't live with them and can't live with out them

    6. Re:Good or bad? by Anonymous Coward · · Score: 0

      We in the Netherlands have over 20 political parties and still it's choosing the lesser evil.
      Turnout for the last elections was some 43%, up 3% from the last time.

      Everyone over 18 is also mandated by law to be able to identify themselves at all times. Passport or driver's license are accepted as is a national ID card.
      I'm 32 now and I've never been asked for ID except in situations like filing for unemployment benefits (sadly, company I worked for went bankrupt when the CEO ran off with 2 million Euro) or taking employment (copy of ID is needed to register with agencies for tax purposes etc.).
      I actually feel good about it, at least if something happens to me the persons finding me will be able to find out who I am and contact my family...

  15. Archaic by whereiswaldo · · Score: 3, Funny

    It won't be long and we'll be saying "why in hell did we create an identity card?! Each person is their own identity. Cards can be stolen, altered. People cannot (undetectably).

    I guess I don't get it.

    1. Re:Archaic by adamruck · · Score: 1

      people can look like each other, numbers are unique

      --
      Selling software wont make you money, selling a service will.
    2. Re:Archaic by Anonymous Coward · · Score: 0

      Possibly because it is impractical to scan someones fingerprint, retina, or voice pattern every time they want to buy a 6-pack. When the largest amount of security is required, organizations routinely do use these methods to insure identity. The problem is in addition to being impractical for daily use, they are invasive in commercial applications. The theory behin the card is that by encoding some kind of information, they can check it against you when it really matters (though the flexibility of when that is truly frightens me) but still use it like an ID in the current system when it doesn't.

    3. Re:Archaic by Anonymous Coward · · Score: 0

      yeah all biometric scanners will simply hookup to the distributed national database and then determine your identity .. no need to carry around a pesky card.

    4. Re:Archaic by King_TJ · · Score: 3, Insightful

      Actually, I think you *do* get it - and unfortunately, many folks seem to be overlooking the obvious in their quest for a higher-tech and more convenient lifestyle.

      There simply won't be any more guarantee that any of us are really who we claim to be, just because we hold a "smartcard" that identifies us as being a certain person.

      In fact, most banks/lenders currently require 3 forms of I.D. to do such things as open a new checking account. That's because the closest thing to a guarantee of identity they have is forcing you to provide multiple proofs. Putting all the proverbial eggs in one basket, as a smartcard does, doesn't make much sense to me.

    5. Re:Archaic by dna_(c)(tm)(r) · · Score: 1

      I'm belgian. I'm a Java guy.
      We have had id cards for as long as I know.
      There are some advantages too it, I only have to show my id-card to open a bank account or to do any other transaction (with the government or private institutions).
      What's the difference with carrying a driver's licence with the same information ? This is a typical US/UK aversion from id cards, where does that come from ?
      I will finally be able to do my taxes online, next year, without any _paper_work
      Almost every belgian has an electronic bankcard purse (dutch/french only)
      Every belgian has an electronic Social Security Card, which serves to repay medicines (about 80% of cost) and hospital bills. How does that work in the US again ? (Granted, there was a discussion on the ability to gather health information about individuals, by the government, when it was introduced)
      And most importantly, we have privacy laws that protect citizens (we're not called consumers by our government), not corporations, SINCE dec. 1992
      It's perhaps not the perfect country, but I feel lucky living here ;-)

      BTW I'm much more concerned about creditcard related id-spoofing, than I am about ID theft (I'm not aware of that happening in Belgium, because you just can not use "anything" to prove your identity, you need your ID-card...)

    6. Re:Archaic by jmuzic1 · · Score: 1

      No it isnt. A grocery store a few miles away uses fingerprint scanners to charge groceries on the owner's account. Obviously if a grocery store is doing it, it can't be too expensive. Why not have a national database of fingerprints matching identity? It would be extremely convenient to scan your thumb for all transactions and identity validations. Of course privacy proponents will argue against this, but I really don't see the problem if you don't routinely break the law. After all, nowhere in the constitution does it grant a right of privacy, this is just a false idea most americans have.

    7. Re:Archaic by Anonymous Coward · · Score: 0

      The Constitution doesn't grant rights, it recognizes them... and nowhere does it claim to have a comprehensive list either.

    8. Re:Archaic by Minkey+Brines · · Score: 1

      Ok. So what if you used your thumbprint to gain access to something. A criminal then fakes your thumbprint and does something bad in your name. Its discovered that it wasn't you that did the bad thing but now you need to change your access method. So you then change your thumbpr... Oh wait... You have THE REAL ONE. How do you change it? Uh... Cut off your thumb? Use the other thumb? What if it happens again? You're gonna run out of fingers.

      Biometrics: The measuring of the ORIGINAL copy of body parts for the purpose of identification.

    9. Re:Archaic by whereiswaldo · · Score: 1


      Well, using only thumb prints is just as archaic as having an identity card.

      You would ideally have many points of identification taken together as a whole (all of them must match). Thumb print, retinal scan, blood type, height, maybe dna, hair colour, hair type (curly, straight, thick, thin), skin colour, gender, known languages, secret passphrase, accent, whatever. Try faking all that.

  16. From what I understand by joeflies · · Score: 2, Informative
    I only have a loose understanding of how these work, so please correct me if I'm wrong It's more than just carrying the key, it handles operations performed on the key. There are definitely programs that run on the card itself, as it is doing the key handling so that the key isn't ever exposed outside of the card.

    That being said, the Java card isn't running a Java VM. I thought it was technology acquired and put under the same Java brand, but it isn't exactly Java though.

    1. Re:From what I understand by Anonymous Coward · · Score: 1, Informative

      The card runs it's own stripped down Java VM. The API is different, but the code is really interpreted on the card. Sun has a FAQ list.

    2. Re:From what I understand by nuclearmoose · · Score: 3, Informative

      Here's the Sun Java Card site:
      http://java.sun.com/products/javacard/
      Lots of good info there, toolkit, spec, etc. The Java Card book from Sun Press is also pretty good.

  17. Re:im not for it by Anonymous Coward · · Score: 0

    oops.. I meant to type potential, and national

  18. Blah by FrostedWheat · · Score: 4, Funny

    I use my Slashdot ID for all my identity needs.

    Hmm.. maybe I shouldn't have said that.

  19. FYI by bdejong · · Score: 5, Informative

    For you information:
    belgium allready has non-digital ID cards, which are obligatory to every citizen. You are even obligated to carry them around at any time and CAN be asked to show them to police if they have "reason" to suspect you of something.

    You could have a look at mine, for example...
    http://studwww.rug.ac.be/~bdejong/id.jpg

    1. Re:FYI by Anonymous Coward · · Score: 0

      I have to wonder if its a really good thing to post that on slashdot..

      MOD PARENT UP, GOOD POST

    2. Re:FYI by The+Ape+With+No+Name · · Score: 1

      You are required to carry ID in the US as well. Big deal. Get stopped without a driver's license or some form of ID coming out of a bar or such, and they can hold you until they know who you are.

      --
      Comparing it to Windows will be a moot point, since El Dorado is going to have a 40% larger code base than XP.
    3. Re:FYI by gte910h · · Score: 1

      Naw. If you're intoxicated or have car keys...that cna happen though

      --
      Want to see every step I took to start my company? http://www.rowdylabs.com/blogs/pitchtothegods
    4. Re:FYI by bdejong · · Score: 1

      Yeah, you're right, and thanks for reminding me.
      I blanked out the relevant parts....

    5. Re:FYI by Anonymous Coward · · Score: 1, Insightful

      Unless you are driving, you are not required to carry anything. Please cite the law that requires ID.

    6. Re:FYI by jdhutchins · · Score: 1

      In the US, you don't have to drive. If you want to drive, then you do need a driver's license, for a reason. They're trying to keep track of who's a bad boy on the road and shouldn't be allowed to drive. If you don't want to have to show a proof of ID, then don't drive.
      It's changing, though, you need a driver's license to get onto an airplane these days.

    7. Re:FYI by bungo · · Score: 2, Informative

      You are required to carry ID in the US as well. Big deal.

      It is a big deal here (in Belgium).

      If you don't have your card, you can be arrested and held in a cell until you are able to prove your identity.

      This is anywhere, anytime - not just walking out of a bar, or driving a car. Stand too long on a street corner, or if the police think you're looking at them in a funny way, or be the wrong skin colour in thewrong area - with no official id, you can be held for a long time.

      If you're from north Africa, and you're walking around Antwerp with some friends, you better have your card with you - and you better not resist arrest (like breath, etc...).

      This is nothing like the US.

      --
      "The best part? I became an ordained minister while not wearing pants." -- CleverNickName
    8. Re:FYI by EvilSporkMan · · Score: 1

      Yeah, right. In the U.S. society today, you HAVE to drive if you want to get anywhere (pardon the pun). What are you supposed to do if you choose to not drive? There sure isn't public transportation where I live...

      --
      -insert a witty something-
    9. Re:FYI by paraax · · Score: 1

      Hmmm, I know of one or two people who are unable or unwilling to learn to drive. These people can and do lead productive lives. So you _can_ live without a driver's lisence.

    10. Re:FYI by Anonymous Coward · · Score: 0

      For the record: Yes, I am Belgian, and I'm from Antwerp. And I honestly must say that the above post is quite an exaggeration of the situation in everyday life. First, that ID card is *only* asked when you specifically seem to be disturbing people, and then only for intimdation (not in a bad way, more often they ask it for an "yes, we know who you are now, are you afraid we are going to tell your parents?"), or in other cases to check if you are known to them and have disturbed the peace before, in, let's say the last few weeks or so.

      Belgian police are extremely lenient. Even if you do things prohibited by law, they will *always* let it slip if you're not bothering any people with it. For example, on more than one occassion a friend of mine (or myself) have ended up drunk on the sidewalk, unable to stand, crawling to a sewer hole to be able to throw up. This is illegal, it's public drunkenness and is prohibited by law. However, all policemen I have encountered in these situations merely stop by to inform if you are ok, and if you will be able to make it home eventually. If you just reply, and don't bother any people, they will just leave you be. Not once have I, or one of my friends for that matter, been asked for my ID card on such an occasion. [Needless to say however I did learn to stop drinking that much, chicks don't seem to like people decorating sidewalks with recently digested alcholic beverages].

      And please, don't make this out to be a racist thing, as your 'north Africa'-reference implies. Because it is not. Some people in Belgium/Antwerp may be racist, but the police is *not*. They *are* under constant supervision, and don't dare to single out people based on ethnic background. The only few examples of this happening the last few years were simply blown out of proportion and a simple newspaper grab from months before indicates that the same treatment is received by, forgive me the choice of words, 'non-north-African' people.

      Also, for the record, I am a few months away of getting my Master in Computer Science, and I hope this somehow makes it more convincing that I do feel strongly about privacy issues, and that I have strong opinions on such national ID databases and, to generalize, a lot of things the EFF is concerned with. I know CS doesn't imply this, but it at least implies that one comes in contact with these issues and forms opinions on them.

      -
      hctp

    11. Re:FYI by EvilSporkMan · · Score: 1

      How do they get to work then? O_o

      --
      -insert a witty something-
    12. Re:FYI by Anonymous Coward · · Score: 0

      You think cops aren't tough on non-whites in the US? Wake up and start living. Racist cops are commonplace all over the world. It's part of the human genetic identity to distrust the stranger (and originally there were good reasons for this).

      That we're not all pacifist diversity-lovers is a consequence of evolution's inability to keep up with societal standards.

    13. Re:FYI by FauxPasIII · · Score: 1

      > That we're not all pacifist diversity-lovers is a consequence of
      > evolution's inability to keep up with societal standards.

      And the fact that there's no socially imposed evolutionary pressure against racism. If we could all collectively agree not to have sex with racists, eventuall, several hundred generations or more down the road, they'd die off.

      --
      25% Funny, 25% Insightful, 25% Informative, 25% Troll
    14. Re:FYI by tealover · · Score: 1

      I live in NYC. I don't own a car. I also work with a lot of people from NJ who tell me they take these things called trains into NYC.

      --
      -- You see, there would be these conclusions that you could jump to
    15. Re:FYI by ArsonPanda · · Score: 1

      I haven't had a car for two years. Where I live there's decent public transportation, or you could try something like *gasp* walking, or riding a fscking bike.
      So many people are so unwilling to look beyond their ford exploder. Nothing like driving that two blocks to the store to pick up some ice cream!

      --

      --I don't want the world, I just want your half.
    16. Re:FYI by vrt3 · · Score: 2, Interesting
      I'm from Belgium too, and knowing some people who are with the police, they always say it's not necessary to carry it all the time. It's enough to be able to show it once you get home; it happens they drive you home in order to do that. But I don't know if that's law or just standard procedure.

      Even that happens very infrequently. I'm 28 know, and I had to show my ID card only once to the police, and that was when I moved and a (very friendly, by the way) police man came to check that I was really living there. Oh, and once when I was driving home and I had to stop for alcohol control; though I don't remember I had to show my ID card, perhaps my driver's license was enough.

      --
      This sig under construction. Please check back later.
    17. Re:FYI by Anonymous Coward · · Score: 0

      no true, why don't you provide a relevant link instead of coming up with nonsense?

    18. Re:FYI by eyeye · · Score: 1

      Damn I'm going to have to scratch Belgium off my places to move to :-(

      --
      Bush and Blair ate my sig!
    19. Re:FYI by NickV · · Score: 1

      Wow, I'm 23 and have never been behind the wheel of a car in my life and I live in America.

      Then again, I also live in a city with public transportation that works (NYC.)

      Seriously, that makes a driver's license different from a National ID. However, it also causes problems, because prior to getting a passport I had to use my birth certificate, university ID and social security card to prove my identity. Now I just use my passport.

    20. Re:FYI by Anonymous Coward · · Score: 0

      I *gasp* work 20 miles from where I live *gasp* and there is no public transportation available *gasp*. If i want to feed my family *gasp* I HAVE to drive or hitchike(which defeats your *gasp* holier than thou remark about cars then doesn't it). Geez, Broaden your horizon man, some people enjoy the country.

    21. Re:FYI by Anonymous Coward · · Score: 0

      >which defeats your *gasp* holier than thou remark about cars then doesn't it

      No, it really doesn't touch his argument. I ride my bike 19.3 miles to work each day. So no, you don't "HAVE to drive" it. Besides, his whole point was that there are other alternatives people often fail/refuse to acknoledge, he never said you shouldn't drive a car at all.

    22. Re:FYI by Anonymous Coward · · Score: 0

      "Want to" and "HAVE to" aren't the same thing at all.

      If you wanted to live in Paris and work in New York, you'd need to take the Concorde to work, but few would phrase that as "HAVING" to do so.

      You have the option of living closer to work. You CHOOSE not to. Nothing wrong with that, particularly, but don't pretend that it's some circumstance over which you have no control.

      Claiming that it's a choice between owning a car and feeding your family is just ridiculous.

    23. Re:FYI by Anonymous Coward · · Score: 0

      What are you supposed to do if you choose to not drive? There sure isn't public transportation where I live...

      Move somewhere else?

      Nah. No one would ever do that.

    24. Re:FYI by nanoakron · · Score: 2, Insightful

      Do you happen to be tall, attractive, white, upper middle-classed and born in the country in which you live?

      How odd...these are the exact same people the police never seem to bother in any country...I wonder why?

      Now imagine if you weren't...would you see compulsory ID cards in the same way?

      -Nano.

    25. Re:FYI by Ian+Bicking · · Score: 1
      Coming out of a bar you might need your ID, but you don't generally need to have an ID unless you are engaging in some restricted activity (like driving, drinking, or buying butane lighters :). Outside of those situations you don't have to tell the police who you are or show them an ID, or carry any ID or even answer any question at all (though that might be cause for suspicious, etc. etc...)

      Your Rights and the Police says more, though it's not updated for these days of diminishing rights. And this page only applies to the US, of course ;)

    26. Re:FYI by BlackListedCard · · Score: 1

      I'm sure at this very moment. There about a million of your smartcard running around the world. What a great scan of your card. If I were you, I would take the graphic image off your site.

    27. Re:FYI by Anonymous Coward · · Score: 0

      I was going to point out to this moron that what is commonplace is not what we're worried about. But you did it much more beautifully than I could have.

    28. Re:FYI by Kingpin · · Score: 1


      ...stop for alcohol control; though I don't remember.. - You were drunk I take it?

      --
      Unable to read configuration file '/bigassraid/htdig//conf/14229.conf'
      Geocrawler error message.
    29. Re:FYI by badzilla · · Score: 1

      What difference does it make, since you have to show this card to everyone all the time anyway. It's already public information or at least semi-public.

      --
      "Don't belong. Never join. Think for yourself. Peace." V.Stone, Microsoft Corporation
    30. Re:FYI by jawtheshark · · Score: 1
      It depends... I have been stopped by the police in Belgium because a 21 year old in a luxury car with foreign license plate is suspicious. I understand that, especially since the license plate I have is often misused for tax-evasion in Belgium.
      Anyways, I just had to show my drivers license and the car papers. After that the friendly police officer just gave me my stuff back and wished me a nice day.

      These guys are doing their job... it is understandable. Belgium is *not* a police state as many people around here seem to think.

      --
      Ahhh...the great dumpster continuum. Many a free computer will be found there. -- sowth (748135)
    31. Re:FYI by bungo · · Score: 1

      Ok, you're posting as an A/C, so you may just be trolling.

      Didn't you happen to notice the fights between the
      Arabs and the police in Antwerp just a shot time ago?

      What about the Arab group which is patrolling an monitoring the police? You've never heard of them.

      The only few examples of this happening

      I have friends who have darker skin colour, or who are arab (including my sister in law who is from Marocco), and they all disagree with you.

      If you're white, you just don't even notice it.

      --
      "The best part? I became an ordained minister while not wearing pants." -- CleverNickName
    32. Re:FYI by techNETia · · Score: 1

      Oh, right! Because your name is "bungo" and his is "A/C", your word is more believable than his?

      I think the point he was trying to make, was not to exaggerate about the privacy issues. You seem to be dragging racism issues into the discussion... but hey, the fact that our ID is digital or not doesn't change a thing about the racism. So I think we may want to discuss that at another place.

      Here in Belgium we have a quite good social security system. People are generally content (although, of course, some people just always complain) to trade this off for some privacy. There is actually not that much of an issue about the privacy... which is well enough protected by law.

      For the record: I'm a Belgian too, also hoping to get my master's degree in CS in a few month's time; I have also posted as A/C before, just because I hadn't made a /.ID then.

    33. Re:FYI by The+Ape+With+No+Name · · Score: 1

      Actually, here is the Good Ole State of Tennessee, we have these things called "Police Contact Cards." Let's say you are standing around on the corner waiting for the bus. Officer Billy Bob rolls up and says "Come here." He can fill out a "contact card" on you and ask for your ID. Don't have ID? You are a vagrant. Trust me. Just dare and say, "I don't have to talk to you." That's disorderly conduct. Now, I am sure these things are unconstitutional, but the people they are meant to keep in line don't even know that what their rights are let alone know to say, "Piss off." Of course, in Virginia, telling a cop to "Piss off." is "Curse and Abuse" and a night in jail.

      --
      Comparing it to Windows will be a moot point, since El Dorado is going to have a 40% larger code base than XP.
    34. Re:FYI by Anonymous Coward · · Score: 0

      Nope, I've got friends from the scary part of the States who tells me they just inbreed to get around that. Haven't you seen Texas Chainsaw Massacre or Deliverance?

      Stand outside a Billy Ray Cyrus concert and watch the Inbred, Braindead, Cornfed Secretaries come pouring out, smiling with gappy toothless grins and hairsprayed bouffant beehives swaying in the wind as they get on their man's chopper to go back to the trailer park after a long night of hollering the words to "Some Gave All".

    35. Re:FYI by rthille · · Score: 1

      But what if you just pretend to be someone visiting from another country? You certainly wouldn't be required to have a Belgian National ID card then, right? Would they lock me up for a long time if I were to be an American Tourist walking around Antwerp without my Belgian National ID? Note that I tend to leave my Passport with my bags (safe in the hotel room).

      --
      Awesome furniture, accessories and cabinetry in Santa Rosa, CA: http://humanity-home.com/
    36. Re:FYI by bungo · · Score: 1

      Would they lock me up for a long time if I were to be an American Tourist walking around Antwerp without my Belgian National ID

      I'm sorry to say, but yes, you would be locked up.

      Of course, you don't have to have a Belgian id card, but you do need to have a form of photo id recognised by the Belgian govt.

      There was the case a couple of years back, when a grandmother came over from England to visit her grand-daughter, and she forgot her passport. She was held in a cell overnight and then put on a train and sent back to England. We can't have
      grandmothers without id rampaging around Belgium now, can we?

      --
      "The best part? I became an ordained minister while not wearing pants." -- CleverNickName
  20. I hope they aren't using ... by Dossy · · Score: 2, Funny

    ... BlackBoard IDs on these things!

    -- Dossy
    (Still waiting on the saliva analyzing biometric device. Nothing like spitting to authenticate yourself.)

    1. Re:I hope they aren't using ... by Anonymous Coward · · Score: 0

      (Still waiting on the saliva analyzing biometric device. Nothing like spitting to authenticate yourself.)

      Untill you get stopped leaving your signifcant other's place...

      Hmmm...According to our scanner, you're a 14 year old girl

  21. Re:Just say NO to ID cards by Hrshgn · · Score: 1

    >All bad things emit from Belgium. Like International Court, and other evil things.

    The International Court of Justice is based in The Hague, Netherlands.

  22. Meh. by shawnywany · · Score: 0, Redundant

    That's Belgium for you.

  23. Right by Anonymous Coward · · Score: 0

    When YOU get down from your soap box, you might want to investigate other languages.

    Java still is slow and a memory hog.

    1. Re:Right by VanillaCoke420 · · Score: 1

      Well it's not any worse than LISP or Haskell. I still haven't quite recovered from that Functional Programming course.

    2. Re:Right by Threni · · Score: 1

      Heh - that's like saying "it's no more obtuse or fiddly than assembly language".
      I've fiddled with Java, and its horrible, and Java apps generally have clunky, horrible UIs.

    3. Re:Right by mabinogi · · Score: 1

      Java apps generally have clunky, horrible UIs.

      So therefore all Java is bad, even embedded java?

      If jaa is so bloated and chunky and slow, how come it's used on so many mobile phones these days?

      --
      Advanced users are users too!
    4. Re:Right by Anonymous Coward · · Score: 0

      If jaa is so bloated and chunky and slow, how come it's used on so many mobile phones these days?

      Because it can be distributed in compiled bytecode format (no source) and (theoretically) it will run the same everywhere regardless of the processor and architecture used in the mobile phone. Even so, Java is a tad slow and it can not use all the functions the underlying OS of the phone offers, but instead a dumbed-down API is used.

  24. Snake oil. by Jade+E.+2 · · Score: 3, Interesting
    "Jan Deprest, President of Fedict, the Federal ICT department" said in the article:
    It will allow Belgian citizens to authenticate themselves in an easy and completely secure electronic way whenever they access e-government applications.
    [emphasis added]

    Sounds like he's (she's?) been listening to a snake oil salesman at Sun. Last time I checked, nothing was completely secure, least of all smart cards...

  25. What, No Ashcroft and Bush Madlib yet? by Anonymous Coward · · Score: 0

    Take a standard boilerplate rant, and fill in a
    few missing words. I am shocked and awed. Where is "Old Europe" when you need them.

  26. What does java actuall add to an id card? by yintercept · · Score: 4, Insightful

    I am actually confused by the article. An "ID card" pretty much just carries data...not a full programming environment. Sounds more like business name branding.

    The important part of an id card is the interface and how you access and change the information. Such an interface is first and foremost a hardware interface. Trying to say that the card belongs to computer language x doesn't make any sense.

    As for functionality, would you as a business really want to record important information on a card that is easily lost, physically compromisable, and carried by a person? What businesses want is simply a verifiable id for customers. The simpler the id the better.

    What's all this noise about antiquities? Try pumping an antiquity in your Surburban and see where it gets you.

    1. Re:What does java actuall add to an id card? by philfr · · Score: 5, Informative

      The ID cards are able to prove your identity. For this, they embed a private key, and calculate a signature themselves on data that is sent to them.

      If they only gave this private key to the device that asked for it, they would be easy to duplicate.

      Of course, you don't need Java for this, but you need a smart card with a CPU inside, and you need to develop the application that runs on that CPU.

      The choice of a chipcard determines the SDK to be used for it. One of them is JavaCard...

    2. Re:What does java actuall add to an id card? by yintercept · · Score: 2, Interesting

      Of course, you don't need Java for this, but you need a smart card with a CPU inside

      The functionality is still more important that the language. You pass a bunch of blips into the card and get a bunch of blips out.

      Sounds like the big advantage of the technology is that the id the store gets isn't your actual private key...but a derivative produced from the key.

      The cards can't actually prove identity of course. But it sounds like it would be a little bit more difficult to steal someone else's identity.

      But I jump back to the point that the language itself is independent of the functionality. The Java Branding is just Java branding.

    3. Re:What does java actuall add to an id card? by owlstead · · Score: 1

      a full programming environment? No, not that but it does contain a JVM (java virtual machine). A stripped JVM, but a JVM still.

      The ID is definately the most important, as are the data structures on the card. However the ability to update applications withouth a real thread to security is what Javacard is all about. See the GlobalPlatform specification for the techinical information (you're a slashdotter, you'll find it).

      You would not want it to store large amounts of data, it can't. It can be used as a paying device though. And the digital ID part itself obviously.

      This card is not aimed at businesses but at citizens wanting access to online and offline services.
      ---
      boolean sig = false;

  27. Nice Hair! by Jordy · · Score: 2, Insightful

    There only real negative to a digital card is that companies can start asking for them and easily start filling their databases with your information.

    Manually copying down information from the front of the card is far too time consuming and obvious. Plus, you can only fit so much information on it.

    There are of course technical ways to design digital ID systems and laws you can put in place to prevent this from happening on any kind of scale, but I fear these cards were not designed with privacy in mind.

    --
    The world is neither black nor white nor good nor evil, only many shades of CowboyNeal.
    1. Re:Nice Hair! by bungo · · Score: 1

      Manually copying down information from the front of the card is far too time consuming and obvious.

      You right. That's why whenever I have to hand over my identity card, they take a photocopy of it.

      Obvious, eh?

      Maybe not, if you don't live in a country with mandatory id cards.

      --
      "The best part? I became an ordained minister while not wearing pants." -- CleverNickName
    2. Re:Nice Hair! by Jordy · · Score: 1

      No company has ever taken photocopies of my drivers license. That would be considered inappropriate. If they want my date of birth, ID numbers, etc., they ask me for them.

      But as I said before, they start sticking medical history, family records, etc., on a card like this and you are just asking companies to abuse it.

      --
      The world is neither black nor white nor good nor evil, only many shades of CowboyNeal.
    3. Re:Nice Hair! by splattertrousers · · Score: 1
      No company has ever taken photocopies of my drivers license. That would be considered inappropriate.

      Ever tried to rent an apartment? Or get a job? That's two places that always ask to photocopy my driver's license.

      I'm all for having something that can help me prove my identity to random folks like apartment managers, but not something that they can use to get other information about me.

  28. Re:im not for it by CommieOverlord · · Score: 2, Insightful

    You mean like the potential for abusing driver's licenses, SSN cards, health-care cards, birth certificates? There are already plenty of national or state/provincal cards out there. Abuse happens, but obviously they're good for something or they wouldn't be here.

  29. Great! by Fred+IV · · Score: 1

    Great News! Now instead of just having my wallet stolen, I can have someone scoop my eyes out and chop off my fingers too!

    Yay! The wonders of technology!

  30. Actually it IS a big deal. by nurb432 · · Score: 1, Troll

    We live in a society that all anonymity has been removed.

    Having to produce ID on demand with no cause of provocation other then you are breathing is just one example of this.

    This free-fall needs to be stopped..

    --
    ---- Booth was a patriot ----
  31. Fundamental Flaws by Anonymous Coward · · Score: 5, Informative

    I was at an E-Gov day some months ago, where this was presented and discussed. (Vince Rijmen, of AES fame was there talking about how they solved the problems associated with e-voting). Some of the comments really scared me:

    1) The keypairs on the card will be pre-generated when the citizen receives the card. IMHO a private key that has been in someone else's hands/machine is totally useless. This of course allows for involutary escrow..

    2) The Belgian Federal Gov representative (Peter Strickx, ex-Sun, by total coincidence) plainly declared they do not want to have the necessary expertise in-house, but wants to outsource the whole thing (to Sun and ZETES, it now seems)

    So this will put our identities (and the authentication/non-repudiation/existence of some very important personal documents) at the mercy of a couple of *private companies*, one of them American, no less, at a time when the US is governed by a madman, that gets away with secret military tribunals and illegal warmongering..

    Some of the excuses, when I asked about this were that the .be gov already uses much outsourced security for its own communications!

    I say this is unacceptable and an enormous security blunder. Verisign, a US company, could issue some revocations, and thereby completely stop the flow of information inside the .be gov!

    Do I they want the US gov to be able to screw around with any .be citizen's identity? It would seem to be so..

    Please forgive me for using AC for once, one would get paranoid for a low less...

    1. Re:Fundamental Flaws by itchyfidget · · Score: 1

      The Belgian Federal Gov representative (Peter Strickx, ex-Sun, by total coincidence) plainly declared they do not want to have the necessary expertise in-house, but wants to outsource the whole thing (to Sun and ZETES, it now seems)

      Lucky Belgians. M$ seem to be hell-bent on bribing their way into the UK Government's infrastructure.

      Five years hence, watch me try to use my ID card to see an emergency doctor, only to be told that the system has been hacked through a security hole that M$ couldn't be bothered to patch, and I will need to come back tomorrow.

      --
      Mod early, mod often.
    2. Re:Fundamental Flaws by Jordy · · Score: 1

      1) The keypairs on the card will be pre-generated when the citizen receives the card. IMHO a private key that has been in someone else's hands/machine is totally useless. This of course allows for involutary escrow..

      This really depends on if the private key is generated on the card itself or on a separate machine and transferred to the card. Given decent tamper resistance, you shouldn't be too afraid of the card generating the private key.

      2) The Belgian Federal Gov representative (Peter Strickx, ex-Sun, by total coincidence) plainly declared they do not want to have the necessary expertise in-house, but wants to outsource the whole thing (to Sun and ZETES, it now seems)

      The Belgian Federal Government representative is an idiot.

      So this will put our identities (and the authentication/non-repudiation/existence of some very important personal documents) at the mercy of a couple of *private companies*, one of them American, no less, at a time when the US is governed by a madman, that gets away with secret military tribunals and illegal warmongering..

      I consider handing the management of core infrastructure to foreign private companies without any local expertise to be a terrible mistake.

      Be very clear however. The US government has only so much power over private corporations. There isn't a government respresentative sitting on the boards of every major private company making sure they comply with our presidents will. These are independent entities that have their own agenda (to make money) and only deal with the government when they have to or they think they can get something out of it.

      Some of the excuses, when I asked about this were that the .be gov already uses much outsourced security for its own communications!

      The US 'outsources' all of its communications to private companies. Telecommunications companies, because they are core services, are under a federal regulatory body (the FCC) to make sure they continue to do everything the US needs. This works just fine.

      --
      The world is neither black nor white nor good nor evil, only many shades of CowboyNeal.
    3. Re:Fundamental Flaws by RTMFD · · Score: 1

      I say this is unacceptable and an enormous security blunder. Verisign, a US company, could issue some revocations, and thereby completely stop the flow of information inside the .be gov!

      Yes and then the space aliens which control the U.S. Government will swoop down and abduct all of the waffles from Belgium, truly "striking while the irons are hot"... :)

      *Me adjusts tin hat*

    4. Re:Fundamental Flaws by marienf · · Score: 1

      Lucky Belgians. M$ seem to be hell-bent on bribing their way into the UK Government's infrastructure. Five years hence, watch me try to use my ID card to see an emergency doctor, only to be told that the system has been hacked through a security hole that M$ couldn't be bothered to patch, and I will need to come back tomorrow.

      Sure, in terms of external security it's a relief to hear it's Sun, not MS getting the contract. But in terms of internal security, if basic PKI standards are not respected, it doesn't matter which of both evils was chosen.

    5. Re:Fundamental Flaws by Anonymous Coward · · Score: 0

      This really depends on if the private key is generated on the card itself or on a separate machine and transferred to the card. Given decent tamper resistance, you shouldn't be too afraid of the card generating the private key.

      I actually consider the key being generated on the card as an advantage. (although it makes me wonder about quality of Randomness etc..), because it would precisely allow the citizens to generate their own keypairs, with as little external equipment as possible. I can see some minor advantages in pre-creating the keys (e.g. only one visit required), they are minor, IMHO. Failing to find any obvious major advantages to pre-creating the keypairs, I'm assuming it is done this way to be able to secretly store the public keys, leaving the it's possible uses in governmental and/or corporate abuse to the reader's imagination..

    6. Re:Fundamental Flaws by Anonymous Coward · · Score: 0

      I consider handing the management of core infrastructure to foreign private companies without any local expertise to be a terrible mistake.

      It just advances the way towards Corporate Rule.

      Be very clear however. The US government has only so much power over private corporations. There isn't a government respresentative sitting on the boards of every major private company making sure they comply with our presidents will. These are independent entities that have their own agenda (to make money) and only deal with the government when they have to or they think they can get something out of it.

      Very well. My emphasis was unclear. My major problem is with it being private companies, uncontrolled by gov expertise. Them being US companies adds to the danger, but not that much. I just can't help expressing my contempt of the Bush Gov whenever the opportunity arises..

    7. Re:Fundamental Flaws by Anonymous Coward · · Score: 0

      Yes and then the space aliens which control the U.S. Government will swoop down and abduct all of the waffles from Belgium, truly "striking while the irons are hot"... :)

      More likely, the head aliens (Dumbya & Rumsfeld) will simply bomb any building that emits smoke because it could be a potential factory producing Waffles Of Mass Obesity.

    8. Re:Fundamental Flaws by slymole · · Score: 1

      The keypairs on the card will be pre-generated when the citizen receives the card. IMHO a private key that has been in someone else's hands/machine is totally useless. This of course allows for involutary escrow..

      The Belgian Federal Gov representative (Peter Strickx, ex-Sun, by total coincidence) plainly declared they do not want to have the necessary expertise in-house, but wants to outsource the whole thing (to Sun and ZETES, it now seems)


      I completely agree with you that the above points raise valid doubts about the legality of the whole scheme; commercial entities should, of course, cooperate with governments in procuring the nessecary technology, but from that point on, said technology should be open to public scrutiny: this means opensourcing all software used in the process, and allowing citizens to generate their own keypairs, by visiting their local police station (you need to do that anyway, to have a paper ID card issued). Also, under no circumstances should corporate affiliates be allowed to run such government operations on a daily basis. If the Belgian (or any other) government cannot procure it's own technical expertise to handle system operation and maintenance, they should drop the scheme altogether. If both of these requirements are met, I would have no problem supporting electronic identity cards.

      --
      "We don't stop playing games because we grow old; we grow old because we stop playing games.."
    9. Re:Fundamental Flaws by Anonymous Coward · · Score: 0

      For all the Belgian reading french (and other reading french) you could have a look at: http://wiki.ael.be/index.php/IdCardAnalyseCritique for my own analyse of the electronic id card.

      Now for the Anonymous Coward that posted the above message, please get in touch with AEL and let's share information about e-Gov.

      It is the first time I read about our (Belgian) government wanting to do e-voting (we already have electronic voting for arround than 44% of the citizen).

      So please contact us.

      David GLAUDE

  32. Re:Just say NO to ID cards by WegianWarrior · · Score: 1

    Well, as the parent (grandparent) is clearly clueless on several issues, why not add geografy to the mix?

    Anywho...

    A national ID cardf isn't 'evil' per see, allthought it could be used to track people with. But even today most counties around the globe expects you to be able to identify yourself when there is a need - so all this do is to a) standarice the card used (instead of relying on drivers licence, studentcard, military ID, bank card and so on), and b) provide a easy way to carry about information that could be accessed as appropriate. I havn't RTFA, but I imagine you could put your medical record on there (which would mean that if you're allergic to certain drugs the hospital will know if you come in in a coma), you could put (encrypted) information about your biometrics in there (so the police can see if the card is genuine) just to mention a couple of ideas.

    I don't think it would be a problem to roll these babies out in europe... but then we arn't as paranoind as the avrage american slashdotter seems to be (no offence, just a casual observation).

    --
    Everything in the world is controlled by a small, evil group to which, unfortunately, no one you know belongs.
  33. Easily defeated? by Pettifogger · · Score: 2, Insightful
    Yeah, but just how durable is this chip? I personally took offense at the magnetic strip on my driver's license, and it just so happened that my ID had an unfortunate "accidental" experience with a large, powerful electromagnet.

    If I get one of these new java IDs forced on me, it might just be "accidentally" directly exposed to 1500 watts of RF. Maybe "accidentally" take a spin on the turntable in the microwave, too.

    So what's the point of making this stuff if the people who don't like it can easily defeat it?

    --

    IAAL

    1. Re:Easily defeated? by Anonymous Coward · · Score: 0

      I have paper ID card, if I burn it nobody will know it's me and they will arrest me if I can't bring up a good ID if police asks me for it.

      Where's the gain in that. You are anonymous, but by being so you are always a suspect.

  34. how hard can it be to break? by SHEENmaster · · Score: 1

    Assuming they use a 64bit key, so that Sun could legally export it from America, that's only 2^64 possible combinations, roughly 1.845E19. While that may be more than enough for the billions inhabiting the Earth; it's also rather easy to break if you have a few computers and prime number lookup table on DVD given enough time.

    I'm not saying that it's absolutely useless; time and computing power are still issues. How long would it take to break this if you "borrowed" your universities labs for processing it? How long if you got such a distributed computing project on slashdot?

    --
    You can't judge a book by the way it wears its hair.
    1. Re:how hard can it be to break? by Skuto · · Score: 1

      >Assuming they use a 64bit key, so that Sun could
      >legally export it from America

      Why would they need to export encryption from the US? AES was invented in Belgium.

      --
      GCP

  35. Obligatory Hitchhikers' reference by NewbieProgrammerMan · · Score: 2, Funny

    Maybe the existence of a Java-based national ID card is the unspeakable concept mentioned in the Guide.

    --
    [b.belong('us') for b in bases if b.owner() == 'you']
  36. Who do you want to be today? by billstewart · · Score: 2, Insightful
    Sigh. The current SSN system is bad enough, but at least as Americans we didn't used to need no stinkin' badges. Until we get rid of a using a single national identifier number for everything, identity theft will be an increasing problem, and consumer tracking and electronically-assisted stalking and corrupt clerks selling license cards and control of individuals by taking away their IDs or licenses will just keep increasing.

    Unfortunately, the concept of giving people a stack of uncorrelatable tax ID numbers that they can give to different people who need them is complex-sounding enough that if it's ever implemented, it'll probably be done on a smart card of some sort (or a dumb memory card rather than a processor-equipped card.)

    --

    Bill Stewart
    New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
  37. Why do I need a Java card? by AndroidCat · · Score: 3, Funny

    I mean, I've already got one of those Starbucks cards with $15 still on it!

    --
    One line blog. I hear that they're called Twitters now.
  38. Why is national id cards / numbers bad ? by Simon+Lyngshede · · Score: 5, Insightful

    Being Danish I was given a social security number when I was born, works just like a national id. My social security card work pretty much like an national id card, you sometimes need some sort of picture id in combination with the social security card.

    The only thing I hate is that it doesn't include more "features". I what to use it as a credit card, drives license, access card to the university and so on. Having an all purpose id card would make my life a lot easier. Why is national id cards a bad idea? Are people afraid that the government will track them. Who really gives a fuck if it allows the government to track you with it? They could do that anyway if they really cared enough. I simply don't get it.

    Please tell me why national ids are bad. Who are you people afraid of ? Im tired of hearing that national ids are bad, without being given a good reason. So fare I just heared "National id, bad" and it's every time Slashdot brings it up. Only once have I hear of misuse in Denmark and that was due of lack of security at the post office, not really something you can blame the system for.

    1. Re:Why is national id cards / numbers bad ? by itchyfidget · · Score: 1

      You might not see it as a problem, because you are a native and (let's assume :-) law-abiding Danish citizen.

      In the UK we have a lot of immigrants; currently those who seek asylum here are treated extremely poorly by the system - they are sent to what are effectively detention centres, where they are kept, often in total ignorance of their rights, for weeks/months while their claims are processed/ignored. A recent government report into these processing centres identified several major outstanding issues affecting the welfare of asylum-seekers in these centres.

      Those asylum-seekers who are not sent to such centres are placed within the community, where they are often subjected to verbal or physical abuse (and in at least one instance, an attack which led to the asylum-seeker's death). Apparently we are not, as a nation, very tolerant when it comes to other races/cultures, even when they come seeking our help. We do not have a good record in integrating with non-asylum-seeking non-British nationals either.

      I have heard that there is not much racial integration in Denmark (this may or may not be true; please feel free to correct me). Either way, are asylum-seekers and other non-nationals likely to be treated much differently than in the UK? I doubt it.

      So let me clarify what I think the problems of an ID card system are likely to be:

      • 1. Minority groups, whether they are nationals or not, will be more likely to be asked for their ID (this is just harrassment; the increased likelihood that police will "stop-and-search" non-whites is already documented in the UK.)
      • 2. Asylum seekers and other non-nationals will be disadvantaged and stigmatised when they cannot present their ID (we have seen a reflection of this already in the use of vouchers for asylum-seekers to obtain food and clothing; they were very badly treated in general, but one specific example is them not being given change by shopkeepers when they presented vouchers worth so many pounds.)
      • 3. A thriving black market in stolen IDs, for all new arrivals to the country or people who want to commit crimes not in their own name.

      Are you seriously telling me none of this goes on in Denmark?

      --
      Mod early, mod often.
    2. Re:Why is national id cards / numbers bad ? by Wateshay · · Score: 2, Interesting

      Well, I can't speak for anyone else around here, but I think they're bad for two reasons. The first is practical. I just don't think that a national ID card (java or no java) can be made secure enough yet to justify the amount of trust that those who don't understand security will invariably put in it. If you have a number of different cards, then you aren't "putting all of your eggs in one basket."

      The second reason is philisophical. Although it may make life easier, or even safer, I don't feel that the government has a right to know where I am at any given time. Over here in the U.S., we have social security numbers, too. We even have social security cards. They're not ID, though. In fact, technically, no one except the Internal Revenue Service and your employer are allowed to ask for the number (they do, but that's a different discussion entirely).

      The defacto ID over here is the driver's license, which is issued by the state. These have become the ID of choice for use in identification under most circumstances, because most people have one and they contain your picture. The difference between a driver's license and a national ID, though (other than the fact that the DI is issued by the states and the NID would be issued by the Federal Govt.) is that no one is required to carry a driver's license unless they're actually driving. A police officer can't come up to me on the street and ask me for my ID because I'm acting suspiciously. Even if he arrests me for something, he can't require me to show him ID. He may be able to find it out anyway if he searches me and finds ID, or if I have a criminal record and he matches my fingerprints, but the point is that the burden of identity is on the government, not me.

      You may not agree with me, and may think it's silly since 95% of the time they can find out who I am anyway, and would not have much trouble finding me if they cared to look, but it is an important issue to me. It's not about being afraid of the government tracking me. For the most part I'm not afraid of the government (although I would like to ensure that the govt's powers are limited in case at some point in the future I do need to fear them). However, for me it's about freedom, and being required to present ID to the govt limits my freedom. So, I do "give a fuck" if there is a national ID card, and I hope this clears up a little bit for you why I feel that way, to a degree more than just "National id, bad".

      --

      "If English was good enough for Jesus, it's good enough for everyone else."

    3. Re:Why is national id cards / numbers bad ? by Simon+Lyngshede · · Score: 2, Informative

      First of all, racial integration is just as much a problem in Denmark as anywhere else.

      Regarding your 3 points.
      1. No one can ask for you id based on race and really it wouldn't tell them anything. Currently is just tells people that you're entitled to free medical care and stuff like that. You can not be arrested for not having one.
      2. Non-nationals has no need for a national id for another country, why would they? Same goes for asylum seekers, they however will get one if granted asylum.
      3. Danish ids are useless for anyone but the owner. They in themself doesn't identify you. They simply contain your name, part of you adresse and you social security number (I check with a card reader). No one can use my id card to gain access to my bank account, only to get information which is publicly available anyway. Just a handy way of locating me in a database. Databases containing personal information is stricly regulated by the way. Cross reference is VERY illegal, even for government institutions.

      Personally Im more worried about losing the keys to my apartment than my social security card.

    4. Re:Why is national id cards / numbers bad ? by Anonymous Coward · · Score: 0

      American's hate the idea of national id cards.

      Of course, they love the shoppers cards, the credit cards, the drivers license, etc.

      but on a single card?

      never.

    5. Re:Why is national id cards / numbers bad ? by spRed · · Score: 1

      People in the US have a basic mistrust of the government that goes way back. This is reinforced by the general ineptitude of beurocracies that every country sees. Add to that the fact that the US is a federation of states and National anything always sounds like a bad idea and a power grab. Hell, we didn't really have a peace time army until after WII.

      The pracitcal complaint about national ID cards is that they add very little to security or convenience but have a potential to be abused. It doesn't matter that there is a tiny chance that they will be abused. It does matter that if abused it could lead to great harm. National ID == risk and no reward.

      In case the above reasons weren't enough to explain the knee-jerk screams about National IDs there is also the small matter that the Bible says the anti-Christ will force everyone to wear a mark of his choosing to do their day to day business. No need to prove to the world that we really are "The Great Satan" *wink*.

      --
      .sig Karma out the wazoo, better to spend points elsewhere if this is above 2 or below 0
    6. Re:Why is national id cards / numbers bad ? by Anonymous Coward · · Score: 0

      American's hate the idea of national id cards. Of course, they love the shoppers cards, the credit cards, the drivers license, etc. but on a single card? never.

      I'm not sure where the OP was going with this, so lets play slashdot divination:

      Americans == dumb
      Americans hate National ID cards
      Therefore National ID cards == good!

      or

      Americans == capitalist pigs
      Americans do not have national ID cards
      Therefore national ID cards == socialist uptopia!

      Hmm, I think he meant both. But anyway he's clever and cynical - unlike Americans, who as we all know are too dumb to understand his comments.

    7. Re:Why is national id cards / numbers bad ? by quax · · Score: 1

      In Germany we do have national ID cards as well, but I usually don't carry mine on me. I have never been asked by police to present it (traffic cops ask for the driver licence).

      It happened to me once that I drove and had neither ID nor driver's licence on me. The cop just wrote down my license plate and asked me to turn up at a police station within the next 14 days to present my driver's licence.

      So you may ask what is the national ID good for? It gives me a single token to prove my ID. For instance when opening up a bank account or when going to the polls.

      I think of the ID as a service that the government provides. After all impartially serving the citizens is the sole raison d'etre of a government in the first place.

    8. Re:Why is national id cards / numbers bad ? by shivianzealot · · Score: 1

      Why is national id cards a bad idea? Are people afraid that the government will track them. Who really gives a fuck if it allows the government to track you with it? They could do that anyway if they really cared enough. I simply don't get it.

      I deal with this kind of apatahy every day in the states. Let's dissect this:

      Who really gives a fuck if it allows the government to track you with it?

      I do. Are you willing to make the blanket statement all actions in which your ID card would be entangled can be and should be freely monitored by your country's officials? Its just a facet in the larger issue of privacy, which, depressingly, most people don't seem to understand. We justify revoking pieces of privacy to do away with crime, Bad Things(TM), -or for us USians- "terrorism." Accepting this requires us to accept the that whatever our government says is a Bad Thing really is Bad as an axiomatic truth. To say so is a gross fallacy. I come from a country which prides itself in its citizen's ability to speak their minds, yet can be fined or imprisoned for saying certian words on a public broadcast medium, as just one example.

      To do away with privacy, law needs to be perfect, and people content to have the doors on public restroom stalls ripped from their hinges. The former will never happen, and national IDs are a dangerous step in that direction.

      --

      Bored with karma, be a fan/freak

    9. Re:Why is national id cards / numbers bad ? by vrt3 · · Score: 1
      The second reason is philisophical. Although it may make life easier, or even safer, I don't feel that the government has a right to know where I am at any given time.

      I have an ID card (though not digital yet), and it doesn't enable the government to know where I am at any given time. They know where I live, but that's about it. I might be on sunny beach in Spain or in the forrests of Sweden and they wouldn't know.

      --
      This sig under construction. Please check back later.
    10. Re:Why is national id cards / numbers bad ? by MourningBlade · · Score: 0, Redundant

      [I]mpartially serving the citizens is the sole raison d'etre of a government in the first place

      Hmmm...no. At least, not to my way of thinking. Let me explain what I think, and maybe you can see where the flaw is in my logic. If you do see a problem, let me know, as this is an area I have interest in.

      Ok, would it be fair to say that your statement is basically "serving citizens is the cause of the government"? I hope so, because that's my interpretation of your statement.

      If that is true, let's consider several other, similar, roles:

      • Serving customers is the cause of businesses.

      That doesn't sound so wrong in a market-based system. In a demand-economy that might not be the case, but I'll avoid that since we seem to be talking market systems.

      But, you see, I don't think we'd say that serving customers is the cause of business. It's more like what is necessary for them to continue their role.

      The cause of business would, perhaps, be a gap between that which is desired, and that which is produced (again, assuming market-based systems). Enough people want something enough, and someone who can provide it notices and decides to provide it.

      But let's say that that is understood when we say "serving customers is the cause of business."

      Which customers?

      For some businesses, that's pretty clear. Kinda. Sorta. At first glance.

      Consider a computer store: they sell computers to people. It's what they do. So these people who buy computers are customers, right?

      Well, the ones who buy computers are. Yes. But so are the computer companies that the computer store sells. Don't believe me? Unless the computer store provides the right environment for these computer companies, and unless they produce so much in sales for them, and unless they make sure their salespeople push the product, the computer companies will cease to give the computer store a good deal, which will harm their bottom line thus costing them money.

      If you have to provide a product to someone to make money, they are your customer.

      In turn, the other customers of the computer store might be: the government, the people they rent the property from, the local PTA and religious organizations, etc....

      As you can see, the phrase "serving customers is the cause of business" becomes meaningless, as "serving customers" describes what the business does from day to day, not why they are there. In addition, the "customers" the business is serving are by no means clear to the supposed "consumer."

      But that could be an isolated incident. After all, I came up with the statement, I could be knocking down paper tigers.

      But the statement seemed reasonable at first. Let's look at another, similar statement.

      • Serving his family is the cause of the husband.

      This one is a bit different from the last one, but is very, very similar to the original "serving citizens is the cause of government."

      The husband helps provide support and protection for the family. The husband is a chosen part of the family (chosen by the wife), and freely (well, most of the time) entered into the family.

      But, again, the husband did not marry the wife in order to support and protect her. He married her so that they could be together, and so they would have a future together. And so they could have guilt-free sex with the approval of their parents. That's a big reason, too. ;-)

      Supporting and protecting is merely part of what he does if he wishes to be a good husband and member of the family.

      (he'd also better knock her up when she wants and not before, but that's another topic).

      Ok, let's take another example.

      • Laying eggs is the cause of chickens

      Again we look at what the entity produces to determine what the cause is. Again it's "well, not quite".

      In this case, however, we are a bit closer: something had to lay

    11. Re:Why is national id cards / numbers bad ? by Anonymous Coward · · Score: 2, Insightful
      I believe the argument goes:
      We only really want to track whitches. Oh, now we only want to track Jews, Jehova's Whitnesses, gays, and political dissidents. Oh, strike that, now we only want to track communists. Strike that, now we only want to track Arabs, I mean big bad terrorists. Now put your vauables in that pile, your clother over there and go take your shower with all of the other accused unlawful combatants and enemy supporters in protective custody.

      Fear of revolution keeps governments inline. What got IBM so in trouble for aiding in the Holocaust? Providing administrative tabulation machines that helped keep records on the Jews, J.W.'s. gays, etc. and made rounding up and keeping them more efficient. The first thing rising dictatoships/McCarthyist do is better control weapons and keep better tabs on people. I don't want a revolution-proof government. I don't want a revolution, but I think the government should fear its people and prevent revolution by keeping them happy rather than bullying the people.

      Martin Luther King was imprisoned. Attack dogs and fire hoses were turned on peaceful civil rights demonstrations. We don't really want a society without "crime", we want a society without injustice. Sometimes some crimes bring back the justice. Martin Luther King was a righteous criminal.

      Stamping out crime means stamping out dissent. Don't fool yourself. Learn from history. Anonymity threatens the law much more than it threatens justice. I can murder someone just as easily if Seven-Eleven needs to phone my fingerprint and super-secure government ID number in to the poliez in order to sell me a loaf of bread. I want an injustice-free society, not a crime-free society.

      I think argument number 1 is a little paranoid, but it has some truth to it. I think argument number 2 is much better.

      Argument number 2 is that people are stupid. People know current IDs can be faked. The new "fake proof" IDs will be fakable with more effort, but nobody will believe you when you say you've been the victim of identity theft. National IDs help people become sheeple.

    12. Re:Why is national id cards / numbers bad ? by bmetzler · · Score: 1
      Are you willing to make the blanket statement all actions in which your ID card would be entangled can be and should be freely monitored by your country's officials?

      In the US, we elect our officials. I *want* to be monitored by officials that are working to protect us. Monitoring is good, if someone does something bad, I want the government to do something about it. I, for one, don't do bad things and have nothing to hide. I'm sure that millions of other Americans feel the same way.

      The bad thing comes when Americans *choose* to elect corrupt officials who hate moral people and want to hurt them. But corrupt officials don't need an ID Card to hurt moral people, there are many ways.

      If the choice is to be hurt by corrupt officials with or without ID Cards, or let the goverment use ID cards to protect me, I'm choosing ID Cards. And I'm going to do my part to make sure that good officials continue to be elected. That is why I will be voting for Bush again next year.

      -Brent
    13. Re:Why is national id cards / numbers bad ? by Anonymous Coward · · Score: 1, Insightful
      You are very fortunate that you have never been harrassed by the police.
      It would be quite a reasonable guess that you have white skin and well off (typical profile of the average slashdotter), but you might not be.

      And this is the main problem with systematic surveillance by the government; it is much too easy to misinterpret the information that is gathered to make false conclusions about you.

      National ID cards makes it possible to cross-reference data from many sources and store it forever, and the information that is gathered may be incomplete, or worse, incorrect. Who will watch the system to ensure abuses won't occur?

      Do you play violent video games? Do you like watching porn? drink lots of beer?

      Worse still, do you know for certain that you do not have any genetically inhereted diseases?

      How would you like it if your employer or your health insurance company knew that you have a family history (and therefore through genetics you have a greater chance) of alcoholism or mental illness, even though you don't have any of those diseases?

      You might trust your government's word that they'll won't abuse the power that has been granted, but can you trust your government and their actions in 50 years time? Governments always try to overstep the powers that they've been given.

      Even if you have "nothing to hide", imagine this scenerio in a police state with cameras everywhere:

      Someone stops you on the street and asks for directions. You tell him what he wants to know, and maybe chat for a moment. Then he goes on his way.
      What you don't know is that on the police screen, biometrics has identified him - rightly or wrongly - as a suspected terrorist. And, of course, your name and address are available too. The watchers have no way of knowing what was said, just that you met and talked.

      So does this mean you should run like hell if anyone you don't know wants to talk to you incase he/she is a criminal? Should you think twice before you buy that book or video game incase future employers misinterpret your personality? Should you watch what you say on the phone incase its tapped by the police?

      I think this quote from a speech made by the Canada's Privacy Commission sums it up quite nicely:

      If you have to go through life knowing that everywhere you go, everyone you meet, everything you do, may be observed, scrutinized, cross-referenced, judged, maybe misinterpreted and used against you by persons unknown, by authorities of the state - if you have to go through life like that, you are not truly free.
      Link to speech
    14. Re:Why is national id cards / numbers bad ? by shivianzealot · · Score: 1

      In the US, we elect our officials. I *want* to be monitored by officials that are working to protect us. Monitoring is good, if someone does something bad, I want the government to do something about it. I, for one, don't do bad things and have nothing to hide. I'm sure that millions of other Americans feel the same way.

      No, you probably _DO_ have quite a bit to hide, and this idea of "I have nothing to hide" is a huge bulk of my discontent. Ever downloaded an illicit MP3? Maybe you plan on running a home network in a state introducing legislation for ISPs PO'd about the bandwidth you've been contractually allotted. Perhaps you've used the odd seriel number for a legally purchased application in the place of a lost one? Or if you're the Free as in Speech(TM) type, you've watched a DvD on linux (you terrorist, you!). My main point was if we take these anti-privacy measures, legislation and existing law needs to become a whole lot less stupid, and I don't think George W. Bush is the man to pull it off. What sort of legislation and existing law do you think he thinks is stupid?

      No, it really isn't our fault for "choosing to elect corrupt officials." Until our election process allows us to vote for candidates who's platforms we like without courting the chances of a candidate we really DON'T like of succeeding, it is the fault of our system. Understand this is not advocacy for green/constitutional/libertarian parties, rather I vastly prefer a two party system over the alternative of a coalition government. Perhaps the significance that little "(D)" or "(R)" plays in front of a public "servant's" name were much smaller, and "primary" elections done away with... well, that's another rant. Regardless, until then, corruption and rule over topics the governing body is apathetic toward is entirely self sufficiant. Only in extraordinary situations do individuals play any significant broad role for change, making the election of a "good" official difficult, but we should still try.

      --

      ...and I apologize profusely, but I can't resist! Was it not George Bush who's general attitude was there was not enough "time" for McCain's election reforms as a result of terrorism?

      --

      But corrupt officials don't need an ID Card to hurt moral people, there are many ways.

      Most law is subject to selective enforcement. How often do you drive five miles over the speed limit? Taking these steps against privacy makes dissent more difficult as we arm those in power with more tools to potentially subvert those who oppose them. No, its not necessary that they have ID Cards to hurt us, but it becomes immeasurably easy when you have the mask of bad legislation to harm us under.

      I'm not asking for our police officers to throw their badges off and us to submit to anarchy, but rather that we understand we have an a fourth ammandment for a damn good reason.

      The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no Warrants shall issue, but upon probable cause, supported by Oath or affirmation, and particularly describing the place to be searched, and the persons or things to be seized.

      National IDs don't make me feel particularly secure in my person, just more vulnerable to a more dangerous kind of terrorism

      --

      Bored with karma, be a fan/freak

    15. Re:Why is national id cards / numbers bad ? by Anonymous Coward · · Score: 0

      You know, the Americans could show that they are not dumb by exercising their right to vote and voting for a sane leader at the next presidential election. Until then, the rest of the world can only judge you by your actions, and as it stands you are either dumb or incredibly cynical and nasty.

    16. Re:Why is national id cards / numbers bad ? by quax · · Score: 1

      Thanks for such a long elaborate posting. I did enjoy reading it, although I feel I may have misled you a little bit by my choice of words. When I wrote "raison d'etre" I didn't literally mean that this is how governments came into being rather than how I think a good government should think of itself (as well as how citizens should approach their government in a democratic society: As being the ultimate sovereign blessed with birth-rights that the government has to live up to).

      Regarding your questions:

      1) I split this up in two chunks, because there is the form that a government takes and then there is the regular election process. The latter of course happens quite regularly, but the former is fundamentally more important.

      a) Our current form of government in Germany was determined by an assembly that tried very hard to make sure that the 2nd republic wouldn't fail as miserably as the 1st one. Since then there were some slight adjustments, regarding the size of the parliament for instance, and clarifications regarding the balance of power between German states and the federal government. But there has been one overarching most important process: More and more power has been going to the EU and its institutions (the EU commission and parliament). This process has been progressing steadily over many years, so than many people still do not realize how much power has been stripped from the federal government and now lies with the EU.

      b) Our last elected German government came to pass as the typical mix of different stances of competing parties were evaluated by the people who bothered to vote. The last German election was especially interesting, because it was clear that it'll be a tight race. Every vote counts the same (no such thing as an electorate college) and goes to the party of choice. It was quite clear that we were to get a coalition government (e.g. two parties have to combine to get a majority in the parliament). I traditionally vote for one of the smaller outfits, the party with the kind of political agenda closest to mine, so that they can serve as strong corrective elements in the government. For the last election our chancellor Schroeder played the Iraq war trump card quite skillfully (the war was and still is hugely unpopular in my country). That probably gave him the critical percentages that the governing coalition needed.

      2) This also falls into two categories: Administrative and political government.

      a) When talking about serving the people in the context of an ID card, this refers to the former. Functions that should be monopolized (i.e. several competing ID card vendors pretty much defeat the purpose of an ID card), as well as tightly monitored and democratically legitimized naturally fall into the domain of governmental administration. (If you can not trust the governmental administration to follow strict privacy laws you are already in deep trouble and may want to look for a place to emigrate to).

      Contrary to popular believe I think governmental agencies can be run efficiently if proper incentive and monitoring systems are used as well as private companies employed whenever possible after having gone through a competitive bidding process. A demanding citizen should not content with anything less than such an efficient administration - after all we pay for it.

      b) The executive part of government is the truly political one and follows a political agenda. When voting you decide what agenda you want to see followed through. I.e. if you are against nuclear energy and pro energy saving you vote for the Green Party, if you are pro trade union and pro-welfare you vote for the Socialists etc. Usually your political profile will not coincide 100% with any party, so you try to optimize. Then there are swing voters like me who also factor in tactical considerations. And then there are those who hear Mr. Schroeder warn that there will be a war and promise that he will do all he can to prevent this war, and make their vote accordin

    17. Re:Why is national id cards / numbers bad ? by MourningBlade · · Score: 1

      Thanks for the reply.

      In electoral demographics, your electorate looks much the same as the US - large blocs, with a swing component. I wonder how much of this is due to the 1-choice election system that we share.

      Like you, I am a swing voter. Unfortunately, I am so because anarcho-libertarianism is rarely on the ballot. ;-)

      A quick series of comments, I'd, again, appreciate a response.

      [C]itizens should approach their government[...]As being the ultimate sovereign blessed with birth-rights that the government has to live up to

      I think that this clashes with your view that government exists to serve the people. Allow me to explain:

      If I serve another person, it is at that person's option (as well as mine, of course). Let us say that I am a janitor for a school. Part of my duty is to clean the wastebaskets of all the professors. I do not think it unreasonable that one of those professors would request that I not clean his wastebasket, as he has a bad habit of throwing away important things, and therefore he will clean it out at the end of the week himself. Quite reasonable. I would then not serve him (in that faculty, at least).

      Most servant-served relationships are this way, except in the case of the doctor and the patient in which there is an exception: the doctor may have to serve the patient without the patient's consent if the patient is unable to give his consent and it is necessary to save the patient's life.

      If you do not believe that the government makes people better, then I think we would be inclined to agree that the "serve" definition is closer to one of a janitor providing a service for the served.

      But this is not the case at all with either of our governments, unfortunately. I cannot be sure about your country, but I do know that in the US that you cannot be a bank and not follow US banking regulations. They will put you in jail.

      The argument could in turn be made that society has asked for these regulations to protect them from harm, and that the government merely provides this service. Yet this does not follow, as society could equally be served by non-compulsory methods (bank certification instead of compulsory licensing).

      Also, this tendancy towards compulsory inclusion/exclusion indicates that society believes government does make people better. Perhaps a better statement would be "makes the people better." Takes care of them as a doctor or a nurse would, and without their consent if they are unqualified to give it.

      But I am believe, and I think you would as well, that I am quite qualified to give or not give my consent to be forced to do business with only approved banks. You and I would both reject the notion of only being able to do business with approved newspapers, so what is different about banks?

      Furthermore, it doesn't stop there. Consider taxes: inherent to the notion of taxes is the idea that society has a right to your property (land tax) and the fruits of your labor (income tax, sales tax from the seller's perspective).

      The argument for this is that government provides a service for you, therefore you should pay for it, but you are not given the opportunity to grant your consent to individual services, so how can you be said to be liable for the costs associated with them? It just goes around in circles.

      Much of this that I have said above is anarcho-capitalistic propaganda, of course. But I hope I have at least hinted that the notion of government serving the people does not necessarily coincide with the concept of the individual as sovreign. The only arguments that seem to support the serving notion of government as it is currently implemented work if society is sovreign over the individual.

      Or maybe I'm not looking at this right.

      I'll keep the rest of my comments brief.

      [S]everal competing ID card vendors pretty much defeat the purpose of an ID card

    18. Re:Why is national id cards / numbers bad ? by quax · · Score: 1

      I really should get back working on my project, so I'll try to keep this reply fairly short.

      In electoral demographics, your electorate looks much the same as the US - large blocs, with a swing component. I wonder how much of this is due to the 1-choice election system that we share.

      Actually I simplified a bit, there are after all two more smaller blocks the liberal/libertarian party (more libertarian than liberal but not 100%) and the Greens, both hover around 10% and one of them is always in the government. I think a party system like this gives the electorate more influence to determine the political agenda. When the Green for the first time got into the parliament in the 80s this was quite a shock for the established parties and all of a sudden they all started to pay lip service to ecological issues.

      In a representative system like in the US or the UK you do not get this kind of dynamics. That is why there are actually many politicians in the UK advocating to adopt a proportional election system as well.

      I very much sympathize with libertarian ideas. Personal freedom is what I value the most, but I recognize that society has to be allowed to establish borders for personal freedom and ecological issues provide a good example why. Let's pick a simple example, government regulations of toxic substances. I think there are many substance where a warning label is not good enough.

      So yes, I think there are areas were the society through government as a proxy should enforce certain rules. Banking services are a gray area. It reminds me of a discussion I had with our gardener when I was a kid. My father is a physician and always argued that all health insurance should be organized like the private health insurances (if you earn above a certain threshold or are self-employed you are free to chose a free health insurance instead of a governmental program). The private health insurance does not process the billing rather you pay the doctor's bills and collect the money at the end of the year from your insurance. The governmental insurances on the other hand also takes care of the billing process i.e. the patient just receives the treatment and does not have to worry a bit about billing and paying. The logic behind this - that is what our gardener pointed out to me - is that the affluent and educated are smart enough to take care of this themselves, but he said he knew a lot of people who while being great garden laborers are simply to disorganized to be trusted to process such a billing and reclaiming process for themselves.

      So our government indeed assumes the role you described: Takes care of them as a doctor or a nurse would, and without their consent if they are unqualified to give it.

      From my point of view the key is to find the right balance i.e. when am I qualified enough to make my own decisions? As an academic I don't have much reason to complain, but this country is certainly much more of a regulatory hell for somebody who doesn't hold these kind of degrees, and our economy could benefit immensely if we thru a lot of those out.

      But coming back to your banking example I must admit that I'd not be very comfortable if I had to ask every time I open an account if they are governmental certified. If I open a checking account I very much like the idea that my balance is governmental guaranteed no questions asked.

      Taxes are of course a touchy issue:
      inherent to the notion of taxes is the idea that society has a right to your property (land tax) and the fruits of your labor (income tax, sales tax from the seller's perspective).

      Property tax is actually unconstitutional in Germany, so we don't have that one. The other taxes are all "hidden" i.e. the sales tax is already included in the price tag, the income tax in deducted from you paycheck before the cash is electronically transferred to your checking account. If you are employed your are in tax filling heaven, because you do not have to file anything, if

    19. Re:Why is national id cards / numbers bad ? by MourningBlade · · Score: 1

      Quax, it's been a pleasure talking with you, and I hope to run into you again. Since you said:

      You are absolutely right when pointing out that "If you cannot trust the government with data, and the task you have assigned your government requires such data, you are in deep trouble." is a much better sentence. Given the PATRIOT track record of the current US administration the libertarian solution of trying to cut back the governmental involvement as much as possible may be the only practical approach in your country. If your government is broken and the political processes are so arcane that there is not much hope that this can be mended any time soon, than the only sane choice will be to keep the government out of your life as much as possible.

      and privacy was the point of the topic, I'll lay the topic to rest.

    20. Re:Why is national id cards / numbers bad ? by Anonymous Coward · · Score: 0

      Quite correct, only Americans are naive and paranoid enough to think that because they carry a piece of plastic with a chip they can suddenly be tracked whereever they go and someone from the FBI will know how many lumps of sugar they're putting in their coffee at work (as if the FBI would care...).
      Yet at the same time those Americans are scrambling to get cellphones with built-in GPS systems so they can track the whereabouts of their kids in case they get abducted or to see if they're coming straight home from school and not going for an (illegal) drink and smoke first...

  39. Why is the gut reaction "bad"? by claes · · Score: 4, Insightful

    In Sweden, id cards needs to conform to certain standards, that are set by the same authority that standardizes many other things (www.sis.se). I do not know the details of this, but I think it is good that it is under control of a government authority. There is nothing mandatory with carrying them around, or even having them. We don't call them national id cards either, but they are accepted as id-cards everywhere. In Sweden that is... since they don't have the nationality of the owner on them, they are no good for travelling within Schengen yet.

    It all comes down in what ways you trust your government of course. In this regard I trust it. For example, the nationality thing was hotly debated, since the reason we don't have nationality is that it would be discriminating for non-swedish citizens to have their nationality on them. Or so it was argued. But the government had to change for public opinion because of this, being part of Schengen is not really good if you still need passport when travelling...

    1. Re:Why is the gut reaction "bad"? by schambon · · Score: 1

      Couple of points to clarify.

      1. Swedish id cards (identitetskort) are issued by third parties (banks, the Post Office) but must conform to a national standard.

      2. They *do* have a "nationality" field, which is left blank for foreigners (so it is possible to discriminate against foreigners just by looking at their card).

      3. They are not, as far as I know, considered by the EU as a sufficient proof of identity, but many people don't know that. I have used my Swedish id several times to travel throughout the Schengen zone by plane. (Obviously, you don't need any id whatsoever to cross Schengen borders by car, foot, or any other means).

      I do it mostly for philosophical reasons, as I don't see why I should disclose my nationality in the Schengen zone; the fact that I am a legal resident in one Schengen country should be enough. (I'm not Swedish, hence my Swedish id's nationality field is blank).

      4. For US readers: the Schengen zone is a subset of the European Union where border controls have been removed (so that driving from Belgium to Germany is no more difficult then driving from New York to New Jersey).

  40. HOLY CRAP!!! by Jameth · · Score: 1

    A country that can actually make photo-id's look decent!

    1. Re:HOLY CRAP!!! by jawtheshark · · Score: 2, Informative

      They are standardized all over the European Union. They all look the same. Well, I've seen my brothers one (which is not Belgian anymore, I still am), and it is *exactly* the same. Oh, minor differences like language and stuff like that, but it's essentially the same.

      --
      Ahhh...the great dumpster continuum. Many a free computer will be found there. -- sowth (748135)
    2. Re:HOLY CRAP!!! by nanoakron · · Score: 1

      Except the UK.

      No photo-IDs here.

      Come join us.

      -Nano.

    3. Re:HOLY CRAP!!! by Anonymous Coward · · Score: 0

      No there are not standardized across Europe.

    4. Re:HOLY CRAP!!! by jawtheshark · · Score: 1
      Seems I am indeed mistaken. However what should be noted is that the Schengen Treaty requires you to have a "European Identity Card" on you while travelling in the European Union. For some reason I just assumed they were standardized.

      Good, they are not. However, I noticed a big similarity between those I saw: picture on the left, information on the right. That is perhaps not standardization, but it facilitates the work of people like policemen who can ask your ID card.

      My honest opinion about the UK: they should never have joined the EU in the first place. They always make trouble.

      --
      Ahhh...the great dumpster continuum. Many a free computer will be found there. -- sowth (748135)
    5. Re:HOLY CRAP!!! by Anonymous Coward · · Score: 0

      "My honest opinion about the UK: they should never have joined the EU in the first place. They always make trouble."

      Perhaps. But, as someone living in the UK, in the long term I hope that the UK will start to act like a good European. For now, we should join the Euro and stop supporting the worlds largest rogue state.

    6. Re:HOLY CRAP!!! by jawtheshark · · Score: 1
      Dear AC,

      If more UK citizens were like you, I'd like to revoke my statement at once. Unfortunatly, most UK citizens don't think so positively about Europe as you do.

      --
      Ahhh...the great dumpster continuum. Many a free computer will be found there. -- sowth (748135)
    7. Re:HOLY CRAP!!! by Anonymous Coward · · Score: 0

      Unfortunatly, most UK citizens don't think so positively about Europe as you do.

      I think it come down to age. Most people under the age of 30 are pro-European, but older people tend to be anti-EU.

      Many people are saying that now Blair has got support for the recent action in Iraq (beacuse it was over so quickly), he will use this to his advantage in a Euro referendum (he's a pro-European at heart). Here's hoping.

    8. Re:HOLY CRAP!!! by avdp · · Score: 1

      Not all the EU countries have signed/agreed to the Schengen treaty. In other words, you can't travel in every country of the EU without a border check. The UK (not suprisingly) is one of those countries - there are several others.

      I was not aware that the common ID card was part of that treaty as well, but here is your explanation for why the UK may not have that ID.

    9. Re:HOLY CRAP!!! by jawtheshark · · Score: 1
      Yeah, I'm aware of that. Yet, I still think I am mistaken about the ID card. It probably is not standardized and I probably just assumed because the ones I saw look so similar.

      So the ID card is not common or standardized, yet you still need one to travel around the schengen zone. As said before, I'd wish we kick the UK out of the EU anyway. Denmark and Sweden are next on my list of undesirable countries in the EU... guess why?

      --
      Ahhh...the great dumpster continuum. Many a free computer will be found there. -- sowth (748135)
  41. It's Big Brother by billstewart · · Score: 1
    Abuse of identity systems is what leads to many of the problems, and tracking people and their activities leads to many more of them. Even 20-30 years ago, US driver's licenses weren't primarily used as identity documents, except for tracking bad driving, though they were also used as age verification credentials for getting into bars. But that was when adults didn't need permission to work, and states were using DLs to track drivers rather than withholding them to harass Spanish speakers.

    During the mid-80s, the kinds of people who wanted national databases and ID systems required states to tie driver's licenses and social security numbers together; there was no clearly Constitutional way to do so, but they used the usual bribe of "we'll cut off Federal highway funding to any state that doesn't cooperate." There were some actual problems this helped with, such as truck drivers with licenses from multiple states who could use their State X license if they'd had their State Y license pulled for bad driving.

    --

    Bill Stewart
    New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
  42. Hercule Poirot, of course by Anonymous Coward · · Score: 0

    As he said in "Murder by Death", "I am NOT a Frenchie, I'm a Belgie!" He was fictional, so don't expect hacking the database to get you very far - use those little grey cells.

  43. Re:im not for it by Anonymous Coward · · Score: 0

    Gee, that's nice to know. What do you want, a cookie?

  44. Antiquities? I'll take this troll... by Anonymous Coward · · Score: 0

    It matters really very little if you have to pay even $0.50 more per gallon of gas.

    What we are talking of having lost are unique items produced by the earliest civilization that we know of.

    The rights of all humanity collectively are violated by the theft of these items.

    Also stolen were thousands of clay tablets from this period, largely unstudied due to the previous situation in Iraq, but are hoped to contain, for example, additional new fragments of the Gilgamesh Epic.

    Further, it isn't even as though it was a trade off between protecting oil and protecting the national museum. It wasn't.

    The military simply ignored its duty to humankind. It is a gross and disgusting behavior that should be severely punished.

    Having choosen to put themselves in such a situation in Iraq, the military had a DUTY to protect that museum to the best of its ability, even if it meant increased risk or even CERTAIN death to U.S. soldiers.

    When you put yourself in the position of playing God on behalf of all humanity, you assume that responsibility.

    I hope every single soldiers realizes just how they have been used and disrespected as human beings, and that mass violation of the rights of humanity they are RESPONSIBLE for spitting in the face of for not protecting these treasures.

    Responsibility is retained when you freely sign your free will over to a second party. Those soldiers are fully morally responsible for every action they have taken or failed to take under the guise of "orders".

    1. Re:Antiquities? I'll take this troll... by Anonymous Coward · · Score: 0

      Amen.

  45. Re: Audrey Hepburn by statusbar · · Score: 1

    Off topic I know, but the weirdest thing happened to me. One morning I woke up with my wife and the first thing I thought of was Audrey saying 'The rain in Spain falls mainly on the plain'.... Went into the living room and turned on the TV and saw that Audrey Hepburn died.

    --jeff++

    --
    ipv6 is my vpn
  46. Too much product by prator · · Score: 0

    Do you use a bottle of gel on your hair everyday?

    -prator

    1. Re:Too much product by Anonymous Coward · · Score: 0

      DO you use a bottle of Vaseline every time you post on Slashdot?

  47. Re:Just say NO to ID cards by Anonymous Coward · · Score: 0

    It's easy to confuse them, both are total shitholes.

  48. Re:Just say NO to ID cards by Anonymous Coward · · Score: 0

    Most americans aren't willing to trust their government to the point of being shoved into an oven.

  49. a contrived example by Anonymous Coward · · Score: 0
    Ackermann's function. Haskell is #2. Java is #15 wrt speed, #27 wrt memory consumption.

    Truth be told, though, Java is a much greater memory hog than Haskell (LISP isn't even worth mentioning), probably due to Haskell's lazy evaluation.

  50. date of expiry??!!! by Anonymous Coward · · Score: 0

    How does it know?

  51. You have been watching ;-) by Anonymous Coward · · Score: 0

    I have done some numerology on this:
    j a v a = 10 1 22 1 -> 1 1 4 1 (not very beastly)
    s u n = 19 21 14 -> 10 3 5 -> 1 3 5 (neither too) ... in fact I am flummoxed.

    The only letters I can match with '6' are the letters 'f', 'o', and 'x'. Darned if I can put that together into a word.

  52. Another reason... by PatientZero · · Score: 1
    ...to expire ID cards is so they have to be physically replaced every so often. I don't know about other states, but California's ID cards change every few years. The latest ones have a smaller version of the photo on another part of the card.

    As IDs get older, they become easier to forge. So if you force everyone to replace their IDs every 10 years, you make it harder to forge them overall.

    Of course, I doubt anyone would notice that they were presented with an "old style" ID card with a future expiration date. That's asking way too much of cashier's.

    --
    Freedom to fear. Freedom from thought. Freedom to kill.
    I guess the War on Terror really is about freedom!
  53. here's sun's explanation by Anonymous Coward · · Score: 0

    http://java.sun.com/products/javacard/smartcards.h tml

    What is a Smart Card?
    A smart card is a card that is embedded with either a microprocessor and a memory chip or only a memory chip with non-programmable logic. The microprocessor card can add, delete, and otherwise manipulate information on the card, while a memory-chip card (for example, pre-paid phone cards) can only undertake a pre-defined operation.

    Smart cards, unlike magnetic stripe cards, can carry all necessary functions and information on the card. Therefore, they do not require access to remote databases at the time of the transaction.

    Today, there are three categories of smart cards, all of which are evolving rapidly into new markets and applications:

    Integrated Circuit (IC) Microprocessor Cards. Microprocessor cards (also generally referred to by the industry as "chip cards") offer greater memory storage and security of data than a traditional mag stripe card. Chip cards also can process data on the card. The current generation of chip cards has an eight-bit processor, 16KB read-only memory, and 512 bytes of random-access memory. This gives them the equivalent processing power of the original IBM-XT computer, albeit with slightly less memory capacity.
    These cards are used for a variety applications, especially those that have cryptography built in, which requires manipulation of large numbers. Thus, chip cards have been the main platform for cards that hold a secure digital identity. Some examples of these cards are:

    Cards that hold money ("stored value cards")
    Card that hold money equivalents (for example, "affinity cards)
    Cards that provide secure access to a network
    Cards that secure cellular phones from fraud
    Cards that allow set-top boxes on televisions to remain secure from piracy

    Integrated Circuit (IC) Memory Cards. IC memory cards can hold up to 1-4 KB of data, but have no processor on the card with which to manipulate that data. Thus, they are dependent on the card reader (also known as the card-accepting device) for their processing and are suitable for uses where the card performs a fixed operation.
    Memory cards represent the bulk of the 600 million smart cards sold last year, primarily for pre-paid, disposable-card applications like pre-paid phone cards. Memory cards are popular as high-security alternatives to mag stripe cards.

    Optical Memory Cards. Optical memory cards look like a card with a piece of a CD glued on top - which is basically what they are. Optical memory cards can store up to 4 MB of data. But once written, the data cannot be changed or removed. Thus, this type of card is ideal for record keeping - for example medical files, driving records, or travel histories. Today, these cards have no processor in them (although this is coming in the near future). While the cards are comparable in price to chip cards, the card readers use non-standard protocols and are expensive.

  54. only a matter of try/catch ;-) by Anonymous Coward · · Score: 0

    LOL!

  55. It's a good thing by hdcool · · Score: 0

    And so is java.
    I myself have been a java hater for a long time,
    yet I took a quick look at it again lately and it has changed..really.

    Btw, you technology freaks must have some of those latest javagsms right? Is it slow? I think not, it's very well suited for this embedded stuff...
    And come on..C++ for this? No way...That's like using quantumphysics to count how many beers you had the day before.

    I'm a belgian dude myself and can't wait for my E-ID :p

    Cheers

  56. Windows for Smart Card used VB by John+Harrison · · Score: 1

    They killed the product about 2 years ago. It was a mess in many ways. I am probably one of the few people on earth that actually programmed anything in it. I found it painful. I prefer JavaCard and currently use the JCOP card.

  57. Times are changing by Anonymous Coward · · Score: 0

    I'm white, middle-class, and male. And it makes me sick the way people get treated.

    They say the first step to fixing a problem is admitting you have one, which is why these problem still exist. In my eye, we're all equal, and a person is a person regardless of what they look like or how they talk or the clothes they wear, and people being disrespected and treated differently makes me damn angry.

    But in the eye of the policy makers, there isn't a problem. They see some people as a threat, or a nusience, or devaluing their property by moving next door, or whatever. They'll produce statistics to "prove" it. They justify their actions because it's what they want to believe is right, and comfortable. Except it isn't right.

    I see this shit - my parents do not. I've had arguments with them over it, but they just don't get it - and they're actually pretty liberal people. I hope a few more generations will learn the close-minded folk that we all on people on a little rock of land called Earth.

    Oh, and multicultural girls are hot. :-P

  58. Crossreferencing no id card numbers by hoegh · · Score: 1
    Databases containing personal information is stricly regulated by the way. Cross reference is VERY illegal, even for government institutions.

    Make that "even more so for governmental institutions". Some years ago I worked at a Danish business school where we had employment data for approx. 10% of the danish workforce (where you had been employed and for how long - it was based on social security data (primarily "ATP-indberetninger")). Data where anonymized both regarding workers and workplaces (and some other dimensions I don't remenber today) but even so available to only a very limited group of scientists.

    Even so we weren't allowed to keep the data for very long. The authorities was afraid that we might be able to track information about individuals and therefore afterwards we weren't allowed to have access to anything but aggregated data.

    Having access to data that were immidiately crossreferencable was a goldmine. Take for instance the publication "Danish economy May 1988, The Labour Market" from the Danish Economic Counsil: For the first time economist where able to get behind the truth of unemployment rates. They could see that 75% of the workforce (the "A-team") where fulltime employed and 25% of the workforce (the "B-team") walked in and out for employment. If the unemploymentrate was 10% it only ment that the B-team where unemployed for shorter or longer periods on average 40% of their time.

    What is my point? Well, there are actually two: 1) Danish laws regarding privacy are being rigorously upheld by the relevant authorities and 2) universially crossreferencable data is a goldmine for researchers (here are a list of publications from the Danish National Center for Register based Research) and used wisely benificial for everyone.