Slashdot Mirror


Schneier on National ID Cards, Key Escrow Locks, E-voting

Schneier's Cryptogram newsletter this month touches on a lot of subjects near and dear to our hearts: national ID cards, TSA-approved luggage locks, a cost-benefit analysis of stealing an election via hacking evoting machines, a nifty credit with audible security, etc.

11 of 400 comments (clear)

  1. TSA locks is a problem? by erroneus · · Score: 3, Informative

    I don't see it that way. They have the right to cut the lock off already. The difference is that you can still have locked luggage... an extra level of tamper protection against the other people handling the baggage.

    I have personal experience with the TSA baggage screening functions and the chances of something being stolen from bags is pretty darned slim unless there was a conspiracy of players involved which is also highly unlikely. It is rare if basically impossible for a single TSA screener to open a bag unsupervised. Further, it requires a supervisor or higher ranking person to handle the TSA keys to the TSA locks. Cutting these locks are forbidden. If it was cut, you can be 99% certain it was by someone else.

    So when it comes to auditing the access to baggage, there's a higher probability of determining the point of failure.

    I think more can be done but speed and efficiency must be balanced against accountability. No one wants to be required to be present 3 hous before the flight do they? Didn't think so.

    The TSA lock merely gives people the option of having a lock that will not be cut by TSA.

  2. Re:Hard to verify out-of-state ID cards... by cuiousyellow · · Score: 5, Informative
    Schneier said it better than I could so I'll just quote the article you failed to read...
    The first problem is the card itself. No matter how unforgeable we make it, it will be forged. And even worse, people will get legitimate cards in fraudulent names.

    Two of the 9/11 terrorists had valid Virginia driver's licenses in fake names. And even if we could guarantee that everyone who issued national ID cards couldn't be bribed, initial cardholder identity would be determined by other identity documents... all of which would be easier to forge.
  3. It's a true case by zogger · · Score: 3, Informative
    1. Re:It's a true case by Alrescha · · Score: 3, Informative

      Ummn.. I don't think so. This case is about a man who refused to identify himself, not a man who refused to produce identification. This is not the same thing.

      A.

      --
      ...bringing you cynical quips since 1998
  4. Re:To lock or not to lock your suitcase... by DeepRedux · · Score: 3, Informative
    At least some TSA locks (SearchAlert) have an indicator that shows if it was open with the special TSA key instead of using the combination. The indicator is reset using the lock's combination.

    The only downside is that the indicator is not quite as obvious as a missing or broken lock.

  5. TSA-accessable lock has an indicator by Animats · · Score: 4, Informative
    There's an indicator on the TSA-openable lock that turns red when it's opened with the master key. So you have some idea of what's going on. The next step should be to put a clock in the thing, so you know when it was opened. That helps place blame.

    You ought to be able to call your luggage on your cell phone and get its location. Wherify has announced a product for this, but isn't yet shipping.

  6. Hong Kong = "National" ID Card by Dr.Hair · · Score: 5, Informative
    Hong Kong actually has a "national" ID card. Since so few people here drive, you can't use a driver's license as a form of identification. The new smart ID cards have a chip in them that stores the digitised thumbprint and signature among other information. They also function as a national library card and you can apply for a free e-cert (PKI) administered by Hong Kong Post

    Yes, the police are allowed to randomly ask you for your ID card. Most of the checks seem to be for immigration violations by mainlanders. On the other hand the HK government is putting in place fast immigration checkpoints, where you run your ID card through a scanner and provide your thumbprint and you're on your way without ever being questioned by immigration officials.

  7. Re:Hard to verify out-of-state ID cards... by x136 · · Score: 3, Informative

    I went for a walk at somewhere around midnight a few weeks back (in CA), without any kind of identification on me. A police officer on patrol stopped me and asked me a few questions (apparently there had been some burglaries in the area recently). He asked for ID, and didn't say anything about that being illegal when I told him that I had none. He took down some information, and we both went on our merry ways.

    So I doubt there is any such law, at least in California. Besides, what about the homeless? Surely many of them have no ID to show.

    --
    SIGFEH
  8. Re:We already have a National ID. by ToasterTester · · Score: 4, Informative

    By law social security cards are NOT suppose to be used as an ID number. But its one of those laws the government looks the other way on. Many states use it for drivers license number, many schools use it for a student ID, and so on.

  9. Re:Yes, and the devices collect the data by NortWind · · Score: 4, Informative
    Well your info on the license is a matter of public record. And if the bartender feels like telling someone it's his right.
    It's also your right to check whether or not your driver's license will stick to a really, really strong magnet.
  10. Re:conditioning by BigGerman · · Score: 3, Informative
    >>I was taught in school was only done in places like soviet union or east germany.

    I grew up behind the iron curtain and I can assure you they did not have "random checkpoints" there, IMHO. Number of searches you are the subject to was not even close to what you are in US.
    so maybe the idea that communists were stumping over the individuals in this way is part of brainwashing as well?

    Having said that, I totally agree with your points. Great post.