Slashdot Mirror
American Passports to Have RFID Chips
pr1000 writes "Wired is reporting that the State Department is planned on adding RFID chips to new American passports, starting with diplomat's passports in January. Those worried about the privacy concerns of RFID should take notice, as this rollout could set a precedent."
Bruce Schneier has made some interesting observations on the RFID passport plans. Somehow, I do not see how this could possibly make us "safer".
And you thought it was just a Vitamin K shot.
This new step is another step towards control - remember, that is what this is all about. Bad guys get around the system - the 9/11 guys were all bona-fide visitors. Good guys, which is everyone else, gets tracked and watched.
I'm glad I'm outside the country 8+ months of the year.
What happens when these chips fail? Do you get locked up for tampering with a Federal document, or some crap like that?
Turn your bag into a faraday cage, keep your passport in your bag.
Let me get this straight. Assume I am a bad guy. If I want to find an American overseas - particularly in a country where carrying a passport is mandatory, how am I going to go about it?
To take it one step further, if I am wifi'd into a database somehow, I can even do a few smarts and identify a "better" target (wealthier, public figure etc).
I carry an Australian passport and it will not shock me when "the Clever Country" bends over and does what the Americans do - yet again!
Unfortunately RFID tags don't have much range. You'd have to be practically on top of your stuff to find it - that or have the whole town you're in set up to track RFID tags as they move through doorways etc. I think I'd rather lose my passport, cash and credit cards than have that, though.
It's funny. Nudist colonies say they have nothing to hide, but now they'll be the only place *to* hide.
Wheel in the sky keeps on turnin'.
The difference is that with current passports, you have to show it, which has to be asked, and which you can refuse, so you have the ability to choose to accept the consequences of not showing your passport. With rfid tags it can be done without you even knowing it, and thus without you agreeing to.
But you get to choose who to show your passport to. Anyone can read RFID information, as long as they can get reasonably close to you.
Athletic Scholarships to universities make as much sense as academic scholarships to sports teams.
And those very same security "experts" obviously don't know that there are methods for secure encryption known throughout the world even now? You don't need to be an expert to know that!
And no, I can't see any other explanation. It cannot be the possibility of unallowed reading of the data: That's even easier if the data isn't encrypted at all. And it cannot be the possibility of making forged passports: Having data not encrypted makes this not any harder than having it encrypted with a known encryption.
Even in the worst case scenario, when the decryption key was made public by some other state, the situation couldn't get worse than without any encryption at all. Of course, the USA could just decide not to give the key (or any specification at all) to countries they don't trust. Those countries would then just have to do what they do now: Rely on the non-RFID portion of the passport (which is currently all that is in a passport).
So there is really no excuse to store unencrypted data on the RFID chip.
The Tao of math: The numbers you can count are not the real numbers.
From the article:
New U.S. passports will soon be read remotely at borders around the world, thanks to embedded chips that will broadcast on command an individual's name, address and digital photo to a computerized reader.
Any questions?
Government's idea of a balanced budget: take money from the right pocket to balance...oh who am I kidding?
RFID chips can be read from up to 50 feet away. Sure, most readers only work from a few inches, but there is off-the-shelf equipment available for a moderate number of dollars with a much, much greater range.
So, lets assume that the RFID chips in US Passports will be readable from "a long way away". Doesn't matter if it's 10 feet, 20 feet or 50 feet. Lets just say it's more than a few inches.
What does this mean? It means that a bomber with a moderate budget could build a detonator for an explosive device which goes off when it can detect the presence of an RFID chip.
It doesn't need to actually read the chip (lets assume the passport data is encrypted), it just needs to know it's there.
Furthermore, it could count the number of unique RFIDs which are currently in range, and only detonate the explosive when enough of them are seen at the same time.
It could be planted days, weeks or months in advance, and it'd sit there until its batteries ran down waiting for the right moment to go off.
The result is a bomb which only goes off when a sufficiently large density of American citizens is present.
- mark
-----
I tried an internal modem, but it hurt when I walked.
Does anyone else smell a business opportunity for Radio-shielded passport sleeves?
Nobody writes jokes in base 13. - DNA
Yes. They have protocols specifically to allow for this.
It might be more of a problem if there are RFID _readers_ all over the place. They might interfere with eachother's attempt at scanning for RFID chips. I have no idea whether the protocols allow for this.
sigs are hazardous to your health
This reminds me of a comment along similar lines.
When the U.S. mint added the shiny metallic strips to the bills, a friend of mine claimed quite seriously that it was so that it would be possible to "scan your butt" (or wherever you carry your wallet) to see if you were carrying loads of cash. My response at the time was sceptical, especially since the comment came from someone very non-tech, but wonder if it is even technically possible.
If the material is conductive, it should respond/reflect/absorb a specific frequency much like chaff does. Would it be possible to build a cash scanner? And if so ... "where can I get me one?" ;)
Beta is broken and the link to classic doesn't work. Stop wasting our time or there won't be anybody left here.
Hell, it's your country, your politics, your ideals, and your decision; I don't really care - it's mainly a curiosity for me that sociological values can change so rapidly.
I've just obtained a visa for the US, and had to give my fingerprints - I was curiously antagonistic towards this, and again it's nothing more than another incremental step. After thinking about it for a while I realised it's nothing to do with privacy, it's that I mentally associate being fingerprinted with being a criminal.
I felt I'd been judged and summarily convicted of something (what, I don't know, being an alien perhaps). As a reasonably law-abiding citizen (ok, I admit I sometimes exceed the speed limit on a motorway
Simon.
Physicists get Hadrons!
"I'm fed up with having to produce many bits of paper just to prove who I am"
They you should be opposing the 'identity' culture, not supporting it.
These chips will do nothing to make people safer (they'll be no harder to forge than current passports), but will certainly make some people less safe by broadcasting their information to anyone with an RFID reader.
Wrapping a tag in aluminum foil blocks the radio waves and prevents a tag from being identified. -
RFID Hack Could Allow Retail Fraud
Most of the concern seems to be around unauthorized person reading the RFID chip. According to this article blocking RFID chips is very easy to do if you have physical posession of the chip. Just wrap it in tinfoil. It would seem that someone would make a bag/box/pouch that would store your passport and protect it from being read w/o authorization. When you were in an area that required that you show your passport, the airport for example, you would just take the passport out of the bag. Sounds like a $19.95 solution to me.
I guess if you took your passport out at the hotel or some other place like that you could be "vulnerable". Maybe this solution from RSA woul help?
It does seem like the solution here is not to say "no RFIDs in the passports", but actually to ensure that there is a way to easily control when the tag is read. And there seem to be several solutions available.
If you refuse to show it, you're detained. Then, they open up your wallet/purse and look. All you did was delay everyone somewhat and create trouble for yourself with no real difference between they're waving you over or pointing a device.
Oh really? If you refuse to show it at the hotel? In the cab? In a restaurant? At the movie theater? There is no technical reason anyone can't set up a reader anywhere they want to snoop.
When I travel, my passport never leaves me. It's such a comfort to know it will be singing out my name, age, photo and home address to anyone who's curious. I feel safer already.
Kill, Tux, kill!
It is not easier to show, but it is a *lot* harder to hide. That's the point why everyone is making such a fuss around this issue, I think.
Today, you carry some form of ID, be it driver's license in the US, a national ID in Europe or whatever. You are most of the time obliged to show this piece of ID to law enforcement officers if they ask for.
Either the officer authenticates him/herself with his badge, a similar ID item or just the entire appearance along with police equipment and police car. So in 99% of all cases, I know when my ID is checked and by whom and I'm sure it was read by real officers on duty or someone is going to jail for posing as one.
With RFID, none of us can ever know if we were checked, let alone by whom. If that person was really authorized by law and duty to check us, we can only pray for. We want to hide our ID from anyone's eyes who has not identified himself as a lawful officer on duty. With RFID it is hardly possible.
If the regular police cannot or does not perform simple duties in plain sight, with proper uniform, without hiding the officers identity behind something, having the officers armed only with the law and a baton, our society as a whole is in trouble. Riot shields, handcuffs and a low power hand gun may be necessary at times, but cable ties, fully automatic rifles, masks are certainly unacceptable for me. Special units can have them, but regular policemen and -women should not. Hidden and unnoticed checks for unsuspecting passer-bys performed by guess-who are totally out of question.
Law enforcement should not use mobster tactics. Should not be armed like mobsters, should not act like them. This may give criminals and terrorists an advantage, but it is the only way to make sure we can distinguish between officers and mobsters. If we allow the police to act like the mob, guess how long it takes for these two to merge...
You can build an RFID tag that will DOS the system, but you first need to know how RFID works.
The RFID tag is simply a sequence of bits. You can ask about portions of its tag -- "do you start with sequence X". There is no way to communicate with only one tag; if you send a request, all tags in range hear it and send an affirmative signal if they do start with that sequence (and nothing otherwise).
When a reader needs to scan many RFID tags at once, it sends a signal saying 'Whose next bit is a 1?' and 'Whose next bit is a 0?' and counts the chirps for each response. When it gets zero chirps, it knows to stop (there are no tags with that ID). If it gets only one chirp, it has found a unique tag and records it. Otherwise, it recurs down both trees.
If you build a device that always says 'yes' to both questions, the reader will have to recur down both trees 'forever' or give up until you leave range.
This seems to have the desired effect of preventing RFID scans without your knowledge, and it would certainly be handy to be able to turn it off at will.
LincolnQ
The 'terrorists' upon whose actions all of this insane police state nonsense is based were funded and manipulated by both the U.S. and Israel specifically because the psychopaths in power want to stay in power so that they can have all the money, power, sex and cocaine. Having to work for a living, or serve in the military, is scary for them, and so they choose instead to trick all the trusting citizens into believing in 'terrorists'.
Anybody who looks at the details clearly will see the manipulation.
Remember the 'terrorist' passport they, 'found' on top of the smoking remains of the WTC?
That is just one of a hundred loose threads, and if it doesn't get your brain ticking, then you are either sleeping or dead, and you richly deserve the hell you are seeing rise around you.
"Oooh. But Conspiracies don't exist! It's impossible for a large number of people to keep a secret!"
Yeah? What the heck does that prove? NEWSFLASH: Conspirators do not NEED to keep secrets when the populace has been brainwashed into constantly looking the other way whenever a piece of evidence pops up.
People would rather fight and yell and argue in favor of the psychopathic manipulator rather than deal with the truly awful possibility that they are being raped. This, in fact, is exactly the reason psychopaths are so dangerous. Normal people are hardwired into certain behavioral traits which make them excellent marks for this sort of manipulation.
Any 'terrorist' who uses RFID passports to blow up Americans will be doing so with the consent of the military industrial complex, and your spreading of fear is making those jerks giddy with the joy of a mind-job successfully executed.
I have to live in this world, too, and imbeciles like you are contributing to the misery smart people also have to deal with. Arrogant? Gee, sorry. I'll just quietly go off to a barbed wire camp so you don't have to feel like an idiot.
-FL
So I guess that the US citizens should be able to express their discomfort about RFID tagging in the upcoming elections.
That isn't an option. We can't tell our representatives what to do, only select from the slate provided and pick one. We may tell them what we would like, but they are not required to do it. So no, we have absolutely no direct say on such topics. And since most Americans care more about whether we will allow use of stem cells for medical research or whether abortion will be a medical proceedure or if the puritanical elements get it relegated back to the alleys, we will never see such issues at the forefront. In fact, any candidate that comes out in opposition of the RFIDs will be branded a traitor to America that is soft on crime and terrorism that will get us all killed if elected. I hope this insight into the American political process helps. RFIDs are here to stay. The businesses like them, and they run the US, not the people that vote.
Learn to love Alaska