Slashdot Mirror

← Back to Stories (view on slashdot.org)

Security App For the New German Personal ID Hacked

Posted by samzenpus on from the why-can't-I-be-you dept.

prefec2 writes "On Nov. 1st Germany started to issue new personal ID cards which include a security chip. In combination with a reading device and an application on a PC at home, secure transactions can be made. However, the required application can be compromised using DNS spoofing and a wrong SSL certificate (article in German)."

2 of 93 comments (clear)

  1. Re:Well now. by rolfwind · · Score: 2, Insightful

    We no longer live in the days of Babelfish being the only game in town. Google Translate does a passable (but far from perfect) job:

    http://translate.google.com/translate?js=n&prev=_t&hl=en&ie=UTF-8&layout=2&eotf=1&sl=auto&tl=en&u=http%3A%2F%2Fwww.heise.de%2Fnewsticker%2Fmeldung%2FNeuer-Personalausweis-AusweisApp-mit-Luecken-2-Update-1133376.html

  2. Re:Bundestrojaner by maxwell+demon · · Score: 2, Insightful

    But for that, they would not need to add that security hole. They could just install it from the regular update server of the app. Or redirect DNS, but use the original certificate.

    --
    The Tao of math: The numbers you can count are not the real numbers.