RFID-Reading Passport Scanners Installed 151
Kozar_The_Malignant writes, "Electronic passport scanners have been installed at SFO. Ten of the scanners were received last week and have now been put in service. Various creative responses have been discussed here before."
Faraday Cage Suit (Score:2, Insightful)
___________________________
Free iPods? Its legit [wired.com]. 5 of my friends got theirs. Get yours here! [freepay.com]
Do passports already have RFID's in them? (Score:1)
Re:Do passports already have RFID's in them? (Score:5, Informative)
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
Well, like most people in the US, I don't see I'll need to get a passport for any reason...at least not for the foreseeable future.
Plenty for me to see here in this country, and the current atmosphere in much of the world doesn't seem to be too friendly towards Americans....
Re: (Score:2)
With the rate things are deteriorating, you'll probably need it to avoid spending a week or two on ice when the goons go 'papieren bitte! schnell!'...
Re:Do passports already have RFID's in them? (Score:4, Informative)
Here's a smallish picture of what the RFID bit looks like: http://www.telegraph.co.uk/news/graphics/2005/11/
Re: (Score:2)
Even though I'm normally a fan of Opt-In systems, I'll mute my complaints if a hammer allows me to Opt-Out.
Re: (Score:2)
Re: (Score:2)
Don't be surprised if doing that may opt you into a special gated community in Guantanamo Bay.
Re: (Score:3, Informative)
Re: (Score:2, Informative)
This is only an interim measure... (Score:2)
Re: (Score:2)
I just recently took a trip to Winnipeg so that I could get around any passport requirements they might put up in the near future. I *refuse* to travel abroad with a passport that has RFID technology inside. Just like I will not give my SSN out to anyone, I will not allow my passport to be read via RFID.
The individuals I was with on this trip told me I was paranoid and shouldn't let something as little as an RFID tag stop me from traveling where
Re: (Score:2)
RFID tag is stored in the passport(which is a faraday cage when closed.
The data is a hash value that is used to look up information to verify that you are who you say you are.
And yes, you are paranoid about it.
Re: (Score:2)
The burden is on you to show what bad things will happen.
Re: (Score:2)
can they be opened with a Diebold key or bar key? (Score:3, Funny)
Various Creative Responses (Score:5, Interesting)
After reading last night's [slashdot.org] thread, I suppose encoding ~250 copies of the string "Kip Hawley is an idiot. Michael Chertoff is also an idiot" into an off-the-shelf 64kbit chip, putting the chip in a small wad of gum, and then swallowing the gum, is no longer an option.
Well, so much for my weekend.
Re: (Score:2)
First of all,why would you want to do that? :p
Two,the passport RFID reader needs to be within 10 cms from the chip to be able to read. So sont worry.You can swallow whatver you want to.
Range can be increased (Score:5, Informative)
Bruce
Range is a function of the reader (Score:2)
Re: (Score:3, Insightful)
The reader at the airport is limited. The reader being surreptitiously carried by the American-tourist-targeting mugger/kidnapper/whatever in whatever foreign country you're going to won't be.
Re: (Score:2)
I was as shocked as you will probably be when you read this, when I found out that Florida is not, in fact, a foreign country.
Re: (Score:2)
Re: (Score:2)
1) Paint an RFID bullseye on all the 'card-carrying Americans abroad.
2)
3) Profit?
Re: (Score:2)
I'm not as clear on the "energizing" process. I understand that you get a stronger signal based on the amount of energy imparted to the chip, same as you would with any other radio transmitter. But what kind of upper limit exists
Re: (Score:3, Interesting)
Sure, all that possible. If you leave your passport open(closing it completes the faraday cage in the cover). Of course, people can also read all the data on your passport whenever they open it using this ancient technology called "eyes". And if you want to extend their range, you just have to get a few "lenses" and you can see it a
Re: (Score:3, Interesting)
The issues seem to be the following:
1) RFID chips are activated by the EM energy delivered from the reader.
2) When closed, the passports in question are contained in a complete farraday cage, blocking any EM radiation from passing between the inside and outside of the passport.
3) When open, the regular rules of electromagnetic radiat
Re: (Score:2)
Re: (Score:2)
When open, the regular rules of electromagnetic radiation hold true (inverse square law?)
In this case, the power delivered to the chip drops off according to an inverse cube law. The strength of the return signal attenuates by the inverse square of distance. Both effects come into play in limiting range. You'd think that the inverse cube side would dominate, but the attacker has the option of boosting the power almost without limit (though the result may be very unhealthy to anyone in the path). The
Re: (Score:2)
Certainly it will be practical to read these things as people walk through a door frame, with the proper equipment.
Hasn't been so far, not even given considerable commercial application for ISO 14443 chips that can be read at that distance. I'm not saying it's impossible, but smart people (i.e. the sort who design these things for a living) have been trying for the better part of a decade, without much success. That argues, at least, that it's not easy. The long-range reading that has been successfull
Wrapping your passport in Tinfoil? (Score:2, Interesting)
Yahma -- BLASTProxy.com [blastproxy.com] - A public anonymous proxy server that allows you to bypass firewall restrictions at home and work and surf safely.
Re: (Score:1)
Re: (Score:3, Informative)
Bruce
Re: (Score:2)
Re: (Score:2)
Why? (Score:1)
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
2. We're already agreeing on frequency and cryptography standards. What makes a "hardware" standard any more onerous? Especially if, as a previous poster pointed out, you just ensured the chip was a set distance from a specific corner of the medium.
3. RF is the most covenient, but also the most insecure. Unless you wrap your passport in multiple layers of
Passport Cases Now Become Important (Score:5, Interesting)
Bruce
Re: (Score:2)
I think thats dumb thing to do.When the security guys at the airport read your mu-metal'ed passport with their reader,it wont work & they would think its not a valid passport & you will be in trouble.
Re:Passport Cases Now Become Important (Score:5, Interesting)
Thanks
Bruce
Still .... (Score:2)
Although I do hear there were plans to put this into the data in clear text:
"YOU'LL BE SORY THAT YOU MESSED WITH THE U.S.of A.
'CAUSE WE'LL PUT A BOOT IN YOUR ASS IT'S THE AMERICAN WAY"
OK, maybe the case isn't such a bad idea after all.
Re: (Score:2)
Wherever you go, anywhere in the world, anyone who gets within a few feet of you can conclusively identify you as a U.S. citizen if they so wish to. (I assume there is some common code that identifies it as a U.S. passport.)
I've never seen the state department do anything that jeopardizes the safety of American travelers as much as this will.
Re: (Score:3, Interesting)
I mean it doesn't have personal information, even if decoded, so what use is it to anyone, except that it identifies you with a big random number like a cookie does.
Huh? You mean all of this personal info [icao.int] (PDF, see page 16) ??? You'll note that encryption is optional, but data integrity via a 1-way hash is mandatory.
Re: (Score:2)
Your post proved my point - encryption is optional, and the data in the MRZ section isn't encrypted anyway. That includes issuing country.
Re: (Score:2)
They pretty much can now, even before you've opened your mouth - from a combination of dress, mannerisms, etc. Once you start speaking, the accent confirms it. Social norms in different (Western) countries are often very different and the game of "guess the country of origin of your fellow travellers" at an airport is surprisingly easy.
Re: (Score:2)
The other reply has a very good point, too. IEDs that explode when an American walks by can now be standardized and mass produced.
Why would you assume that? (Score:2)
Re: (Score:2)
Then all of Europe shares in the system, then parts of Asia, then so many readers are out there that can at least decode the country (if nothing else) that it becomes likely the data will leak out to third parties.
Re: (Score:2)
You don't understand the PKI (Score:2)
If they don't read the chip, then yes they can forge your picture just like they do now.
Like Bruce Parens said, the only risk is that that guy walking by you on the
Re: (Score:2)
This is not a chip that broadcasts the exact same signal over and over. Under this type of authentication, at least part of the signal changes every time in a way that appears completely random. You'd require physical access to the passport, some pretty sophisticated equipment, and (depending on the implementation) possibly quite a bit of time in order to clone it -- eavesdroppi
Re: (Score:3, Informative)
Re: (Score:2)
Hopefully all countries around the world will erect large walls and ban binoculars around immigration facilities.
This will guarantee you an anal probe (Score:2)
It isn't designed to guarantee that the photo and the chip match, we can look at your face for that. It's to weed out the paranoid asshats who've tinkered with them, or, worse, have fake passports. Just like your browser throws up a warning if it can't figure ou
Re:Passport Cases Now Become Important (Score:5, Informative)
It already has a cover [state.gov]
Re: (Score:1)
Re: (Score:2)
I think I am going to trust the cover that I provide.
Bruce
Re: (Score:2)
It's already been reported here on slashdot that the cover has to be tightly closed in order to make a functional faraday cage. I believe that the experimental results were that leaving it open just 5-10mm was enough to negate the shielding effects.
So, make sure whatever cover you go with has a clasp.
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
shielded cases for 18 dollars (Score:5, Interesting)
looks like somebody's already selling them Bruce!
Moo (Score:1)
To the conspiracy wonks - entertain me (Score:4, Funny)
Re: (Score:2)
TravelTags (Score:2, Insightful)
Re: (Score:2)
Ummm... The Government doesn't require me to have a "TollTags, EasyPasses" if I want to leave the country.
Until "basically every other scannable devices that identifies the device-holder" is required by the gov't, then it really is horribly different.
If you haven't gotten/renewed your passport, I told you so. Mine is good for another 10 years and doesn't
Re: (Score:2)
Re: (Score:2)
And I don't use those either!!
As another poster said, the govt. doesn't require you to have one for travel either...
Fine by me (Score:3, Interesting)
I plan on having an aluminum foil carrying case for my RFID passport, when I get one, so it can't be read without being opened. Recently I saw a link to a company that makes wallets with a metal foil already embedded in the leather, so RFID chips can't be scanned remotely. The also sell a foil insert that goes in the bill area. I acn't remember the name though -- I thought it was a wordplay with 'wallet' and 'magnet', perhaps the word 'envelope'?
The only thing I don't want is an RFID implant. You might wear a farraday armband, but the whole idea reminds me too much of Jews getting serial numbers tatooed shortly before they were shipped into the death camps.
Re: (Score:1)
And he causeth all, both small and great, rich and poor, free and bond, to receive a mark in their right hand, or in their foreheads:
and that no man might buy or sell, save he that had the mark, or the name of the beast, or the number of his name.
Yikes! The sky is falling!
Already foil'd (Score:2)
Re: (Score:2)
MagneCarte
My main issues: (Score:2)
- I wonder from what distances the RDIF card will be able to be read? [I hear a few inches to a few yards and beyond]
- I wonder what interesting ways people will use this information. [I'm in marketing and can already think of a few]
aluminum cases through security anyhow? (Score:5, Interesting)
Re: (Score:2)
Sure, you should see the hassle that Metal bands like Spinal Tap have to go through trying to get aluminum foil covered cucumbers through airport security!
Its really humiliating to have to pull it out of your pants, makes the crotch look all saggy.
Re: (Score:2)
Yes I have....I was bringing some andouille sausage with me to cook at a friend's house...I did the usual to keep it fresh for travel. I froze it solid, wrapped in paper towels, and then wrapped in aluminum foil.
I've done this in checked baggage and in carry on...no big deal.
I could see they had checked the checked baggage, but, had not unwrapped it....and nothing done with the carry on, which was my backpack.
Yes! HD's in anti-static bags look like drugs (Score:2)
Comming back into the UK, Stanstead Airport customs.
I get asked to open my bag containing 6 Hard Drives in anti-static bags.
Customs raise an eybrow. Only then do I realise each drive looks exactly like a brick of hash wraped in foil.
Dressing like a typical stoner probably didn't help either.
Schneier says "rewew NOW" (Score:2, Insightful)
For what it's worth, Bruce Schneier [schneier.com] is recommending that everyone renew their passports now so that you can avoid having a chipped one for another 10 years:
Typical Response without knowing the facts (Score:4, Interesting)
It's bad enought that I have to put up with this any time I talk to any non-techie about the fact that I work for an RFID company and no I am not evil and do not wish to track their every move and alert someone that they are using the bathroom too much.
--Now for the Facts--
There are two main categories for RFID systems on the market today. These are near field systems that
employ **inductive coupling** of the transponder tag or Smart Label to the reactive energy circulating around the reader antenna, and far field systems that couple to the real power contained in free space propagating electromagnetic plane waves.
The passports are (repeat after me) *inductive* which means that they are activated by a magnetic field which is amplified by that metal loop you see to provide power to read the memory on the chip. The claims that someone could build a reader to read your tag from even 10 or 20 feet away is ridiculous. It would require the creation of such a big magnetic field that it would probably zap all magnetic material (such as hard drives, floppy discs, usb keys) that I am sure someone would notice. Also in order to read the reflection of the magnetic field which is what determines the response (RFID works like an echo you yell at something and wait for the echo to figure out what the id is) you would need such a big receiver (note this is still for 10 - 20 feet only) that you would literally look like someone out of the verizon commercial.
I know us techies are generally oblivious to the outside world but I think if you saw someone like this within 10 feet you should generally notice. Also you should run because that magnetic energy will probably fry your nads among with other crucial body parts you may never use (sorry couldn't resist).
The only real danger is that some hot woman with an rfid reader decides to bump into you and just happen to place her hand where your passport is. If you foresee that happening a lot then I suggest you get a tin-foil cover. However if that happens to you a lot then you are probably not on slashdot and reading this anyways.
Sorry but I am a little sick and tired of hearing about all these security concerns by people who don't know how these systems actually work. Can you tell?
Re: (Score:3, Interesting)
Sorry, but I am a little sick and tired about hearing about how there are no security concerns from the people who don't care about anything but selling their products to a government that wants more control over its people. Do you care?
Re: (Score:2)
Please explain how RFIDs are going to increase the control the government holds over passport holders. RFIDs may be a bad idea, but there is nothing that will help the government control people here.
Re: (Score:2)
Re: (Score:2, Insightful)
The passport case already has protection so the RFID cannot be read when the passport is closed. No need for tin-foil cases. (http://www.state.gov/r/pa/prs/ps/2006/70433.htm)
The contents of the RFID is your identifying information signed by a government key. The encryption has already been broken, but until the signing keys are compromised, new contents cannot be put into the RFID (refer to the many docuements on hashing and signing technologies).
There
Re: (Score:2)
Re: (Score:3, Interesting)
1) Someone can still read it remotely, and get access to all kinds of personally identifying information. Yes, you have to get close, but it still is quite possible. Ever seen pickpockets at work? They manage to *remove* your wallet without you noticing it. Considering the potential damage that can result from someone getting their hands on your passport, I'd rather not make it easier for people to access them.
2) You don't know what's on y
Re: (Score:2)
Re: (Score:2)
The only real danger is that some hot woman with an rfid reader decides to bump into you and just happen to place her hand where your passport is.
I'm gonna start keeping my passport down my pants. Just in case.
Renew Now (Score:2)
13 million seems awfully high (Score:2)
Is this really correct? That would mean that over the course of a decade, roughly 130 million passports are issued? So there are 100-something million active passports... 1 in 3 americans (of all ages). That seems high.
Re: (Score:2)
There are a lot of people who cross the border every day on business. Previously, only a drivers license was required for readmittance from Canada and Mexico.
Re: (Score:2)
>the new requirement that all people crossing the border hold passports
If you are a US citizen, you still don't need a passport to go to Mexico, but you sure as hell need one to come back.
it's election time...bug your candidate! (Score:2)
I'm telling both the guys running for my district (which, fortunately, is a competitive one) that I'll vote for the guy who votes to repeal the REAL ID Act and, at the very least, makes the RFID chip optional in new passports.
Where to buy/how to make an RFID reader? (writer?) (Score:2)
I'd like to know when something has an RFID in it as well...I bought a pair of leather work gloves at Home Despot the other day. There was no obvious tag -- but she deactivated them anyway and they beeped. I find out later the
Re: (Score:2)
That's what's so amusing about conspiracy theories: common sense not required. You get hold of your enemy's passport, and what do you use it for? Inconveniencing him at the airport one time.