Story Tools: PRINT | Text Size: S M L XL | REPORT TYPO | SEND YOUR FEEDBACK

Jesse Brown: Ethical hacker sniffs passport tags in driveby

A few months back I reported on security problems with RFID chips, the radio scannable tech embedded in next-generation Enhanced Driver's Licences. EDLs are in use in B.C. and set to hit Ontario en masse this summer.

The problem was that sensitive info could theoretically be "sniffed" by anyone with a cheap RFID scanner.

Well, it's no longer theoretical.

White Hat hacker Chris Paget hit the streets of San Francisco with a $250 Motorola RFID scanner, an antenna and a laptop. RFIDs are embedded in new U.S. "passport cards," and within 20 minutes, Paget "sniffed" three distinct passport tags. The test was filmed and uploaded to YouTube.

These numbers could be used to clone new, fake passports or simply to track the number's owners.

Besides the technical proof his driveby provides, Paget's demo illustrates another problem with RFIDs that policy-makers should note: despite warnings, cardholders are clearly not taking the precaution of storing their IDs in scan-resistant wallets (i.e. wallets lined with foil).

Unleash a few hundred thousand of these sloppy cards on to the streets of Ontario and watch the province become the identity theft capital of the world.

« Previous Post | Main | Next Post »

This discussion is now Open. Submit your Comment.

Comments

Darren Whitworth

Scarborough

Nice work Jesse. You're making it a better place for everyone by doing this research.

Posted February 8, 2009 11:50 PM

Kevin

Ottawa

Jesse. You mentioned scan resistant wallets. When I looked at the State Department website, I found an indication that these passport cards are supposed to be issued with the scan resistant wallets. Any indication of how good the supplied ones are? If they are any good, then the problem found, while an issue, is related to sloppy use of the cards.

Of course, the next question is why these things are RFID enabled in the first place? At the State Department website, in the FAQ, it indicated that the Customs and Border Protection folks wanted to be able to scan them at a distance and have the photos available when the vehicle got to the checkpoint.

Posted February 11, 2009 12:44 PM

Brian L

Toronto

Not a chance in hell I will ever carry an RFID tag, willingly. I will never bow to anti-privacy, totalitarian rule, whether it be government or corporate. I'm not religious, but if anything is the "Mark", this is it.

Posted May 20, 2009 02:51 PM

« Previous Post | Main | Next Post »

Post a Comment

Disclaimer:

Note: By submitting your comments you acknowledge that CBC has the right to reproduce, broadcast and publicize those comments or any part thereof in any manner whatsoever. Please note that due to the volume of e-mails we receive, not all comments will be published, and those that are published will not be edited. But all will be carefully read, considered and appreciated.

Note: Due to volume there will be a delay before your comment is processed. Your comment will go through even if you leave this page immediately afterwards.

Privacy Policy | Submissions Policy

[an error occurred while processing this directive]
Story Tools: PRINT | Text Size: S M L XL | REPORT TYPO | SEND YOUR FEEDBACK

World »

Breaking Dozens dead in magnitude 7.1 earthquake in Mexico
A magnitude 7.1 earthquake jolted central Mexico on Tuesday, collapsing some buildings, cracking the facades of others and scattering rubble on streets.
Updated Hurricane Maria kills 1 on Guadeloupe, takes aim at Puerto Rico video
Puerto Rico is bracing for the howling winds and rain of Hurricane Maria after the storm smashed into the eastern Caribbean as a Category 5, killing at least one person on the French island of Guadeloupe and leaving "mind-boggling" devastation on Dominica.
3rd suspect arrested in London subway bombing
British police have arrested a third suspect in connection with the bomb that partially exploded on a London subway last week, injuring 30 people.
more »

Canada »

Nooo! Edmonton gets first snowfall of season
A heavy rain turns into flakes of white stuff before noon Tuesday, bringing a chill to Alberta's capital region.
Minister Carolyn Bennett urges Conservatives to kick Lynn Beyak out of caucus video
Liberal cabinet minister Carolyn Bennett is urging the leader of the Official Opposition to kick Sen. Lynn Beyak out of the Conservative caucus over her open letter about the status of Indigenous Canadians.
Trudeau pledges to push through tax fairness agenda and defends own family's use of tax rules video
Prime Minister Justin Trudeau laid out his government’s parliamentary agenda for the fall Tuesday and quickly found himself answering questions about his own use of the country's tax laws to manage his “family fortune” in light of his proposed tax fairness agenda.
more »

Politics »

Trudeau pledges to push through tax fairness agenda and defends own family's use of tax rules video
Prime Minister Justin Trudeau laid out his government’s parliamentary agenda for the fall Tuesday and quickly found himself answering questions about his own use of the country's tax laws to manage his “family fortune” in light of his proposed tax fairness agenda.
Analysis In tax fight, it's Scheer's mechanic vs. Trudeau's doctor video
MPs returned to Ottawa today and there was nary a word spoken about Omar Khadr's multimillion-dollar government settlement, the season's previous outrage. Perhaps if Khadr had incorporated himself over the summer he'd still be a topic of discussion.
Liberals leave royal position vacant in Queen's Sapphire Jubilee year
A decades-old liaison job between Canada and the monarch has been left vacant since May, as the Liberal government reviews the future of the position during the Queen's Sapphire Jubilee marking her 65 years on the throne.
more »

Health »

Sorry - we can't find that page
 
CBC.ca

Sorry, we can't find the page you requested.

  1. Please check the URL in the address bar, or ...
  2. Use the navigation links at left to explore our site, or ...
  3. Enter a term in the Quick Search box at top, or ...
  4. Visit our site map page

In a few moments, you will be taken to our site map page, which will help you find what you looking for.

more »

Arts & Entertainment»

The most dangerous celebrity on the web? Avril Lavigne, apparently
One-time pop-punk princess Avril Lavigne has beaten superstar Beyoncé at something, but the Canadian singer may not be totally happy with her victory — she has been named the most dangerous celebrity on the internet.
Didn't like Sean Spicer's Emmy cameo? 'People are reading too much into this,' he says
Sean Spicer says his surprise Emmy Awards appearance was a chance to have some fun, and suggested Tuesday that people who were upset by it were taking things too seriously. But not everyone was laughing.
Lido Pimienta wins Polaris Music Prize for La Papessa video
Colombian immigrant Lido Pimienta has won the 2017 Polaris Music Prize for her album La Papessa.
more »

Technology & Science »

Robot judges? Edmonton research crafting artificial intelligence for courts audio
If Edmonton researcher Randy Goebel has his way, artificially intelligent judges and attorneys will become players in the courtroom of the future.
Astronomers discover pitch-black planet orbiting distant star
Astronomers using the Hubble Space Telescope have discovered that a planet orbiting a star 1,400 light-years away reflects almost no light.
As It Happens This man let an electric eel shock him repeatedly in the arm — all in the name of science
Kenneth Catania insists he was never in any real danger when he put his arm into a tank with an electric eel and let it shock him repeatedly for science.
more »

Money »

Equifax says 100,000 Canadians impacted by cybersecurity breach
A massive cybersecurity breach at the company may have exposed the personal information of some 100,000 Canadian consumers, Equifax Canada says 12 days after it was disclosed that the personal data of about 143 million Americans was exposed.
Ford cutting North American production as demand slips
Ford Motor Co. said on Tuesday it plans to idle five North American vehicle assembly plants for a total of 10 weeks to reduce inventories of slow-selling models.
Air Canada seeks credit card partner for new loyalty program
Air Canada is looking for a financial services company to partner with it on a co-branded credit card, as part of its plans to launch a new loyalty program by 2020.
more »

Consumer Life »

Sorry - we can't find that page
 
CBC.ca

Sorry, we can't find the page you requested.

  1. Please check the URL in the address bar, or ...
  2. Use the navigation links at left to explore our site, or ...
  3. Enter a term in the Quick Search box at top, or ...
  4. Visit our site map page

In a few moments, you will be taken to our site map page, which will help you find what you looking for.

more »

Sports »

[an error occurred while processing this directive]
Canadian NHL teams facing key training camp questions
With NHL training camps in full swing, talk for the next few weeks will shift to each team's top prospects, position battles and how certain established players might fare coming off a disappointing 2016-17 season.
NHL says crackdown on faceoff cheats is about safety, integrity of game video
Faceoffs were a group effort and penalty boxes were full as the NHL opened it's pre-season schedule this week.
Analysis CFL Power Rankings: Stamps still lead, but might lose Messam video
While the league falls all over itself trying to stop head-hunting (hint: suspensions, not fines), the top-ranked Calgary Stampeders work out whether running back Jerome Messam will be available this coming week.
more »

Diversions »

[an error occurred while processing this directive]
more »