Story Tools: PRINT | Text Size: S M L XL | REPORT TYPO | SEND YOUR FEEDBACK

Jesse Brown: Ethical hacker sniffs passport tags in driveby

A few months back I reported on security problems with RFID chips, the radio scannable tech embedded in next-generation Enhanced Driver's Licences. EDLs are in use in B.C. and set to hit Ontario en masse this summer.

The problem was that sensitive info could theoretically be "sniffed" by anyone with a cheap RFID scanner.

Well, it's no longer theoretical.

White Hat hacker Chris Paget hit the streets of San Francisco with a $250 Motorola RFID scanner, an antenna and a laptop. RFIDs are embedded in new U.S. "passport cards," and within 20 minutes, Paget "sniffed" three distinct passport tags. The test was filmed and uploaded to YouTube.

These numbers could be used to clone new, fake passports or simply to track the number's owners.

Besides the technical proof his driveby provides, Paget's demo illustrates another problem with RFIDs that policy-makers should note: despite warnings, cardholders are clearly not taking the precaution of storing their IDs in scan-resistant wallets (i.e. wallets lined with foil).

Unleash a few hundred thousand of these sloppy cards on to the streets of Ontario and watch the province become the identity theft capital of the world.

« Previous Post | Main | Next Post »

This discussion is now Open. Submit your Comment.

Comments

Darren Whitworth

Scarborough

Nice work Jesse. You're making it a better place for everyone by doing this research.

Posted February 8, 2009 11:50 PM

Kevin

Ottawa

Jesse. You mentioned scan resistant wallets. When I looked at the State Department website, I found an indication that these passport cards are supposed to be issued with the scan resistant wallets. Any indication of how good the supplied ones are? If they are any good, then the problem found, while an issue, is related to sloppy use of the cards.

Of course, the next question is why these things are RFID enabled in the first place? At the State Department website, in the FAQ, it indicated that the Customs and Border Protection folks wanted to be able to scan them at a distance and have the photos available when the vehicle got to the checkpoint.

Posted February 11, 2009 12:44 PM

Brian L

Toronto

Not a chance in hell I will ever carry an RFID tag, willingly. I will never bow to anti-privacy, totalitarian rule, whether it be government or corporate. I'm not religious, but if anything is the "Mark", this is it.

Posted May 20, 2009 02:51 PM

« Previous Post | Main | Next Post »

Post a Comment

Disclaimer:

Note: By submitting your comments you acknowledge that CBC has the right to reproduce, broadcast and publicize those comments or any part thereof in any manner whatsoever. Please note that due to the volume of e-mails we receive, not all comments will be published, and those that are published will not be edited. But all will be carefully read, considered and appreciated.

Note: Due to volume there will be a delay before your comment is processed. Your comment will go through even if you leave this page immediately afterwards.

Privacy Policy | Submissions Policy

[an error occurred while processing this directive]
Story Tools: PRINT | Text Size: S M L XL | REPORT TYPO | SEND YOUR FEEDBACK

World »

Trump reportedly ending CIA plan to arm Syrian rebels
U.S. President Donald Trump is reportedly halting the CIA's years-long covert program to arm and train moderate Syrian rebels battling the regime of the nation's president Bashar al-Assad.
General strike shutters Venezuelan capital
​Large swathes of Venezuela's capital are shuttered and silent as opponents of President Nicolas Maduro call the first major national strike since a 2002-03 stoppage that failed to topple Maduro's predecessor Hugo Chavez.
Updated Dark web's largest illegal marketplace, founded by Canadian, shut down by U.S.
U.S. Justice Department officials say an internet marketplace for drugs, counterfeit goods, weapons, hacking tools and other illicit items has been shut down.
more »

Canada »

Youth gets adult sentence of 6 years for attack that left Jackie Healey blind in her left eye
The youth who assaulted staff members at the Selkirk Behavioural Health Foundation has received an adult sentence for the “stark horror” of the attack and because he is a danger to the public, the judge said.
'Get out there, get 'er done and, of course, be safe': Tiny Riske Creek, B.C., fights the fire video
In the tiny B.C. community of Riske Creek, logging and ranching are a way of life, but in recent days many of the 90 or so residents have found themselves on the front line of one of the largest fires in the province.
Andrew Scheer unveils 'regional, gender diverse' House leadership team
Conservative Party Leader Andrew Scheer is unveiling his House leadership team today in Ottawa.
more »

Politics »

New Scheer says anti-Khadr campaign in U.S. media is fair game as NDP cry hypocrisy video
Conservative Leader Andrew Scheer brushed off suggestions that his party's campaign denouncing the Trudeau government's apology and payout to Omar Khadr in the U.S. media will negatively impact upcoming NAFTA negotiations.
Trudeau defends his choice for governor general amid revelations about her past video
Prime Minister Justin Trudeau is defending his pick for governor general after it was revealed she struck and killed a pedestrian and was once the subject of a criminal probe for assault.
Supreme Court building to get $1B rehab in 2023, well after systems risk failure
The Supreme Court building, opened in 1939, is crumbling, with major systems at risk of failure in the next three years. But a $1-billion rehabilitation project isn't scheduled to begin until 2023. Officials at Public Services and Procurement Canada say they'll monitor for "potential failures" in the meantime.
more »

Health »

Sorry - we can't find that page
 
CBC.ca

Sorry, we can't find the page you requested.

  1. Please check the URL in the address bar, or ...
  2. Use the navigation links at left to explore our site, or ...
  3. Enter a term in the Quick Search box at top, or ...
  4. Visit our site map page

In a few moments, you will be taken to our site map page, which will help you find what you looking for.

more »

Arts & Entertainment»

Updated Linkin Park singer Chester Bennington dead at 41
Chester Bennington, lead singer of the California rock band Linkin Park, has died at the age of 41.
'Sounds stupid as hell:' HBO's Confederate, by Game of Thrones showrunners, earns early scorn
HBO has attracted harsh criticism for its newly announced series helmed by the creators of Game of Thrones.
2 years ago, Connor Hirtle was paralyzed while in P.E.I. for a music festival. This year, he went back
It wasn't an easy decision for Connor Hirtle to go back to Cavendish Beach Music Festival this year, but he said ultimately, he's glad he decided to go.
more »

Technology & Science »

Paying poor landowners not to cut trees a cheap way to save forests
Deforestation dropped by more than half in Ugandan villages where land owners were paid about $28 per hectare each year if they preserved their trees, according to the study from U.S. researchers published in the journal Science.
Elon Musk speaks about Hyperloop, Mars mission
Elon Musk announced Thursday afternoon that he'd received verbal approval for a Hyperloop from New York City to Washington, D.C. A day earlier, Musk revealed that he hasn't given up on his Mars dreams but that his Falcon Heavy and Crew Dragon plans have met some unforeseen obstacles.
Fear of predation may be enough to push small groups of animals to extinction
Fear of predation may play a role in pushing small populations of vulnerable species to extinction, a new Canadian study has found.
more »

Money »

Canadian travel to U.S. drops, while overseas visits to Canada surge to highest May ever
Canadians are making fewer trips to the United States, and foreign appetite for travel in Canada has hit its highest May on record.
Rogers Q2 net income rises 35%, beats analyst estimate
Rogers Communications reported a 35 per cent increase in second-quarter net income on Thursday, beating analyst estimates with an especially strong performance from its key wireless division.
Exxon Mobil fined $2M US for Tillerson-era breach of Russia sanctions
The U.S. Treasury Department hit Exxon Mobil Corp. with a $2 million US fine Thursday for violating Russia sanctions while Secretary of State Rex Tillerson was the oil company's CEO.
more »

Consumer Life »

Sorry - we can't find that page
 
CBC.ca

Sorry, we can't find the page you requested.

  1. Please check the URL in the address bar, or ...
  2. Use the navigation links at left to explore our site, or ...
  3. Enter a term in the Quick Search box at top, or ...
  4. Visit our site map page

In a few moments, you will be taken to our site map page, which will help you find what you looking for.

more »

Sports »

[an error occurred while processing this directive]
O.J. Simpson granted parole in Nevada robbery video
O.J. Simpson was granted parole Thursday after more than eight years in prison for a Las Vegas hotel heist.
Video O.J. Simpson granted parole video
Former football star O.J. Simpson was granted parole after more than eight years in prison for a Las Vegas hotel heist
Live Watch the North American Indigenous Games video
Watch live action, including baseball, lacrosse, swimming, basketball, and the cultural event at the 2017 North American Indigenous Games in Toronto.
more »

Diversions »

[an error occurred while processing this directive]
more »