Friday, July 28, 2006

Would you like everyone to know where you're from when you travel?

Especially in the state the world is currently in and if you're an American? I wouldn't. But apparently the State Department thinks it's ok to broadcast your nationality when you're traveling, since that's exactly what they're preparing to do starting in August:
Imagine being overseas and your identity being available for the taking - your nationality, your name, your passport number. Everything.

That's the fear of privacy and security specialists now that the State Department plans to issue "e-Passports" to American travelers beginning in late August.

They'll have radio frequency identification (RFID) tags and are meant to cut down on human error of immigration officials, speed the processing of visitors and safeguard against counterfeit passports.

Yet critics are concerned that the security benefit of RFID technology, which combines silicon chips with antennas to make data accessible via radio waves, could be vastly outweighed by security threats to the passport holder.
[...]
Kidnappers, identity thieves and terrorists could all conceivably commit "contactless" crimes against victims who wouldn't know they've been violated until after the fact.

"The basic problem with RFID is surreptitious access to ID," said Bruce Schneier security technologist, author and chief technology officer of Counterpane Internet Security, a technology security consultancy. "The odds are zero that RFID passport technology won't be hackable."
There's more:
U.S. passports are issued for ten years, which means the RFID chip technology of those passports, along with their vulnerabilities, will be floating around for a decade. Technology would have to "stop cold" Schneier of Counterpane says for improvements in skimming and hacking equipment not to occur.
And what are the chances of that happening? Technology progresses at runaway-train speed, so there's no chance in hell that your 8 years old passport will still be protected against hackers, since there's no way for you to download "security updates" like you do with your pc.

One final thought:
Sterling, however, compares RFID passports to a "nice yellow armband" -- a big sign on your body announcing your identity. "Would you pay anything for that device?" Sterling asks. "Would you buy it in a travel store because you thought it made you feel safer? Or would you conclude that this technology existed so that you could be treated like a can on a grocery-food shelf?"
Would you like to be tagged "American Citizen" when you're traveling through, let's say, North Africa or the Middle East?

No comments: