PDA

View Full Version : ID card hacked in 12 minutes...


mrmoney
06-08-2009, 10:18 PM
Yep, that's billions of taxpayer money, completely wasted, under that tyrant Jacqui Smith.

------------------------------------------------------

http://www.computerweekly.com/Articles/2009/08/06/237215/uk-national-id-card-cloned-in-12-minutes.htm

The prospective national ID card was broken and cloned in 12 minutes, the Daily Mail revealed this morning.

The newspaper hired computer expert Adam Laurie to test the security that protects the information embedded in the chip on the card.

Using a Nokia mobile phone and a laptop computer, Laurie was able to copy the data on a card that is being issued to foreign nationals in minutes.

He then created a cloned card, and with help from another technology expert, changed all the data on the new card. This included the physical details of the bearer, name, fingerprints and other information.

He then rewrote data on the card, reversing the bearer's status from "not entitled to benefits" to "entitled to benefits".

He then added fresh content that would be visible to any police officer or security official who scanned the card, saying, "I am a terrorist - shoot on sight."

According to the paper, Home Office officials said the foreign nationals card uses the same technology as the UK citizens card that will be issued from 2012.

Guy Herbert, general secretary of privacy lobby group NO2ID, said it was a mistake to assume that the Home Office cared about the card, or identity theft or citizens' benefit.

He said the Home Office wanted the central database to record citizens' personal details in one place for official convenience.

"It is that database which will deliver unprecedented power over our lives to Whitehall and make the Home Office king in Whitehall. The card is an excuse to build the database. If the card is cancelled it already intends to use passports as a secondary excuse," he said.

Home Office officials said they were working on a response to the story, and would issue a statement later today.

wildhorse
06-08-2009, 10:28 PM
can anyone 'hack' jacqui in less than 12 minutes?? *hands maschette to contender* :rolleyes:

(love & light, love & light, love & light) ;)

positivity
06-08-2009, 10:32 PM
just add that to the ongoing massive list of wasted taxpayers money!!!:mad::mad:

krakhead
06-08-2009, 10:41 PM
http://nsaney.com/pics/thread_awesome_kid.jpg

Fuller details here -

http://www.dailymail.co.uk/news/article-1204641/New-ID-cards-supposed-unforgeable--took-expert-12-minutes-clone-programme-false-data.html#

dancing_with_durga
07-08-2009, 12:47 AM
Remember a few years ago when the big idea was RFID chips in passports? The only problem with them was that if someone stood next to you with a scanner they could copy all your ID data without you even realising it. Load that data onto another chip and you have a valid passport. Let's be clear about this, ID cards are not about improving 'security'. For every measure there will be a hack, as this article shows, and so universal ID cards actually decrease security. People who know what they are dong will clone the card, and utilising the false sense of security that the card engenders, will find any door open to them. Ordinary people, who are not about to do anything terrible, will be subject to the control, assuming everything works that is, but crims and ne'er-do-wells will find that carrying out their nefarious tasks will be that little bit easier.
.

steevo
07-08-2009, 12:49 AM
Maybe the implanted microchip is a safer bet ? ;):rolleyes:

godspeed
07-08-2009, 12:53 AM
who the hells gonna see 2012 for an id card if they force us all to die from swine flu.......nothing is secure coming from evil doers called government..........but hackers do what stupid does'nt so its kinda good news.........:D

fikle
07-08-2009, 12:59 AM
Hey I think you might be onto something there :)

Imagine how great it would be if we all had a little chip under our skin. It could store our bank details, and act as an ID card, passport and supermarket loyalty card all in one. Imagine the convenience!

What will they suggest when people start hacking each other's arms off?

hawk
07-08-2009, 01:20 AM
Godspeed and fickle, you might just have a real good couple of points,there.;)

steevo
07-08-2009, 01:32 AM
Hey I think you might be onto something there :)

Imagine how great it would be if we all had a little chip under our skin. It could store our bank details, and act as an ID card, passport and supermarket loyalty card all in one. Imagine the convenience!

What will they suggest when people start hacking each other's arms off?

At least if we all had the implanted microchip, it will save ALOT of time identifying who's dead and who aint, during a pandemic ;)

hawk
07-08-2009, 02:35 AM
Yeah ,that's true. They won't care about us when we're all dead anyways,LOL!:p;)

tb303
07-08-2009, 02:37 AM
Maybe the implanted microchip is a safer bet ? ;):rolleyes:

Obviously :rolleyes:

drhemp
07-08-2009, 11:32 PM
The prospective national ID card was broken and cloned in 12 minutes, the Daily Mail revealed this morning.

The newspaper hired computer expert Adam Laurie to test the security that protects the information embedded in the chip on the card.

Using a Nokia mobile phone and a laptop computer, Laurie was able to copy the data on a card that is being issued to foreign nationals in minutes.

He then created a cloned card, and with help from another technology expert, changed all the data on the new card. This included the physical details of the bearer, name, fingerprints and other information.

He then rewrote data on the card, reversing the bearer's status from "not entitled to benefits" to "entitled to benefits".

He then added fresh content that would be visible to any police officer or security official who scanned the card, saying, "I am a terrorist - shoot on sight."

According to the paper, Home Office officials said the foreign nationals card uses the same technology as the UK citizens card that will be issued from 2012.

Guy Herbert, general secretary of privacy lobby group NO2ID, said it was a mistake to assume that the Home Office cared about the card, or identity theft or citizens' benefit.

He said the Home Office wanted the central database to record citizens' personal details in one place for official convenience.

"It is that database which will deliver unprecedented power over our lives to Whitehall and make the Home Office king in Whitehall. The card is an excuse to build the database. If the card is cancelled it already intends to use passports as a secondary excuse," he said.

Home Office officials said they were working on a response to the story, and would issue a statement later today.

tesla
08-08-2009, 01:10 PM
Embedded inside the card for foreigners is a microchip with the details of its bearer held in electronic form: name, date of birth, physical characteristics, fingerprints and so on, together with other information such as immigration status and whether the holder is entitled to State benefits.

This chip is the vital security measure that, so the Government believes, will make identity cards 'unforgeable'.

But as I watch, Laurie picks up a mobile phone and, using just the handset and a laptop computer, electronically copies the ID card microchip and all its information in a matter of minutes.

He then creates a cloned card, and with a little help from another technology expert, he changes all the information the card contains - the physical details of the bearer, name, fingerprints and so on. And he doesn't stop there.

With a few more keystrokes on his computer, Laurie changes the cloned card so that whereas the original card holder was not entitled to benefits, the cloned chip now reads 'Entitled to benefits'.

As a chilling twist, he adds a message that would be visible to any police officer or security official who scanned the card: 'I am a terrorist - shoot on sight.'


http://www.dailymail.co.uk/news/article-1204641/New-ID-cards-supposed-unforgeable--took-expert-12-minutes-clone-programme-false-data.html

:mad:

ronisron
08-08-2009, 03:17 PM
Maybe the implanted microchip is a safer bet ? ;):rolleyes:

Exactly! Not only do they get to embezzle billions of dollars of taxpayer's money for the production of these @15 cent cards, they are selling the idea of these RFID chipped cards as a "safe" alternative to just the regular old laminated ID, passport, or banking cards which anyone can copy. Whenever I go to the bank, they keep pushing a "chipped" ATM card on me which I am so far able to willingly refuse with no threat or penalty of any kind.

Unfortunately, :rolleyes:, now these wonder cards are not safe!! They can be HACKED!! The ONLY safe alternative will be to have this "non invasive" chip, embedded under your skin. VERY simple procedure, and it is the ONLY WAY we can be truly "safe".

You do want to be safe don't you? ;)

Don't believe the hype. Telling people to refuse to be chipped in any way, card or implant, is as imperative as warning them about the bogus swine flu and it's awful vaccine.

decim
08-08-2009, 03:46 PM
Swords.

Hey I think you might be onto something there :)

Imagine how great it would be if we all had a little chip under our skin. It could store our bank details, and act as an ID card, passport and supermarket loyalty card all in one. Imagine the convenience!

What will they suggest when people start hacking each other's arms off?

bobbydiva
08-08-2009, 06:28 PM
Guy Herbert, general secretary of privacy lobby group NO2ID, said it was a mistake to assume that the Home Office cared about the card, or identity theft or citizens' benefit.

He said the Home Office wanted the central database to record citizens' personal details in one place for official convenience.

"It is that database which will deliver unprecedented power over our lives to Whitehall and make the Home Office king in Whitehall. The card is an excuse to build the database. If the card is cancelled it already intends to use passports as a secondary excuse," he said.

yozhik
09-08-2009, 09:12 AM
Home Office officials said they were working on a response to the story, and would issue a statement later today.

:D

How about; "oh fuck."

Working on a response?
:D

I think thats called trying to make a silk out of a pig's ear

disorder2k8
09-08-2009, 10:39 AM
we call it 'lying'

I wouldnt mind so much if the system they used encrypted it with your PIN so that you needed your pin to descramble the data, but they arnt programmers, or even smart, like me, so never mind

separ
25-08-2009, 04:58 PM
we call it 'lying'

Absolutely.

I used to work for the Home Office many years ago, and I just found out from a Google search that one of the guys I used to work with in my department (Andrew Dent) is now one of the top officials in the Identity Cards Programme. He will certainly be putting all that taxpayers' money to 'work' by consulting with others (i.e. people who know how to read and write) on how to work out a misleading 'response' to this story on behalf of the Home Office. After all, that's how he spent/wasted his time after he set up a mini-unit of his own called the 'NASS Secretariat' soon after being transferred to the Home Office.