Hacking ePassport control at Schiphol Airport (Netherlands)

October 2, 2008 – 18:04

Elvis has left the building! No! Even better, Elvis is IN the building! The world famous hipswinger has landed this morning in the Netherlands. So he´s not dead? Nope, you can see him checkin in his passport at Schiphol airport here.

So what is happening is that the government plans to use ePassports at Immigration and Border Control but the detection of fake passport chips does not work. Hacker vonJeek tells us that while the information is electronically read from the Passport and displayed to a Border Control Officer or used by an automated setup there is no alert when the data is or may have been changed. Test setups do not raise alerts when a modified chip is used. This enables an attacker to create a Passport with an altered Picture, Name, DoB, Nationality and other credentials.

Regardless how good the intention of the government might have been, the facts are that tested implementations of the ePassports Inspection System are not secure. ePassports give us a false sense of security: We are made to believe that they make usemore secure. I’m afraid that’s not true: current ePassport implementations don’t add security at all.

Read more on the story and an detailed information on the hack here.

Vote This Post DownVote This Post Up (No Ratings Yet)
Loading ... Loading ...
Share/Bookmark

Post a Comment