Shostack + Friends Blog Archive

 

Attack of the Clones?

EKR is the voice of reason when he points out that of course RFID passports are clonable [link to http://www.educatedguesswork.org/movabletype/archives/2006/08/of_course_rfid.html no longer works], when he responds to all the press brouhaha about, Lukas Grunwald’s demonstration [link to http://www.wired.com/news/technology/0,71521-0.html?tw=rss.index no longer works] at Black Hat showing that an RFID passport can be duplicated using off the shelf parts. This outcome is hardly surprising, this is yet another side effect of using an inappropriate technology for an inappropriate situation.
This combined with Flexilis’s discovery [link to http://www.flexilis.com/epassport.html no longer works] that the shielding of the new RFIS passports is completely inadequate means that a passport could possibly even be cloned at a distance.