Flexilis claims new RFID passports are security risk
Flexilis claims new RFID passports are security risk
Dans la série "Il ne faut pas paniquer, il ne faut pas paniquer", nous vous proposons de découvrir une vidéo on ne peut plus édifiante tournée par Flexilis. Elle démontre comment, dans l'état actuel des choses, il est possible de faire sauter une personne munie d'un passeport RFID dont on aura au préalable lu la puce pour connaître le numéro d'identification. Fort heureusement, Flexilis propose un happy ending grâce à un système de blindage supplémentaire de la puce.
http://www.usatoday.com/tech/news/computersecurity/2006-08-03-flexilis-rfid-passports_x.htm
By Byron Acohido, USA TODAY
The state department is getting ready to distribute Radio Frequency Identification-equipped passports later this year. RFID is an old technology, used by trains and cargo ships to keep track of containers; it stores remotely retrieved data on tags.
Now imagine a garden-variety RFID reader converted into an explosives detonator configured to set off a package of explosives hidden in a trash bin the next time anyone with a slightly open RFID passport strolled within a few feet.
The tech security analysts at Flexilis not only imagined this scenario, they assigned 21-year-old electrical engineer Kevin Mahaffey to build a prototype, using components one can buy at a hobby store.
At Black Hat, Flexilis circulated copies of a 4-minute video of a test of Mahaffey's RFID-passport-explosive-device. Flexilis spokesman John Hering contends the shielding used on the passport RFID tags are inadequate. "In its current state, we don't feel its safe for deployment," he said. Hering says Flexilis has briefed the Department of Homeland Security.