Reply to: Nine sacked for breaching core ID card database

[ratewhore]

As with all things, the weakness is at the human interface level.

Bingo! Why are people are talking about hacking the card? It is irrelevant to what the OP posted...

[minestrone]

I cant say that I am convinced. What type of encryption are they planning to use??

"I admit I know nothing about it but I have definite opinions on it"

[pzz76077]

The cipher level they are going to? with about 50 years and the dedicated use of the world's biggest computer you might get there. The rest of the system may be a pile of crap but encryption on smart cards is a pretty easy thing to do right.

I cant say that I am convinced. What type of encryption are they planning to use??
Im not sure that computing power comes into it, (inside) knowledge and luck has more of a chance.
Im looking back at the music industry encryption that was supposed to be unbreakable, but only took 3 days and 5 lines of code to render it useless.

Maybe I'll offer 10 grand to the person who comes up with the neatest hack and see if that speeds things a long a bit.


PZZ

[Moscow Mule]

The cipher level they are going to? with about 50 years and the dedicated use of the world's biggest computer you might get there. The rest of the system may be a pile of crap but encryption on smart cards is a pretty easy thing to do right.

Surely the encryption on the card is the most secure thing about the whole system. As with all things, the weakness is at the human interface level.

[minestrone]

Well any gestimates to how long the pucker cards will take to break??

My guess is that it wont be too long....if you know what data is on your own card, thats half the battle, or failing that, it sounds easier to just get some Gov employee to look it up for you

PZZ

The cipher level they are going to? with about 50 years and the dedicated use of the world's biggest computer you might get there. The rest of the system may be a pile of crap but encryption on smart cards is a pretty easy thing to do right.

[TykeMerc]

The sample cards have very low level encryption and this story is just a rehash of ones that have been running for a few years. Sounds like a good story but really it is a pile of crap to keep daily mail readers frothing.

I'm sorry, but I don't agree.

When/if the real cards and readers are available in any numbers they will be cracked in a very short time.

There's no such thing as uncrackable encryption and especially so in the case of something that has to be mass manufactured and read by relatively simple, portable and inexpensive devices.

[Peoplesoft bloke]

I said to you last week that it was written wrongly, but your pea brain can't remember back that far or the fact that you voted for the party that decided how to write it.

Ah yes - but (leaving aside your continuing insults) in principle you think it's a workable and necessary scheme.

[OwlHoot]

There was a chap here on CUK, I forgot his name, that was an expert on security. Maybe he could help?

Chetty? Wasn't he sacked, along with Bollington Bertie or whoever the other guy was?

[pzz76077]

The sample cards have very low level encryption and this story is just a rehash of ones that have been running for a few years. Sounds like a good story but really it is a pile of crap to keep daily mail readers frothing.

Well any gestimates to how long the pucker cards will take to break??

My guess is that it wont be too long....if you know what data is on your own card, thats half the battle, or failing that, it sounds easier to just get some Gov employee to look it up for you

PZZ

[minestrone]

The underling technology that the UK ID card is based on was hacked to the point of rendering it worthless before the cards left the drawing board.

http://www.itproportal.com/security/...rd-12-minutes/

Not much point sacking these guys if the info is already in the public domain.

PZZ

The sample cards have very low level encryption and this story is just a rehash of ones that have been running for a few years. Sounds like a good story but really it is a pile of crap to keep daily mail readers frothing.

[pzz76077]

Far too late...

The underling technology that the UK ID card is based on was hacked to the point of rendering it worthless before the cards left the drawing board.

http://www.itproportal.com/security/...rd-12-minutes/

Not much point sacking these guys if the info is already in the public domain.

PZZ

[minestrone]

Minestrone and/or Igcognito will be along in a minute to say all our data is safe and we're a gang of Luddites if we object

I said to you last week that it was written wrongly, but your pea brain can't remember back that far or the fact that you voted for the party that decided how to write it.

[Peoplesoft bloke]

Minestrone and/or Igcognito will be along in a minute to say all our data is safe and we're a gang of Luddites if we object

[HairyArsedBloke]

Not surprised in the slightest that the security is complete bollocks.

There was a chap here on CUK, I forgot his name, that was an expert on security. Maybe he could help?

[TykeMerc]

Not surprised in the slightest that the security is complete bollocks.