3 ms·

The Republic of Estonia uses such a system to identify members of its e-Residency program, even with no physical presence. Each e-resident has a public numerica

The Republic of Estonia uses such a system to identify members of its e-Residency program, even with no physical presence. Each e-resident has a public numerical key that serves as a unique identifier, and a corresponding private key that is never revealed. So an example to emulate then! Except: Estonia suffered an embarrassing blow to its much-vaunted ID cards that underpin everything from electronic voting to online banking [...] a security risk that affects almost 750,000 ID cards and that would enable a hacker to steal a person’s identity. https://www.ft.com/content/874359dc-925b-11e7-a9e6-11d2f0ebb7f0 https://www.ft.com/content/874359dc-925b-11e7-a9e6-11d2f0ebb...

unpwn 9y ago
Is there a link to this that's not behind a paywall. Very interested in understanding the flaws of such a system, as a 2 key system seems like the most viable and secure way to establish identity.
- deleted 9y ago
  [deleted]
- taesis 9y ago
  Google's cache of the page [1] seems to work. [1]: https://webcache.googleusercontent.com/search?q=cache:wP7nTGn-RJ0J:https://www.ft.com/content/874359dc-925b-11e7-a9e6-11d2f0ebb7f0+&cd=1&hl=en&ct=clnk&gl=ca https://webcache.googleusercontent.com/search?q=cache:wP7nTG...
- avid-infovore 9y ago
  Non-paywalled link: http://estonianworld.com/technology/possible-security-risk-affects-750000-estonian-id-cards/ http://estonianworld.com/technology/possible-security-risk-a...
- mwg986 9y ago
  If you search google using the url for the article and then follow the search link you can get behind the paywall. Here's a link to the google search result - https://www.google.com/search?q=https%3A%2F%2Fwww.ft.com%2Fcontent%2F874359dc-925b-11e7-a9e6-11d2f0ebb7f0&oq=https%3A%2F%2Fwww.ft.com%2Fcontent%2F874359dc-925b-11e7-a9e6-11d2f0ebb7f0&aqs=chrome..69i64.1316j0j7&sourceid=chrome&ie=UTF-8 https://www.google.com/search?q=https%3A%2F%2Fwww.ft.com%2Fc...
gbarc888 9y ago
The article only says they found a "security risk". I wonder what that is, and how it would allow identity theft if they are actually using public/private keys. Did Estonia secretly backdoor their encryption?

unpwn 9y ago

Is there a link to this that's not behind a paywall. Very interested in understanding the flaws of such a system, as a 2 key system seems like the most viable and secure way to establish identity.

deleted 9y ago
[deleted]
taesis 9y ago
Google's cache of the page [1] seems to work. [1]: https://webcache.googleusercontent.com/search?q=cache:wP7nTGn-RJ0J:https://www.ft.com/content/874359dc-925b-11e7-a9e6-11d2f0ebb7f0+&cd=1&hl=en&ct=clnk&gl=ca https://webcache.googleusercontent.com/search?q=cache:wP7nTG...
avid-infovore 9y ago
Non-paywalled link: http://estonianworld.com/technology/possible-security-risk-affects-750000-estonian-id-cards/ http://estonianworld.com/technology/possible-security-risk-a...
mwg986 9y ago
If you search google using the url for the article and then follow the search link you can get behind the paywall. Here's a link to the google search result - https://www.google.com/search?q=https%3A%2F%2Fwww.ft.com%2Fcontent%2F874359dc-925b-11e7-a9e6-11d2f0ebb7f0&oq=https%3A%2F%2Fwww.ft.com%2Fcontent%2F874359dc-925b-11e7-a9e6-11d2f0ebb7f0&aqs=chrome..69i64.1316j0j7&sourceid=chrome&ie=UTF-8 https://www.google.com/search?q=https%3A%2F%2Fwww.ft.com%2Fc...

gbarc888 9y ago

The article only says they found a "security risk". I wonder what that is, and how it would allow identity theft if they are actually using public/private keys. Did Estonia secretly backdoor their encryption?