> If there’s a DB lookup it shouldn’t be possible to vend new passports without a persistent and undetected hack of the backend? If it’s a stolen passport with

> If there’s a DB lookup it shouldn’t be possible to vend new passports without a persistent and undetected hack of the backend? If it’s a stolen passport with the photo changed, that should also show up on the lookup screen? You're correct. Biometric passports are hard to forge without a complicit country.