3 ms·
Why there’s no physical token as a passport yet!? Something like a yubico usb and can have it in the keychain would be ideal.
by tamimio 3y ago
Why there’s no physical token as a passport yet!? Something like a yubico usb and can have it in the keychain would be ideal.
- Guvante 3y agoPlugging in USB into a government device at the border isn't what I would call secure... For either party to be clear...
- tamimio 3y agoNot necessarily a USB as an interface, and it shouldn’t contains any biometric either for privacy, just a paper replacement.
- Guvante 3y agoThey are already RFID enabled (at least US ones have been for years). You would want a paper version as a backup anyway in case the electronics fail.
- roobs 3y agoThe "paper version" is still required - the RFID is authenticated with information from the passport. The idea is at a border the passport itself will be scanned, OCR'd (from the data in the machine-readable zone) and then that information will be used to read the information + signature from the RFID chip to authenticate the document.
- 1letterunixname 3y agoNo, you're wrong. The person's passport number is a primary key into the issuer's database of valid documents as the ultimate source of truth. The RFID is another means in case the paper version wasn't legible, but at the expense of over-communicating details.
- NoZebra120vClip 3y agoMy voice is my passport
- xory 3y agoVerify me
- 1letterunixname 3y agoSetec astronomy
- netsharc 3y agoThe NFC passports contain digital data, even your photo, you can use this app to see for yourself: https://play.google.com/store/apps/details?id=nl.innovalor.nfciddocshowcase https://play.google.com/store/apps/details?id=nl.innovalor.n...
- patch_cable 3y agoPart of me really wants to try this. Part of me is terrified of scanning my passport with an app I have just heard of.
- doubleg72 3y agoI’ll check with my Flipper!
- extraduder_ire 3y agoI just checked fdroid, and this app seems to work: https://f-droid.org/en/packages/com.tananaev.passportreader/ https://f-droid.org/en/packages/com.tananaev.passportreader/ Strangely, to decrypt the data off the passport you need the passport number, the date of birth, and the expiry date. I assume this is why that playstore app needs to get a photo of your passport. Sure enough, my phone could read off other details about me including my photo after a few seconds of reading. Never knew how it worked before, and assumed it was like how mifare DESfire cards work since the bytes I got from a simple reader app were different every time. (I assume that's done so you can't wirelessly ID people using their passports)
- netsharc 3y ago[1] says the decryption key is derived from those pieces of information, and the key derivation logic is public info, e.g. [2] is an implementation. It's somewhat clever, if someone takes a photo of the first page, they already have your personal info, to steal it from the chip they still need to have visual on the info on that page. [1] https://randomoracle.wordpress.com/2012/08/27/reading-the-us-passport-using-an-android-phone-overview/ https://randomoracle.wordpress.com/2012/08/27/reading-the-us... [2] https://github.com/AndyQ/NFCPassportReader/blob/main/Examples/Example_SPM/NFCPassportReaderApp/Model/PassportUtils.swift#L14 https://github.com/AndyQ/NFCPassportReader/blob/main/Example...
- 1letterunixname 3y agoForgeries, identity theft, and invasions of privacy. Hard pass.