3 ms·
> how to use the DMV's public key to check whether a California ID is real. That's not what the signature guarantees, though. It says the combination of textua
by yencabulator 9d ago
> how to use the DMV's public key to check whether a California ID is real.
That's not what the signature guarantees, though. It says the combination of textual information on the card is *someone's* valid driver's license. The signature doesn't even cover the photo! It just limits the forgeries to using identities of real people.
Compare to https://en.wikipedia.org/wiki/Biometric_passport https://en.wikipedia.org/wiki/Biometric_passport that actually contains a digital photo, with a signature.
- returningfory2 9d agoIIUC, the forgery path then involves getting any legitimate California license and changing the photo only? I guess that works.
- yencabulator 9d agoThe forgery path is downloading the leaked database of 153 million driver's license images, picking one with the right gender, rough age, weight and height, and printing a card with that text+barcode and your photo.
- happyopossum 9d ago> The signature doesn't even cover the photo! Which makes sense, as the signature is for the barcode data...