Passport hacking

“THC has discovered weaknesses in the system to (by)pass the security checks. The detection of fake passport chips does not work. Test setups do not raise alerts when a modified chip is used. This enables an attacker to create a Passport with an altered Picture, Name, DoB, Nationality and other credentials.The manipulated information is displayed without any alarms going off.The exploitation of this loophole is trivial and can be verified using thc-epassport”

Source: freeworld.thc.org/thc-epassport

~ by Balle on September 29, 2008.