Feeds

Government rubbishes ID card hack report

Home Office not running about in a panic at all

Build a business case: developing custom apps

The Home Office has dismissed an apparently successful attempt to clone and edit the data on a British identity card's microchip.

Adam Laurie, who has previously found similar weaknesses in the microchips on passports, rewrote data taken from a UK Border Agency identity card issued to a foreign student, according to a report in the Daily Mail. Identity cards for UK nationals are expected to use the same technology.

On a cloned card, Laurie edited the chip's data so the student would appear to be eligible for benefits, but also added the message "I am a terrorist - shoot on sight". It took 12 minutes to produce the new chip, although a physical forgery of an identity card would also be required. The article says the chip passed a software check supplied by the International Civil Aviation Organisation for identity documents.

The Home Office has dismissed the report. "This story is rubbish. We are satisfied the personal data on the chip cannot be changed or modified and there is no evidence this has happened," said a spokesperson.

"The identity card includes a number of design and security features that are extremely difficult to replicate. Furthermore, the card readers we will deploy will undertake chip authentication checks that the card produced will not pass. We remain confident that the identity card is one of the most secure of its kind, fully meeting rigorous international standards."

Philippe Martin, a senior analyst at Kable, commented: "It is a serious problem if the chip can be cloned and data edited, giving them entitlement to benefits and services. It may mean that the Home Office having to do more work to make the card more secure, which could imply further public expenditure."

"This shows up the big con. The Home Office doesn't really care about 'ID theft', or it wouldn't be pushing technology that any competent crook can subvert," said Phil Booth, national coordinator of the NO2ID campaign group. "The ID obsessed officials are putting our personal information at risk in their scramble to control it."

This article was originally published at Kable.

Kable's GC weekly is a free email newsletter covering the latest news and analysis of public sector technology. To register click here.

The smart choice: opportunity from uncertainty

More from The Register

next story
You! Pirate! Stop pirating, or we shall admonish you politely. Repeatedly, if necessary
And we shall go about telling people you smell. No, not really
Major problems beset UK ISP filth filters: But it's OK, nobody uses them
It's almost as though pr0n was actually rather popular
UK Parliament rubber-stamps EMERGENCY data grab 'n' keep bill
Just 49 MPs oppose Drip's rushed timetable
MPs wave through Blighty's 'EMERGENCY' surveillance laws
Only 49 politcos voted against DRIP bill
EU's top data cops to meet Google, Microsoft et al over 'right to be forgotten'
Plan to hammer out 'coherent' guidelines. Good luck chaps!
US judge: YES, cops or feds so can slurp an ENTIRE Gmail account
Crooks don't have folders labelled 'drug records', opines NY beak
Delaware pair nabbed for getting saucy atop Mexican eatery
Burrito meets soft taco in alleged rooftop romp outrage
prev story

Whitepapers

Reducing security risks from open source software
Follow a few strategies and your organization can gain the full benefits of open source and the cloud without compromising the security of your applications.
Consolidation: The Foundation for IT Business Transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.
Application security programs and practises
Follow a few strategies and your organization can gain the full benefits of open source and the cloud without compromising the security of your applications.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
Consolidation: the foundation for IT and business transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.