Cloning demo adds to fears over ID card scheme
Philippe Naughton writes in The Times:
News that a German computer expert has managed to “clone” the data chip on his new passport has called into question government assurances about the security of the planned national ID card – which will use similar technology.
Lukas Grunwald gave a demonstration at a conference in Las Vegas last week to show that he could copy the information stored on the new passports, that have been issued in Britain since March.
Although Herr Grunwald was not able to modify any of the data on his own passport, he was able to insert the copied information on another chip that could be put into a forged passport or used to fool a card-reading machine.
Herr Grunwald told the Wired.com news website that it had taken him just two weeks to work out how to clone the radio frequency ID, or RFID, chips contained in his own German passport.
“The whole passport design is totally brain-damaged,” he said. “From my point of view, all of these RFID passports are a huge waste of money. They’re not increasing security at all.”
The German’s cloning exploit provides another argument for campaigners against the British ID cards, who argue that they will violate people’s privacy, will be too expensive and are unnecessary.
They also back up the view of Dame Stella Rimington, the former MI5 director, who said last year that if the cards could be forged they would be “absolutely useless”.
Phil Booth, national coordinator of the No2ID campaign, said that although Herr Grunwald had only been copying the data on his passport, still encrypted, a hacker in the Netherlands had managed to get readable data from another passport after “a couple of hours on a normal PC”.
“As we understand it, the ID card will be a passport lite, for travel inside Europe, which means that they will have to use the same technology as in the passport on the cards, which begs the question – if they are already compromised why are we going down this line?” Mr Booth said.





August 8th, 2006 at 20:59
I made this point about the copying just after the cards were brought in. And, on the Evening Gazette in Middlesbrough website they laughed and said “Why would they bring in a chip they can copy?” It is a significant step forward. I hope people realise the significance of this finding. But, there are still some dumb people out there.
August 16th, 2006 at 21:13
It really is a case of knowing you are right, being proved you are right several times over and the wrong decision still being taken. Keep on fighting.
December 1st, 2006 at 14:29
[...] #8221; to their office …… …and you probably have already read about how No2ID have cloned passport details by cloning. ..and they are the uses we know about. See report in G [...]