Posts by aliceklaar?

RFIdiots

Quote from Virus Bulletin's Martijn Grooten today -

"Researchers note that even without signature validation ensuring data integrity, it would still take technical skill to manipulate the information on an e-Passport's RFID chip "

Yeah Right. Using Linux is like so difficult dude it needs actual technical skills :p

Back in 2007 Adam Laurie was doing research into RFID cards and did the whole Shmoocon / DEFCON / Blackhat tours with RFidiots & hacking an ePassport. He even told the Daily Mail.

However, the U.K. Home Office defended the passports, asserting the hack doesn't make them less secure.

"The key point ... is that the information on the chip cannot by changed, rendering the procedure described by Adam Laurie pretty pointless," wrote Peter Wilson, senior press officer.

Further, a cloned chip would have to be inserted into a forged passport, and new security measures in the passports make that "virtually impossible," the Home Office said, quoting a report released by the National Audit Office.

So here's a link to the pretty pointless procedure of changing your photo "Hackers expose security flaws with 'Elvis Presley' (e)passport" from CNN

https://www.youtube.com/watch?v=vR15PWU18JA

Forget the Leopard - Watch out for the Red Back etc

For a sing along guide to the those dangerous beasties you may encounter

"Come To Australia" by Scared Weird Little Guys

https://www.youtube.com/watch?v=eNEeq5qGh8I&list=RDkdihHnaOQsk&index=3

Finger etc on the button

It is fairly easy to put somebody's finger / iris on a scanner. Even if they have become recently deceased in custody etc

If I have memorized my encryption passphrase then its going to need a $5 wrench ( https://xkcd.com/538/ )

or Regulation of Investigatory Powers Act 2000 .c 23 Part III Power to require disclosure Section 49

or an orange jump suit with a towel & some water.

As for backdoors - I once wrote an simple program that embedded the password into the header of the file that was encrypted. Obvs this was so we could recover the file when the user forgot his the super sekrit password.

As for metadata... Maltego is still my professional friend

From Register archives - FUD flies as Raytheon reveals social media analysis tool

My comment still applies re "privacy" - Its only a Secret if you don't tell anyone https://forums.theregister.co.uk/forum/1/2013/02/11/raytheon_riot_privacy_hyepgasm/#c_1725101