N2ID: People willing to trade their freedom for temporary security deserve neither and will lose both.
פורצים את ההצפנה של כרטיסים חכמים
12.3.08 Dan Goodin The Register- חוקרי בטיחות מידע מצאו דרך לפרוץ ולזייף בתוך דקות הצפנה של כרטיסים חכמים, המשמשים כאמצעי כניסה לאתרים ומוסדות שונים.
"If you want to get into a high-security building, spending a matter of days is OK. Now, it doesn't take days; it takes minutes for subways and military installations alike..."
"If you want to get into a high-security building, spending a matter of days is OK. Now, it doesn't take days; it takes minutes for subways and military installations alike..."
.
פרופסור למערכות מידע בבריטניה: ת"ז ביומטרית היא גניבת הזהות האולטימטיבית
7.3.08 – Time OnLine, פרופ' איאן אנג'ל, מומחה למערכות מידע ב-London School of Economics: מערכות מחשב נכשלות תמיד ומאגר לאומי יעשה זאת "big time".
פרוייקט תעודת הזהות כרוך במערכות מחשב ענקיות ומורכבות, הרבה יותר ממערכת המחשב של משרד הבריאות שדלפה לאחרונה בבריטניה – זוהי הקטסטרופה הבאה. הפוליטיקאים נאיבים מדי כדי לחשוב שלא יהיו בעיות, שהמאגר יהיה מאובטח לחלוטין בגלל שהוא ביומטרי. אבל הניסיון, לרבות דוגמאות מהתקופה האחרונה, מלמד שמערכות מחשב ענקיות שכאלה נכשלות שוב ושוב. מאגר ביומטרי בהיקף לאומי יהיה מטרה אולטמיטיבית ל"אולמפיידת ההאקרים".
מלבד כשלים טכנולוגיים שקורים בכל מאגר, תמיד נמצאים מבין העובדים שמטפלים בו מעטים שמעבירים מידע – 80% מכשלי האבטחה אינם קורים בגלל האקרים אלא בגלל עובדים מושחתים. ובמקרה של מאגר ביומטרי, המאגר יהפוך למקור לגניבות זהות, פעילות טרוריסטית.…
"Paradoxically, you only agreed to register to protect yourself from “identity theft”, and instead you find yourself victim of the ultimate identity theft - the total loss of control over your identity.
Errors won't just happen by accident. It's possible to imagine that workers on the ID database will be corrupted, threatened or blackmailed into creating perfectly legal ID cards for international terrorists and criminals. Then the ID card, far from eliminating problems, will be a one-stop shop for identity fraud; foreign terrorists, illegal immigrants will be waived past all immigration checks…
At a recent Ditchley Park conference on combating organised crime, a persistent warning from the law enforcement authorities was that criminal gangs had placed “sleepers” in financial sector companies, and they were just waiting for the one big hit. The perpetrators of 80 per cent of all computer security lapses are not hackers, but employees. Cryptographic systems don't help if the criminal has been given the keys to the kingdom. Why should the ID centre be immune, especially when there will be nearly 300 government departments logging in. Furthermore, the register will be the No 1 target for every hacker on the planet: the Olympic Games of hacking. …"
Errors won't just happen by accident. It's possible to imagine that workers on the ID database will be corrupted, threatened or blackmailed into creating perfectly legal ID cards for international terrorists and criminals. Then the ID card, far from eliminating problems, will be a one-stop shop for identity fraud; foreign terrorists, illegal immigrants will be waived past all immigration checks…
At a recent Ditchley Park conference on combating organised crime, a persistent warning from the law enforcement authorities was that criminal gangs had placed “sleepers” in financial sector companies, and they were just waiting for the one big hit. The perpetrators of 80 per cent of all computer security lapses are not hackers, but employees. Cryptographic systems don't help if the criminal has been given the keys to the kingdom. Why should the ID centre be immune, especially when there will be nearly 300 government departments logging in. Furthermore, the register will be the No 1 target for every hacker on the planet: the Olympic Games of hacking. …"
ID cards are the ultimate identity theft
Computer systems always fail - and the national database will do so big time
Angell, I ID cards are the ultimate identity theft The Times, March 7, 2008
Ian Angell is Professor of Information Systems at the London School of Economics
The ID project is one of the biggest computer systems envisaged - far more complex than the failing NHS system. And it's another disaster waiting to happen. Still the politicians naively claim there will be no problems: it will be totally secure because of biometrics.
The only property that all systems have in common is that they fail. And the bigger the system - 60 million entries on a compulsory ID card database - the greater the opportunity of failure.
Errors won't just happen by accident. It's possible to imagine that workers on the ID database will be corrupted, threatened or blackmailed into creating perfectly legal ID cards for international terrorists and criminals. Then the ID card, far from eliminating problems, will be a one-stop shop for identity fraud; foreign terrorists, illegal immigrants will be waived past all immigration checks.
הירשם ל-
רשומות (Atom)
