Re: [Full-disclosure] RFID enabled e-passport skimming proof of concept code released (RFIDIOt)

2006-10-30 Thread Michael Holstein
> And easily optimized by starting with a guess at the person's age - are > they 20, or 45, or 70? Take 5 years either side, and you're down to 3,650 > or so guesses. I was thinking more along the lines of hanging around just outside security or immigration with my long range antenna and laptop

Re: [Full-disclosure] RFID enabled e-passport skimming proof of concept code released (RFIDIOt)

2006-10-30 Thread Valdis . Kletnieks
On Mon, 30 Oct 2006 10:10:26 EST, Michael Holstein said: > > >The Date Of Birth of the holder > > about 32,000 possibilities (assuming < 90yrs old) And easily optimized by starting with a guess at the person's age - are they 20, or 45, or 70? Take 5 years either side, and you're down to 3,65

Re: [Full-disclosure] RFID enabled e-passport skimming proof of concept code released (RFIDIOt)

2006-10-30 Thread Adam Laurie
Michael Holstein wrote: >>The Expiry Date of the Passport > > Passports are vaild for 10 years (for an adult in the US), and > expiration is just MM/ .. so that's only 120 possibilities. > Note that here in the UK expiry is YY/MM/DD, so numbers will actually be much larger, but in term

Re: [Full-disclosure] RFID enabled e-passport skimming proof of concept code released (RFIDIOt)

2006-10-30 Thread Adam Laurie
Michael Holstein wrote: > That article focuses on Dutch passports, but in the US it's essentially > the same. > >>The Passport number > > a 10 digit number (I don't know where they start, but it certainly > wasn't 01). If they're sequential, we only need to know where they start on

Re: [Full-disclosure] RFID enabled e-passport skimming proof of concept code released (RFIDIOt)

2006-10-30 Thread Michael Holstein
That article focuses on Dutch passports, but in the US it's essentially the same. >The Passport number a 10 digit number (I don't know where they start, but it certainly wasn't 01). >The Date Of Birth of the holder about 32,000 possibilities (assuming < 90yrs old) >The Ex

[Full-disclosure] RFID enabled e-passport skimming proof of concept code released (RFIDIOt)

2006-10-27 Thread Adam Laurie
The latest version of RFIDIOt, the open-source python library for RFID exploration/manipulation, contains code that implements the ICAO 9303 standard for Machine Readable Travel Documents in the form of a test program called 'mrpkey.py'. This program will exchange crypto keys with the passport