←back to thread

Reading NFC Passport Chips in Linux

(shkspr.mobi)
290 points robin_reala | 7 comments | 25 Jun 25 07:33 UTC | HN request time: 1.318s | source | bottom
Show context
wkat4242 ◴[25 Jun 25 10:20 UTC] No.44375589[source]▶
Many passports also contain digitized fingerprint scans. But those are even harder to access. You need a private key that only governments have.
replies(2): >>44376354 #>>44377674 #
1. aneutron ◴[25 Jun 25 12:09 UTC] No.44376354[source]▶
Sounds fairly sensible to me
replies(2): >>44378276 #>>44381105 #
2. heavyset_go ◴[25 Jun 25 15:12 UTC] No.44378276[source]▶
If it's truly sensitive data, encrypting with a unique private key and locking that with a PIN a la FIDO via NFC would be a bit more secure.

One master key leak and everyone is walking around with IDs that give away sensitive data over RFID.

replies(1): >>44381283 #
3. timewizard ◴[25 Jun 25 19:37 UTC] No.44381105[source]▶
"Many passports also contain your computer password. But those are even harder to access. You need a private key that only governments have."

Still reasonable?

replies(1): >>44394763 #
4. Nextgrid ◴[25 Jun 25 19:58 UTC] No.44381283[source]▶
> sensitive data

"Sensitive" data that you already leave on everything you touch.

replies(1): >>44381347 #
5. heavyset_go ◴[25 Jun 25 20:06 UTC] No.44381347{3}[source]▶
You leave your DNA everywhere, too, but there are data security and privacy implications of digitizing that data and voluntarily/involuntarily sharing it with others.
6. aneutron ◴[27 Jun 25 08:02 UTC] No.44394763[source]▶
If you think of your fingerprint as a "secret", you're wrong. It's more your name. That would be like saying your face is a secret. It's not.
replies(1): >>44398864 #
7. timewizard ◴[27 Jun 25 17:58 UTC] No.44398864{3}[source]▶
> If you think of your fingerprint as a "secret",

I can unlock my laptop with just a fingerprint. Whether or not we believe this the implementation already exists.

> It's more your name.

I can change my name. Can I change my fingerprints?

> That would be like saying your face is a secret.

I can unlock my phone with my face. Whether or not we believe this the implementation already exists.

> It's not.

Let's discuss the real world and not the ideal fantasy.