IoT Security Blog

Articles and Posts on IoT Security, Embedded Systems, and the Internet of Things

Passports

Not really cloning…

Contributed by Joanne C. Kelleher Last week, in Got $250? Cloning Electronic Passport Cards I discussed the presentation that security researcher Chris Paget planned to give at the Shmoocon hacker convention. The description of his talk says $250 on eBay buys the necessary kit to clone the Electronic Drivers License and US Passport Card… These…

Read More

RFID slips out of top 5 security threats

Contributed by Joanne C. Kelleher This week The Georgia Tech Information Security Center (GTISC) hosted its annual summit on emerging security threats and countermeasures affecting the digital world. For the second year in a row they have issued a report of those security threats expected to increase and evolve. Last year’s threats were: Web 2.0 and…

Read More

Poor Implementation of e-Passport Security Features

Contributed by Joanne C. Kelleher This week THC (The Hackers Choice) released a video and a tool to backup data from the ePassport. The tool also allows you to create a clone of the ePassport chip. http://freeworld.thc.org/thc-epassport/ In tests for The Times (UK), Jeroen van Beek, a security researcher at the University of Amsterdam who…

Read More

The World is Yours! (But Not with RFID)

Contributed by Joanne C. Kelleher I recently renewed my U.S. Passport and the new one arrived yesterday. Included in the package was a brochure from the State Department titled With Your U.S. Passport, the World is Yours! which covers a variety of travel issues. One of the sections in the brochure covers the features and…

Read More

Briefing on Federal RFID-Enabled Documents

Contributed by Joanne C. Kelleher I found a briefing from The Center for Democracy and Technology (CDT) called Security and Privacy Issues Associated With Federal RFID-Enabled Documents. The CDT is a non-profit public policy organization dedicated to promoting the democratic potential of today’s open, decentralized global Internet. Our mission is to conceptualize, develop, and implement…

Read More

Missed opportunity to call for more secure Wi-Fi, Bluetooth and RFID

Contributed by Joanne C. Kelleher CNET’s article Protecting against Wi-Fi, Bluetooth, RFID data attacks covers a July 18th session at the Last HOPE hacker conference, entitled “How do I Pwn Thee? Let me Count the Ways” (pwn is hacker speak for “own” or control), where a security expert discussed how most people are at risk…

Read More

Security and Other Issues with e-Passport Production

Contributed by Joanne Kelleher This week Bill Gertz at the Washington Times wrote an exclusive series about the Government Printing Office (GPO) and the production of e-Passports. These RFID enabled passports have a computer chip and antenna embedded in the cover so that data can be read from a distance. Here are the highlights of…

Read More