ID cards rethink to be unveiled

[Xaccers]

Originally Posted by TheNorm

They might not care if they take you alive or not! I'm sure I've seen a poster about this, be suspicious of people who have several addresses. Or was that mobile phones?

I thought it was heads, be suspicious of people who have several heads...

[Tezcatlipoca]

Originally Posted by BBKing

The Register has spotted this, I'm glad to say. Where I lead, others follow :P

http://www.theregister.co.uk/2008/03...atabase_gaffe/

A very good quote from there...

Originally Posted by The Register

Munro [MD of GCHQ accredited penetration testing firm SecureTest] describes [Home Secretary Jacqui] Smith's faith in the inherent security of databases kept off the internet as "misguided" and symptomatic of wider government IT security shortcomings. "The minister's lack of appreciation gives us great concern that government ministers have no significant understanding of security, as evidenced by the recent data losses on CD," he said. "What hope have we got that the National ID card database will be any more secure?"

What i don't understand and maybe i am being thick but if the information they want for the ID card is held in an offline database how can anyone verify the ID card. Surely when i am asked for my id card they need to verify it with a central database that cannot be tampered with as i am sure someone will find a way to tamper with the cards themself.

More joy about "secure" databases
Charlie's Diary 17th March 2008

"Take two news items about the same subject:
Firstly: MI5 want to data mine the Transport for London Oyster card database: "The Observer said this weekend that the Information Commissioner's Office (ICO) has confirmed that the clandestine services have requested full Oyster access, and would target other cities' smartcard travel schemes as they come online. At present they can request details of an Oyster user's transactions - and hence, time-slugged locations - on an individual basis only, rather than having free rein to search the system as they please. This could include mining the entire database to look for suspicious patterns, and tracking named individuals."

Secondly: Wireless subway cards cracked: "Karsten Nohl, a computer science researcher at the University of Virginia, claims to have broken the encryption used by the RFID (radio frequency identification) chip found in the Charlie Card on the Boston T subway system and in the Oyster Card on the London Underground.".....

.....Now. If you were a miffed anti-authoritarian prankster � and you knew the Thought Police would be looking for suspicious patterns of travel in a database, and if the data going into the database was amenable to hacking (if, for example, you could run off fake Oyster cards in the name of, say, Sir Ian Blair), wouldn't it be fun to see if you could make the Security Elephant dance? Mark Thomas fans, I'm looking at you.

Alternatively, if you were a really smart terrorist, you'd never use the same (fake) Oyster card twice"

[Tezcatlipoca]

Hmm...

http://www.telegraph.co.uk/opinion/m.../12/do1202.xml

Originally Posted by Philip Johnston @ The Telegraph

Almost unnoticed last week, the Government announced it had shaved another £1 billion off the cost of its proposed identity card scheme.

It did so by deciding to let the "open market" capture citizens' biometrics, effectively outsourcing the cost of enrolling people on to the ID database. You could end up getting your fingerprints taken at a supermarket, rather than at a passport office as originally proposed.

Almost imperceptibly, the security architecture originally built around the ID card project has been dismantled.

When it was proposed in 2002, the intention was to establish a bespoke database. David Blunkett, then Home Secretary, said: "We've got to build a clean identity database from scratch. We can't use the National Insurance numbers, as there are 20 million more National Insurance numbers than there are people in the country."

But this idea was abandoned. Instead, biometrics will be stored on an existing system in the Home Office used for asylum seekers, biographical information will be held on a National Insurance database in the Department for Work and Pensions and a third database at the Identity and Passport Service (IPS) will hold administrative details related to the issue and use of the ID cards.

It was also envisaged that everyone would have to give an iris print, which is the most secure biometric with a far lower chance of false readings than fingerprints. Last year, however, the Identity and Passport Agency said it would proceed only with fingerprints, which are far cheaper to capture.

Still, at least these fingerprints would be taken in the secure and official environs of a government passport office, one of 70 being set up for this purpose. But when it became clear that far more than 70 offices would be needed to enrol 60 million people on to a database, and it would be costly, this changed as well. Hence the announcement that private contractors will be asked to bid for the work.

Does any of this sound secure to you? It seems to defeat the purpose of the whole exercise, which is to protect identities, capture terrorists, bear down on benefit fraud and stop illegal immigration. But of course none of these will be ameliorated by the possession of an ID card, which nobody will be required to carry with them.

As one perplexed campaigner said after the publication of the new costings: "The Government now appears to have junked the primary pretext for the scheme. So what is it for?"

(big big snip)

[Tezcatlipoca]

BBC News - ID cards 'could threaten privacy'


In other news...

"Bears crap in the woods"

"The Pope is Catholic"

[Sirius]

Originally Posted by Matt D

BBC News - ID cards 'could threaten privacy'


In other news...

"Bears crap in the woods"

"The Pope is Catholic"

I no longer have any faith in this system being secure. Therefore i for one will NOT be signing up to it.

[BBKing]

Therefore i for one will NOT be signing up to it

Are you going to campaign against it? If not, you may find yourself with the choice of signing up or a large fine.

If you've got a Labour MP, write to them saying you'll only vote for a candidate opposed to ID cards (Labour may well listen to this now, their candidate in Crewe & Nantwich included 'ID cards for foreigners' in their spectacularly unsuccessful campaign, and they need to know it's not a vote-winner for two reasons - the expense and the inconvenience). Join no2id. It's nearly dead, so let's kill it.