Stories
Slash Boxes
Comments

News for nerds, stuff that matters

Slashdot Log In

Log In

Create Account  |  Retrieve Password

US Government To Release Electronic Passport

Posted by samzenpus on Wed Jan 02, 2008 06:33 PM
from the all-the-better-to-track-you-with dept.
XueCast writes "The federal government has announced that they will release new electronic Passport cards in either April or May 2008. The cards could be read wirelessly from up to 20 feet away, which could reduce the waiting time at border checkpoints. Deputy Assistant Secretary Of State For Passport Services, Ann Barrett said, "As people are approaching a port of inspection, they can show the card to the reader, and by the time they get to the inspector, all the information will have been verified and they can be waved on through.""
+ -
story

Related Stories

[+] Your Rights Online: EU Plans to Require Biometrics for Visitors 238 comments
bushwhacker2000 writes to tell us that the EU may soon be requiring travelers to provide biometric data before crossing into Europe. They are trying to soften the blow by offering "streamlined" services for frequent travelers but the end result seems the same. "The proposals, contained in draft documents examined by the International Herald Tribune and scheduled to go to the European Commission on Wednesday, were designed to bring the EU visa regime into line with a new era in which passports include biometric data. The commission, the EU executive, argues that migratory pressure, organized crime and terrorism are obvious challenges to the Union and that the bloc's border and visa policy needs to be brought up to date."
This discussion has been archived. No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More
Loading... please wait.
  • Awesome (Score:5, Funny)

    by QuantumG (50515) <qg@biodome.org> on Wednesday January 02 2008, @06:35PM (#21888624) Homepage Journal
    Can't wait for this.. I can finally hack my way past border security, like in 24.

  • No air travel?! (Score:5, Interesting)

    by s.bots (1099921) on Wednesday January 02 2008, @06:36PM (#21888648)
    $45 for an insecure card that can be read from 20 feet away and cannot be used for air travel? Thanks but no thanks, maybe when they have one permitted for air travel and with (at least) a method of enabling/disabling reading.
    • Well, it makes sense when you consider how many different countries you can get to from the US just by driving. ...Oh. Right.

      • Re:No air travel?! (Score:4, Insightful)

        by daveo0331 (469843) on Wednesday January 02 2008, @07:17PM (#21889064) Homepage Journal
        It makes a lot more sense if you think of it in terms of total number of trips and not total number of countries. Many major U.S. cities are located along the border (San Diego, Detroit, and Buffalo to name a few). Also, ever been on a cruise? It takes 2-3 hours to get everyone off one of those big cruise ships because of the need to get 2000 people through customs at once. This sounds like it could speed that process up.
        • Re:No air travel?! (Score:5, Insightful)

          by Jah-Wren Ryel (80510) on Wednesday January 02 2008, @08:15PM (#21889652)

          It makes a lot more sense if you think of it in terms of total number of trips and not total number of countries. ...
          It takes 2-3 hours to get everyone off one of those big cruise ships because of the need to get 2000 people through customs at once. This sounds like it could speed that process up.
          About as helpful as a band-aid on a sucking chest wound.

          The root cause of the problem isn't the number of people, i'ts the lame-ass system in the first place. It's a lot like DRM. People who want to enter the country for nefarious purposes will always have a variety of methods of entry that completely bypass these systems. But thosewho wish to enter legally have to jump through all the hoops. Essentially it punishes the law-abiding citizens and ignores the law breakers. Sure, the system will occasionally catch someone with a felony conviction in their home country who didn't know that would disqualify them from entry. But chances are, those people weren't up to no good, they were just on a trip like any other regular joe and denying them entry doesn't improve the situation at all.
          • Re:No air travel?! (Score:5, Informative)

            by kabrakan (13409) on Wednesday January 02 2008, @09:43PM (#21890334) Homepage
            Customs isn't mainly for crime, its for economics. At least at the canadian border, i see people held back all the time because they brought too many goods over and the receiving side wants to tax their stuff. The next thing they're worrying about is foreign food that could introduce diseases.

            You're right that this is useless tech however. It takes about 4 seconds for a border officer to process your passport. The reason there are bottlenecks at ports of entry is because there tends to be a maximum of two border agents for every 50 people trying to cross.
          • Come on in! (Score:3, Interesting)

            People who want to enter the country for nefarious purposes will always have a variety of methods of entry that completely bypass these systems.

            I recommend a fake ID with a birthdate of February 29. Customs systems reject this date so they can't look up any records.
    • Who cares about RFID, I just want my stamps that say where I've been. I don't want an electronic record that I can't look at. :)
  • Ummm. (Score:5, Interesting)

    by Idiot with a gun (1081749) on Wednesday January 02 2008, @06:37PM (#21888652)
    Every security measure I've seen for RFID involves some encryption, and a "Handshake" between the reader and card. In a packed situation like an airport, it would be really easy to have an electronic device sniff this handshake, and by pretending to be a reader, lift multiple passport ID's off of people while passing by. Sounds dangerous to me.
    • Re:Ummm. (Score:5, Informative)

      by XanC (644172) on Wednesday January 02 2008, @06:47PM (#21888790)

      There are certainly ways [wikipedia.org] to perform key exchanges and begin encrypted communication without being vulnerable to eavesdropping.

      My understanding (which may be wrong) of the main problem with these RFID devices is that there is in fact no handshaking or encryption, and that the device will happily spill its guts to anything that asks.

      • Re:Ummm. (Score:5, Interesting)

        by The_Wilschon (782534) on Wednesday January 02 2008, @06:53PM (#21888842) Homepage
        Perhaps a larger (and maybe more real to Joe Sixpack) reason to be concerned is that you are even more easily pegged as an American, without any need to break the encryption or handshake (if there is one). Being identified as an American can make you a serious target in a lot of places for a lot of reasons, ranging from the terr'rists wanting to kill you to just some dude in an alley in Paris who wants to rob a rich guy instead of a poor guy. Americans tend to be rich.
        • Re:Ummm. (Score:4, Insightful)

          by Amouth (879122) on Wednesday January 02 2008, @07:12PM (#21888996)

          Americans who travel tend to be rich.
          fixed that for you

        • Can you name a single example of an American abroad being killed by terrorists (or by a dude in an alley in Paris) where the motive was the victim being from America, as compared to any wealthy nation?
          • Re: (Score:3, Informative)

            Can you name a single example of an American abroad being killed by terrorists (or by a dude in an alley in Paris) where the motive was the victim being from America, as compared to any wealthy nation?

            Robert Stetham [wikipedia.org]
            Leon Klinghoffer [wikipedia.org]
            Many others [americanmemorialsite.com]
          • Re: (Score:3, Insightful)

            .70 Euro to the Dollar.

            100+ Yen to the Dollar, yet the Japanese aren't considered particularly poor...

            We yanks aren't so rich any more...

            The ones, who are walking around in Paris, are still quite rich — by the standards of a lowlife robber, anyway.

            • That strikes me as somewhat disingenuous. The Yen has always been more closely equated with the cent than the dollar, Looking at the history [sauder.ubc.ca] of the Euro, it's pretty clear the value of your dollar is not as strong as it was, at least in comparison to the Euro (ie, you're not as rich as you were). Actually, that site [sauder.ubc.ca] is kind of interesting. The behaviour of your dollar compared to the Japanese's is very strange compared to a fairly consistent trend in the currencies of Canada, Britain, Australia, Malaysia
      • Re:Ummm. (Score:4, Informative)

        by mi (197448) <mi+slashdot@aldan.algebra.com> on Wednesday January 02 2008, @07:55PM (#21889438) Homepage

        [...] there is in fact no handshaking or encryption, and that the device will happily spill its guts to anything that asks.

        There should not be much more "guts" to spill, than the passport number itself. This will not give an attacker much information at all — other than: "There exists a passport with this number," but in those few seconds, that it takes a person to walk up to the counter, their giant picture will already be on the officer's screen for verification...

        It would still be a hole, but a much smaller one than it may seem at the first suspicious glance. It will, hopefully, be further narrowed by making these passports respond to RFID-readers only when they are opened and, maybe, only when directed towards the reader — simply by making the passport's cover with some RF-blocking material.

        All of these measures will make your hypothetical eavesdropper rather impractical even without encryption.

        People have been using EZ-Pass and similar (oppressive) RFID-readers for many years now to go through highway robbery, ehm, tools... Yet there are no stories of EZ-Pass numbers picked-up by hidden crooks and plugged into fake EZ-Pass devices for resale... Maybe, someone is doing it, but it sounds more difficult, than crossing into the US through the Southern border.

    • Here is a link to an explanation on how SSL works, who's theory can be applied to any kind of public key system, including (hopefully) RFID: http://www.interwebinc.com/security/ssl.html [interwebinc.com]
    • Encryption doesn't matter for a passport...if you are hunting Americans and Americans are the only ones who have RFIDs in their passports.

      If you have a device that detects RFIDs and you find someone walking down the street in a country outside the USA with an RFID on their person, then that person is most likely to carrying an American passport. If you are looking to kidnap or kill an American because your God has given His OK to do so (the mullah told you so), well then chances are very hig
        • Re: (Score:3, Insightful)

          And the Americans, who go through the trouble of trying to disguise themselves, will wrap their passports in foil, or something.

          Who wants to lay odds on the chances of the US government making such "obstruction and/or obfuscation, or possession of such obstruction or obfuscation device(s) or material(s)" at any time by such a passport holder highly illegal? It would follow with the rest of the brain-dead security theater "logic" we've seen so far.

          Cheers!

          Strat
    • Re:Ummm. (Score:4, Informative)

      by Propaganda13 (312548) on Wednesday January 02 2008, @07:37PM (#21889244)
      Why do you need a device with the range of 20ft? How about range of 2 inches and place the reader 20ft down the line?
      • Re:Ummm. (Score:5, Insightful)

        by Original Replica (908688) on Wednesday January 02 2008, @07:55PM (#21889434) Journal
        Because the senator's buddies aren't interested in a mark up reselling barcode readers ($80), when they can markup RFID readers.($1700) Besides RFID is so much more tech heavy it's gotta be better. Better security theater that is. Joe Sixpack will be terribly impressed that there is a computer-thingy in his passport.
    • Re:Ummm. (Score:5, Interesting)

      by porpnorber (851345) on Wednesday January 02 2008, @08:00PM (#21889500)

      What I really don't understand about the entire discussion is this: what the border guards actually look at is not what's written on your passport; it's what's stored in their database (from which, in the case of your own citizens, the passports were generated in the first place). So all that is needed is a serial number, right? You type your SSN into a keypad (or for that matter, swipe any one of your credit cards—nobody believes that the security establishment pays any attention to data protection laws, anyway), your photo pops up on the guy's screen, and if it's you, you're through. Everything else is either a holdover from the days before networks, or a diversion.

      So ... what's this really about? I ask this not as a tinfoil hat question, but because I'm truly mystified.

      I'll say it again. Now there's an Internet, you do not need to carry ID. The Man already has your file, and it's only because 'biometric' face recognition doesn't actually work yet that you carry any cards at all. There's no reason for cards to hold any data beyond a big number. There's no reason for them to be unique. There's no need for them to encode anything that can be used against you. There's no reason for any of this nonsense.

      The only motivation I can think of for these measures is so that they can charge you more application fees for the new ID. What on earth am I missing?

      • Re:Ummm. (Score:5, Funny)

        by roystgnr (4015) * <roystgnr&ticam,utexas,edu> on Wednesday January 02 2008, @11:21PM (#21890952) Homepage
        You seem to have reached that awkward transitional stage where you're smarter than the government, but not yet smart enough to realize that yes, you really are smarter than the government.

        Don't panic. The transition doesn't take very long, and when it's complete you'll be amazed to discover how much else starts making sense too.
    • Re: (Score:3, Informative)

      Every security measure I've seen for RFID involves some encryption, and a "Handshake" between the reader and card. In a packed situation like an airport, it would be really easy to have an electronic device sniff this handshake, and by pretending to be a reader, lift multiple passport ID's off of people while passing by.

      Umm, no. You should really learn something about cryptography and/or RFID before making statements like this.

      1. If these can be read from 20 feet, they're true RFID tags, not contactless smart cards. That means (a) they can't carry any more data than a single ID number and (b) they don't have any sort of encryption.
      2. If these cards did have encryption, and the implementors weren't idiots (and they're not), then it would not be possible to eavesdrop on the communications unless your reader knew some appro
  • by Zymergy (803632) * on Wednesday January 02 2008, @06:38PM (#21888666)
    Tin foil billfolds and passport covers are already being sold: http://www.google.com/search?num=50&hl=en&safe=off&q=RFID+blocking+wallet&btnG=Search [google.com]

    Nothing a microwave oven on high for 2-3 seconds (or a hammer and hard surface) won't solve: http://www.google.com/search?num=50&hl=en&safe=off&q=RFID+disabling+passport&btnG=Search [google.com]
    • Tin foil billfolds and passport covers are already being sold

      Joke's on you... DHS is forbidding passengers to carry more than one square inch of tinfoil through security, or more than three square inches in checked luggage, because it could be crumpled up and fashioned into a weapon.
  • You must opt-in to receive one of these terrorist magnets, so leave your tinfoil wallet at home.
  • by Hamster Lover (558288) * on Wednesday January 02 2008, @06:44PM (#21888734) Journal
    From TFA:

    "As people are approaching a port of inspection, they can show the card to the reader, and by the time they get to the inspector, all the information will have been verified and they can be waved on through," said Ann Barrett, deputy assistant secretary of state for passport services, commenting on the final rule on passport cards published yesterday in the Federal Register.

    Hahahahaha. You have got to be fucking kidding me. I have been the United States on two separate occasions via air in the last few years and in both cases neither myself nor any of my fellow passengers were ever "waved on through" inspection. Everybody got the royal ass raping treatment and this comment by Ann Barrett is just a bureaucratic pie-in-the-sky sales job for the new passports.
    • Hahahahaha. You have got to be fucking kidding me. I have been the United States on two separate occasions via air in the last few years and in both cases neither myself nor any of my fellow passengers were ever "waved on through" inspection. Everybody got the royal ass raping treatment

      Being an old fart I remember the BIG DEAL when "machine readable" passports were created, and the idea then was that apparently it would save a tremendous amount of time because you could just swipe your
      • by wizardforce (1005805) on Wednesday January 02 2008, @07:10PM (#21888976) Journal
        ya.. spend a few hours in customs and save ten seonds by not having to manually read the passport... efficient use of their resources isn't it?

        but because it's a real pain in the ass being treated like a "suspect" from the minute you drive to an airport until you drive out of one. Now ask me if I think the US is "winning the war on terror"?
        I think we know by now that the "war on terror" isn't going to be decreasing terrorism [it is in fact increasing it] nor is it protecting freedoms or safety, it is in fact eroding freedoms that they never had the right to take away in the first place. sigh... as an American, I hope this never spreads to Canada but judging by recent events, it may indeed happen anyway...
    • by Swampash (1131503) on Wednesday January 02 2008, @07:38PM (#21889256)
      I just don't travel to the USA any more. It's not worth my time or my dignity. When conferences and business meetings get scheduled, I make sure someone else goes. Inevitably they get back complaining about some jackbooted stormtrooper screaming "PAPERS! PAPERS!" at them, and vow never to go through it again.
    • I travel a lot for my career, and in fact just returned from China with a few colleagues (CES starting in 4 days and all). The grilling I get entering other countries is a LOT less than what my colleagues received entering the US.

      Does the US entry suck? Yes, it does. But in my experience in the last year when I entered Canada (driving across the border at Sumas), China, Japan, Chile, France, the UK, Indonesia and Russia I got a lot more scrutiny and more of the "ass raping treatment" you complain about

        • Re: (Score:3, Informative)

          "Foreign nationals can have legal residency in the US, but would normally be required to present a valid passport from their country of origin. Similarly, US citizens residing in other countries would be presenting a US passport."

          This is partly false. U.S. permanent residents need only present their Permanent Resident Card to enter the U.S.. Of course, if they travel anywhere that requires they have a passport they would have one from their country of citizenship anyway. But Canadians, for example, do no
  • by Anonymous Coward on Wednesday January 02 2008, @06:44PM (#21888746)
    How could you leave out this little detail from your story?

    I know the universal ID/RFIDs are legitimate stories, but this card story is non-story turned into a potential page churner ONLY because of the single detail left out of the write-up.

    Shoddy editing job.
  • however, average joe blow is going to go to niagara falls in canada, he'll be scanned and scammed as he wanders around, and by the time he drives home to schenectady that evening, someone in russia will be selling his info to someone in china

    at times like these, why root against incompetence? it always seems to win

    so go with the flow i say

    anyone want to rent a 3rd story apt in niagara falls canada with me and point an rfid reader out the window?
  • by desertfool (21262) on Wednesday January 02 2008, @06:58PM (#21888886) Homepage
    And this is a joke. I, and my family (Mexican wife and 'mixed' child) get waved through when we say "American" at the border. Now my wife is a naturalized citizen, but they take one look at me (white as can be) and we get one question before we are waived through.

    As for an RFID solution, what makes that better than the 'instincts' of the Border Patrol? I think that could be faked so fast that a young male of middle eastern descent could could get through as an asian business person just because the border card said so. //Trolling, just for the fun of it. I have a lot of unearned karma....
  • Wonderful. (Score:5, Insightful)

    by FriendlyPrimate (461389) on Wednesday January 02 2008, @07:03PM (#21888918)
    Oh wonderful. Now when I'm overseas, the terrorists can identify me as an American in a crowd from 20 feet away.
    • by Anonymous Coward on Wednesday January 02 2008, @07:17PM (#21889066)
      you dont need rfid to identify American Tourists abroad, they are pretty obvious anyway.
      • Re:Wonderful. (Score:5, Informative)

        by Jah-Wren Ryel (80510) on Wednesday January 02 2008, @08:05PM (#21889562)

        RTFA. This is a device that you get in addition to your passport. You probably leave the device in your car, and it comes with a metallic sleeve so you can shield it when you're not crossing borders. You do not take it with you when you go traveling on a plane.
        Your point is moot. All US passports issued in the last year or so already have RFID's embedded in them. So it amounts to the same thing.

        Furthermore, these new passports have a half-assed faraday cage built into the cover, but like so much of government it really is half-assed. All it takes is for the cover to be open by less than a centimeter, as might easily happen in lady's purse, and the RFID is no longer protected against unwanted access/detection.
        • by ChePibe (882378) on Thursday January 03 2008, @03:05AM (#21892034)
          I worked for a summer as an intern at a U.S. Embassy, so when it comes to your plan to run to the embassy if you're in trouble, consider the following:

          1. If the trouble is criminal in nature, and you're accused of the crime, the embassy will probably just hand you over to local police. True, you can receive visits from your consular officer after you've been put in jail, but that's after the fact. Everything you've seen in Hollywood on this subject is 100% incorrect. An American Citizen Services officer I spoke with jokingly told me that his job consisted of calling parents and telling them, "yes, I know Johnny's a good boy, but he did something really stupid here, and now he's in jail. No, we can't actually do anything for him other than visit him. Sorry."

          2. The consulate is used to dealing with American citizens without passports - it replaces lost/stolen ones all the time. A photocopy won't hurt you at all in that respect - just tell them your passport is lost, but present a photocopy. They may want to know more personal information, and you'll have to pay a fee, but you'll be fine.

          3. If you believe the embassy will provide you great protection, think again. It's not like the movies - there is no company of Marines there to defend all the Americans in the gates. An embassy generally depends on local police for security and its small (quite small) contingent of Marine Security Guards (MSGs) for the last line of defense. Even then, their primary concern is the classified material. That said, there is nothing in this world like walking into your office and seeing a big MSG at the door. You know that, as an employee of the US Government, it'll take something approaching an army to get past that man so long as he's got breath in him and Rules of Engagement that allow him to fight. I've never been in the military, but God bless the USMC. That said, as a mere citizen, I wouldn't depend on the embassy to provide you any great protection and, if it comes down to that, do keep in mind that the embassy will likely be a big target for angry mobs.

          Personally, I would recommend waiting out any big disturbance and, if things appear to only be getting worse, getting to the airport ASAP with your passport - and you'll have a much better chance of not getting your passport stolen if it was in a safe in a location you can access when everything hit the fan. And trust me, huge riots can pop up at any time, without much warning. I was in Argentina in December in 2001... what a month. I felt good knowing that my passport was in a safe, across town in a quiet part of the city, in a locked building, behind a gate, with a security guard, rather than on my person in the middle of a riot.

          4. As far as hotels, at least in some European countries, it's my understanding that registering your location is a basic part of life. I believe that in Italy (could be totally off) that people are required to register (in theory) with the local police. Hotels register their clients with the police as well (I think... once again, don't take this as hard and fast truth). Your documents are generally held for this purpose. But, as this isn't too big a deal, most hotels don't push you on it.

          Long story short, I'd think twice about keeping a passport on me 24/7 if I don't absolutely need to do so (as in the Russia example cited above).
  • by Yath (6378) on Wednesday January 02 2008, @07:16PM (#21889036) Journal
    What nonsense. If they could be "verified" by machine, they wouldn't need to stand in line in the first place. Travelers stand in line for physical inspection and crowd control, and the card can't help with that process. Unless it can count the books of matches in my backpack and measure my lithium battery, all it will do is save a few seconds of pulling out my wallet. Sounds neat, I guess.
  • by moxley (895517) on Wednesday January 02 2008, @07:26PM (#21889160)
    Thank the American God that they solved this problem, because those piece of shit regular passports barely fucking worked and were an accident waiting to happen..(and a fire danger)....

    Seriously...with all their "paperness" and "non-electronicky" and all that.

    Someone call Apple!

  • by RodgerDodger (575834) on Wednesday January 02 2008, @08:11PM (#21889612)
    From the FA in question:

    The $45 card will be optional and cannot be used for air travel. Travelers can opt for a more secure, if more costly, e-passport that costs $97 and contains a radio frequency chip that can only be read at a distance of three inches. Privacy and security experts said the new passport cards that transmit information over longer distances are much less secure.


    Also in the FA it is stated that all that is contained is the passport number - presumably the rest of the details get looked up.

    So, here we have a card that:
    a) costs still more money.
    b) can't be used at airports (just land and sea border crossings)
    c) can't identify you to random strangers - they'll need access to the US passport database.

    So the point of this is that when you're driving across the border from Canada, they've verified your passport details while you wait in the queue, then all they do is take a look at you and send you through to customs.

    Of course, this same thing could be done by having a second checkpoint to do the Q&A stuff.

    Now, can we please take all the comments about lines at the airport out of the discussion?