Roosh
Innovative Casanova
      
Posts: 19,382
Joined: Aug 2008
Reputation: 413
|
Estonian citizen e-card possibly hacked, exposing all citizens
Estonian was the first country to try the idea of forcing all citizens to adopt a national id card to receive basic services. That card had a vulnerability, predictably, and the government is doing damage control. They say no hacking took place, but there are calls to postpone future elections.
Quote:An international team of researchers informed the Estonian authorities of a vulnerability potentially affecting digital use of Estonian ID cards issued since October 2014. All the cards issued to e-residents are also affected.
On 30 August, an international team of researchers informed the Estonian Information System Authority (RIA) of a vulnerability potentially affecting digital use of Estonian ID cards. The possible vulnerability affects a total of almost 750,000 ID cards issued starting from October 2014, including cards issued to e-residents. The ID cards issued before 16 October 2014 use a different chip and are not affected. Mobile-ID-s are also not impacted.
Estonian authorities confirmed the findings on 5 September. Taimar Peterkop, RIA’s director, said in a statement that while Estonian experts continue to verify the claims of the researchers, they agree with the external assessment and there is indeed possible security vulnerability. “We have developed the primary solutions to mitigate the risk, and will do our utmost to ensure that the security of the ID-card,” Peterkop said.
Prime minister: Estonian e-state will not be affected
According to Peterkop, the current data shows this risk to be theoretical and there is no evidence of anyone’s digital identity being misused. “All ID-card operations are still valid and we will take appropriate actions to secure the functioning of our national digital-ID infrastructure. For example, we have restricted the access to Estonian ID-card public key database to prevent illegal use.”
“The Estonian digital society relies on innovative technologies. Those new technologies provide good value and services to the public, but may also impose risks. We focus on detecting and mitigating those. This particular case is a good example of how scientific research can pinpoint issues to be solved,” Peterkop added.
In the light of current events, some Estonian politicians called to postpone the upcoming local elections, due to take place on 16 October. In Estonia, approximately 35% of the voters use digital identity to vote online.
https://unvis.it/estonianworld.com/techn...n-id-cards
Roosh
http://www.rooshv.com
|
|
| 09-05-2017 09:08 AM |
|
The following 3 users Like Roosh's post:3 users Like Roosh's post
Going strong, Paracelsus, MMX2010
|
Roosh
Innovative Casanova
      
Posts: 19,382
Joined: Aug 2008
Reputation: 413
|
RE: Estonian citizen e-card possibly hacked, exposing all citizens
(09-05-2017 09:37 AM)Mercenary Wrote: Does the ID card in Estonia contain fingerprints as well ?
Only seems to contain a unique digital fingerprint:
Quote:The Estonian identity card (Estonian: ID-kaart) is a mandatory identity document for citizens of Estonia. In addition to regular identification of a person, an ID-card can also be used for establishing one's identity in electronic environment and for giving one's digital signature. Within the European Union and EFTA (Iceland, Norway, Switzerland and Liechtenstein) and other countries and territories (Albania, Andorra, Bosnia and Herzegovina, Georgia, Kosovo,[1] Macedonia, Monaco, Montenegro, Northern Cyprus,[2] San Marino, Serbia, Vatican City), the Estonian ID Card can be used by the citizens of Estonia as a travel document.
The mandatory identity document of a citizen of the European Union is also an identity card, also known as an ID card. The Estonian ID Card can be used to cross the Estonian border, however Estonian authorities cannot guarantee that other EU member states will accept the card as a travel document.[3]
In addition to regular identification of a person, an ID-card can also be used for establishing one's identity in electronic environment and for giving one's digital signature. With the Estonian ID-card the citizen will receive personal @eesti.ee e-mail address, which is used by the state to send important information. In order to use the @eesti.ee e-mail address, the citizen have to forward it to his personal e-mail address using the State Portal eesti.ee.
https://en.wikipedia.org/wiki/Estonian_ID_card
Roosh
http://www.rooshv.com
|
|
| 09-05-2017 10:06 AM |
|
|