Video: Electronic Driver’s Licence Cloning for $250

Data from over 200 Pen Tests Shows Most Common Vulnerabilities. Learn more now.

This is the video of Chris Paget’s presentation for Shmoocon V, which was held February 6th – 8th 2009 in Washington DC.

This talk outlines a number of security weaknesses in the RFID system used in the Western Hemisphere Travel Initiative, as implemented in identity documents such as the Passport Card, the Enhanced Drivers License, and various other programs.

PLEASE NOTE: The full Passport (the book) uses a very different RFID technology (actually a contactless smartcard rather than raw RFID); it operates on a different frequency using a different transmission medium and is not compatible with the system I’m discussing here (which is based on vicinity-read EPC Gen2 tags).