By Nick Heath, 29 July 2008 16:00
NEWS
The thousands of UK ePassports stolen on Monday are likely to sell for up to £20m on the black market, say privacy experts.
A van carrying about 3,000 blank ePassports and visas was hijacked on route to RAF Northolt, near London.
Security from A to Z
Click on the links below to find out more...
A is for Antivirus
B is for Botnets
C is for CMA
D is for DDoS
E is for Extradition
F is for Federated identity
G is for Google
H is for Hackers
I is for IM
J is for Jaschan (Sven)
K is for Kids
L is for Love Bug
M is for Microsoft
N is for Neologisms
O is for Orange
P is for Passwords
Q is for Questions
R is for Rootkits
S is for Spyware
T is for Two-factor authentication
U is for USB sticks/devices
V is for Virus variants
W is for Wi-fi
X is for OS X
Y is for You
Z is for Zero-day
While the Home Office claims that "high tech checks" render the blank ePassports useless, privacy experts say they could be used to fool everyday ID checks, for limited travel abroad or be fitted with cloned chips.
Simon Davies, director of Privacy International, said: "It's unlikely that the stolen passports could easily navigate the UK borders but a criminal could use one indefinitely for 'flash and go' purposes. Alternatively the passports could be used for at least a few months for entry to most countries in the world.
"The presence of so many potentially strong false identities would have a very high black market value - perhaps in the range of £20m - and so a criminal enterprise would easily justify making the investment to hack the chip."
Phil Booth, national co-ordinator for anti-ID card and privacy pressure group NO2ID, said: "The really tricky part about faking a passport is getting a hold of convincing blanks. As NO2ID and others have shown, the security of the passport chips - which can easily be cloned - is laughable. The things are designed to spit out your details, which could now be harvested by equipment easily available on the internet and used by criminals to produce thousands of apparently valid passports."
Professor of security engineering at Cambridge University Ross Anderson said: "This all goes to show how unwise it would be to rely on the UK government for all authentication. Businesses are better off using their own systems than putting all their eggs in a basket that's not competently managed."
But an Identity and Passport Service spokesman said: "Our high tech security features mean that these passports are unusable. The police are doing everything in their power to catch the perpetrators."
He said all of the stolen passports have serial numbers that will be placed on a watch list to see when they are used and that ePassport chips are scanned and verified when people enter the UK.
The Foreign Office has launched an urgent inquiry into the theft and Greater Manchester Police has launched a criminal investigation.
Comments
There is 1 comment. Join the discussion
1. Daz Hughes
Unusable ? Don't make me laugh.
We recently just visited France (on legal passports I hasten to add !) and they never swipe passports, just a quick flash and away you go.
And if the thieves manage to remove the offending serial numbers from the chips (or replace the chips completely), then passport officials are much more likely to believe what comes up on their screen rather than bother checking that this electronic serial number matches the one physically printed on the document.
They'll work MOST of the time and for those who do get stopped, its no loss to the passport thieves - they will be long gone with their money.