‹ BackHN Continuity

Thread

Keys Not Included: recovering the signing keys for US driver's license barcodes

289 points · 152 comments · Ryan5453

  1. KingMachiavelli · · focus · HN ↗
    All of this is nearly pointless unless the photo itself is in the barcode and also signed. You only need a leak of a few hundred real IDs to cover all of the identifiable characteristics (hair, eye, skin color, approx height and weight). Leak a few hundred thousand a year and now you can’t even flag leaked IDs without some false positives.

    A fake photo plus a valid barcode will pass any current check right? Unless you still do a secondary proprietary photo lookup that I don’t think exists.

    1. kccqzy · · focus · HN ↗
      I wonder if we might have the equivalent of Certificate Revocation List for IDs leaked this way.
Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.