Live data from Hacker News

Virtual passport app presents real data risk, experts warn

cbc.ca

21–30 of 100 posts

Re: Virtual passport app presents real data risk, experts warn

#22
post #11

In Ukraine, there is a DIYA (Дія) app developed by the government, which holds electronic national passport, passport for traveling abroad, driving license, car registration documents (including car insurance information), child birth certificate (in parents app) and tax payer information. The app generates temporarily barcodes which can be scanned by another DIYA app to verify somebody's identity or presented docume…

That sounds super convenient. Wish we would have something similar in the EU. Edi: yes, I know Ukraine is in Europe, I meant EU

Did you mean EU? Ukraine is on the European continent.

Re: Virtual passport app presents real data risk, experts warn

#23

> IBM Canada has won $1.5M contract to develop new platform for IRCC This will buy what? A team of 4 interns and new grads for 6 months. At the end they'll have a slide deck with too much wordart in ith containing some half-baked ideas, and a few lines of code that don't do anything useful at all and are further from production readiness than starting from scratch.

then they'll spin off the division, add it to a SPAC and go public as another $1bn unicorn.

Re: Virtual passport app presents real data risk, experts warn

#24
post #11

In Ukraine, there is a DIYA (Дія) app developed by the government, which holds electronic national passport, passport for traveling abroad, driving license, car registration documents (including car insurance information), child birth certificate (in parents app) and tax payer information. The app generates temporarily barcodes which can be scanned by another DIYA app to verify somebody's identity or presented docume…

Denmark has a narrower version of that for driving licences and national ID cards. The rest of the information, the police would have access to anyway.

https://en.digst.dk/news/news-archive/2020/december/denmark-...

Re: Virtual passport app presents real data risk, experts warn

#25

> IBM Canada has won $1.5M contract to develop new platform for IRCC This will buy what? A team of 4 interns and new grads for 6 months. At the end they'll have a slide deck with too much wordart in ith containing some half-baked ideas, and a few lines of code that don't do anything useful at all and are further from production readiness than starting from scratch.

It's probably a frontend project to put up a mobile app or something similar, integrating with an existing backend.

Re: Virtual passport app presents real data risk, experts warn

#26
post #11

In Ukraine, there is a DIYA (Дія) app developed by the government, which holds electronic national passport, passport for traveling abroad, driving license, car registration documents (including car insurance information), child birth certificate (in parents app) and tax payer information. The app generates temporarily barcodes which can be scanned by another DIYA app to verify somebody's identity or presented docume…

That sounds super convenient. Wish we would have something similar in the EU. Edi: yes, I know Ukraine is in Europe, I meant EU

Germany has this for ID cards and passports, albeit via NFC, it's just not very widely used yet.

I actually thought that this is an European standard as I seem to remember seeing it used in other airports in Europe, but it's been a while since I last went to fly anywhere.

Here's quite a bit of official technical info about it: https://www.bsi.bund.de/EN/Topics/ElectrIDDocuments/German-e...

Re: Virtual passport app presents real data risk, experts warn

#27
post #11

In Ukraine, there is a DIYA (Дія) app developed by the government, which holds electronic national passport, passport for traveling abroad, driving license, car registration documents (including car insurance information), child birth certificate (in parents app) and tax payer information. The app generates temporarily barcodes which can be scanned by another DIYA app to verify somebody's identity or presented docume…

It's so convenient that you could even download similar databases from internet :)

Database of passports and TIN of Ukraine (7 500 000 rows)

https://raidforums.com/Thread-SELLING-Ukraine-Passports-INN-...

Re: Virtual passport app presents real data risk, experts warn

#28

> IBM Canada has won $1.5M contract to develop new platform for IRCC This will buy what? A team of 4 interns and new grads for 6 months. At the end they'll have a slide deck with too much wordart in ith containing some half-baked ideas, and a few lines of code that don't do anything useful at all and are further from production readiness than starting from scratch.

Just outsource it to EE and you'll have team made of 10 very good engineers for 22 months in very simplified version where whole cash goes on salaries.

10 * 6750 USD * 22

Re: Virtual passport app presents real data risk, experts warn

#29
post #8
post #2

In the UK, you can renew your passport online too. I don't really see the risks: they check that your picture matches the old one and you still have to send your old passport for them to issue you the new one..

So what does the app do?

In the UK, you upload a photo from your phone of yourself (that it checks to make sure is valid), you put in your old passport number, and you send your old passport by post to the office. Then in a few days you get your new passport with the photo from your phone.

Re: Virtual passport app presents real data risk, experts warn

#30
post #18

Earlier quoted context omitted.

That sounds super convenient. Wish we would have something similar in the EU. Edi: yes, I know Ukraine is in Europe, I meant EU

Convenient ok, but is it secure? https://globalvoices.org/2021/02/11/security-concerns-and-le...

As a security engineer, nothing civillian-facing is ever 100% secure, it all depends how much resources your attackers have. When modelling your security profile, it's always a matter of "when", not "if" your widget can get hacked.

Most you can do is deter black-hats, but not much you can do against well funded state actors.

Post reply on HN