News for hackers. Stuff that matters.

A comment on The Equifax Hack Didn't Have to Be This Bad.

Re:The Equifax Hack Didn't Have to Be This Bad by avid-infovore on Friday September 08, 2017 @03:22PM (#15203219)
The Republic of Estonia uses such a system to identify members of its e-Residency program, even with no physical presence. Each e-resident has a public numerical key that serves as a unique identifier, and a corresponding private key that is never revealed.

So an example to emulate then!

Except: Estonia suffered an embarrassing blow to its much-vaunted ID cards that underpin everything from electronic voting to online banking [...] a security risk that affects almost 750,000 ID cards and that would enable a hacker to steal a person’s identity.

https://www.ft.com/content/874359dc-925b-11e7-a9e6-11d2f0ebb...

[ Parent | on HN ]
Re:The Equifax Hack Didn't Have to Be This Bad by gbarc888 on Friday September 08, 2017 @04:28PM (#15203674)
The article only says they found a "security risk". I wonder what that is, and how it would allow identity theft if they are actually using public/private keys. Did Estonia secretly backdoor their encryption?
[ Parent | on HN ]
Re:The Equifax Hack Didn't Have to Be This Bad by unpwn on Friday September 08, 2017 @03:31PM (#15203292)
Is there a link to this that's not behind a paywall. Very interested in understanding the flaws of such a system, as a 2 key system seems like the most viable and secure way to establish identity.
[ Parent | on HN ]
Re:The Equifax Hack Didn't Have to Be This Bad by taesis on Friday September 08, 2017 @03:54PM (#15203447)
Google's cache of the page [1] seems to work.

[1]: https://webcache.googleusercontent.com/search?q=cache:wP7nTG...

[ Parent | on HN ]
Re:The Equifax Hack Didn't Have to Be This Bad by avid-infovore on Friday September 08, 2017 @03:55PM (#15203449)
Non-paywalled link: http://estonianworld.com/technology/possible-security-risk-a...
[ Parent | on HN ]
Re:The Equifax Hack Didn't Have to Be This Bad by mwg986 on Friday September 08, 2017 @04:50PM (#15203835)
If you search google using the url for the article and then follow the search link you can get behind the paywall. Here's a link to the google search result - https://www.google.com/search?q=https%3A%2F%2Fwww.ft.com%2Fc...
[ Parent | on HN ]