News for hackers. Stuff that matters.

A comment on White House Looks at Replacing Social Security Numbers. Parent comment

Re:White House Looks at Replacing Social Security Numbers by sliverstorm on Tuesday October 03, 2017 @03:17PM (#15395202)
You wouldn't depend on technical know-how, you'd roll it into a card or something like that. Chip & pin cards already do all of this.

And I'm not aware of any system suitable to replace SSN that can withstand rubber hose attacks. That's where law enforcement & the justice department will have to step in, as always.

[ Parent | on HN ]
Re:White House Looks at Replacing Social Security Numbers by random023987 on Tuesday October 03, 2017 @03:24PM (#15395277)
> You wouldn't depend on technical know-how, you'd roll it into a card or something like that. Chip & pin cards already do all of this.

https://arstechnica.com/tech-policy/2015/10/how-a-criminal-r...

[ Parent | on HN ]
Re:White House Looks at Replacing Social Security Numbers by snuxoll on Tuesday October 03, 2017 @07:37PM (#15397140)
This attack doesn’t work with smart cards that basically do nothing but act as a HSM. The MITM attack works with a loophole in some EMV cards because the card isn’t signing a transaction request but just saying “PIN is good!”

If your card holds a private key and won’t sign anything without also being fed a correct PIN you’d need a proper exploit of the application on the card to defeat it.

[ Parent | on HN ]