A new Venezuelan ID, created with China's ZTE, tracks citizen behavior

Re:A new Venezuelan ID, created with China's ZTE, tracks cit... by DoctorOetker on Wednesday November 14, 2018 @02:28PM (#18453036)

Pretty sure Belgian eID's are also by Gemalto, which prompts a bunch of questions:

1) are the private keys in Belgian eID's also similarily not randomly generated on-chip, and in whose hands does this happen?

2) if we face the same issue as Estonia, why is no one in Belgium discussing this?

3) if Belgium is not affected, why is Gemalto having 2 systems? doesn't it seem more efficient to use the same private key generation mechanism for both customer nations? why would Gemalto go out of its way to have separate codebases etc regarding "on chip" private key generation? this all seems to suggest that Belgium too is similarily affected

[ Parent | on HN ]

Re:A new Venezuelan ID, created with China's ZTE, tracks cit... by pcardoso on Wednesday November 14, 2018 @05:16PM (#18454642)

The Portuguese ID is also similar to Estonia, when it was introduced here in Portugal there was considerable talk about being able to interop with Estonia.

Nothing about this flaw in the local news afaik.

[ Parent | on HN ]

Re:A new Venezuelan ID, created with China's ZTE, tracks cit... by DoctorOetker on Thursday November 15, 2018 @12:58AM (#18457214)

I would like to reply to the dead comment:

These eIDs are replaced every few years, so it still matters to a lot of people.

How do we expect "deviants" to improve if we don't even allow feedback towards the "deviant" ?

[ Parent | on HN ]