South Africa’s fraud-resistant smart IDs are being forged

[Bad Ballie]

I suspect this is the idea.

It goes a lot deeper, but yes, the basic idea is a biometric and information storage system that allows contactless remote authentication is specifically mentioned in the government framework.

 

[Robocop]

The whole point of the smart card is that they contain a biometric chip. You can fake them all you want but you cannot fake the biometric data that they are supposed to contain.

There are a lot of tools that can write to these chips. Fingerprint you can skim of your phone. And taking a selfie pic is not to difficult either.

 

[deweyzeph]

There are a lot of tools that can write to these chips. Fingerprint you can skim of your phone. And taking a selfie pic is not to difficult either.

The data is signed with a cryptographic key. Without that key whatever data you upload is completely useless.

 

[Grindz]

What about looking up the number online and see if it is on the national database? The same is true for driving licenses.

 

[Progenix Oj101]

Laughs in Green-ID-Book-With-My-16-Year-Old-Pimply-Face-And-Middle-Hair-Parting

Same, but my hair was on my shoulders. I've been asked once or twice whether I'm using my sister's ID.

 

[Justanotherguybythesea]

The whole point of the smart card is that they contain a biometric chip. You can fake them all you want but you cannot fake the biometric data that they are supposed to contain.

When have you seen anybody other than HA actually reading that data.

 

[Justanotherguybythesea]

The data is signed with a cryptographic key. Without that key whatever data you upload is completely useless.

right, the key that is in every HA office, on computers that have been stolen, and likely published on a government website as well so people can verify the cards electronically. Probably already compromised in one or more of the numerous breaches that have hit government IT services as well.