"Privacy Baseline" For European EID Cards 24
giles hogben writes "This paper from the European Network and Information Security Agency looks at the roll-out of privacy features in electronic identity card technology (PDF) over Europe. It includes numerous tables for easy comparison but doesn't make too much comment on the relative privacy-merits of different cards. Readers can draw their own conclusions though ..."
Hey guys! (Score:3, Insightful)
Re: (Score:2)
Re: (Score:2)
At home, eating dinner. :) Or watching tv.
Or ... reading FTA. Ok, ok, only kidding!
Re: (Score:3, Interesting)
Ok, so I haven't exactly read all 24 pages, but I've given them a good skim and studied some of the notes.
It seems to me to be a good primer, but I don't for a second think that anyone who matters will pay it deserved consideration. (Such is my trust in and opinion of politicians.)
Anyway, Denmark, as I well knew already, is not really on the list except as part of the EU. But even so, we do have a central ID register that's represented in the form of a plastic card (no chip, only magstripe and barcode) with
Re: (Score:1)
Here ... ... it is 6PM (GMT) where do you think normal people are ... traveling home maybe ...
Now
Just let me finish reading and maybe i will rant
Re: (Score:2)
But many have noticed that all the designs for stricter and more comprehensive electronic ID schemes are coming from the US government.
For many years Europeans and Americans could go and visit each other without many barriers but especially after 9/11 the demands on Europeans travelling to the US have dramatically increased.
Had it been up to Europe we'd still use the old and trusted paper passports.
Personally I'm qui
Re: (Score:1, Insightful)
Personally I'm quite disgusted about this 'bend over' attitude of our politicians but hey, they get more power while blaming the other! (USA)
Aye. Well, in theory, EU is supposed to exist mainly for stopping that kind of stuff.
When USA said "We now demand this. Begin supplying us loads of private info about anyone flying here or you will no longer fly here", EU could have gotten together, smiled and said "Okay. We won't. Say goodbye to all your income and jobs from tourism. And it will work both ways. You won't be getting holidays in Paris, Berlin, Amsterdam, etc. any more. It will hurt both of us a lot. So what about we don't force that to happe
ENISA (Score:3, Interesting)
What you have to understand that ENISA is a completely useless EU agency [enisa.org] residing in Greece. It was installed by the lobby, and is back mostly by BSA members as Symantec, Microsoft,...
This year the Commission attempted to rewind it by merging its competences into a new regulatory institution for the Telecom sector. However the Telecom package debate lead to the rejection of the regulatory authority and thus to the survival to ENISA.
In other words, this institutione is owned by the industry lobby. It is just an advisory institution and its guidance is bullshit so far. It has no competence to propose laws or anything.
The studies carried out so far are of low quality and target imaginary audiences. For them Enisa experts have trivial recommendations. And Enisa openly says it lacks expertise and asks the vendor lobby for input. Enisa is a placebo institution for IT security. Anything that comes out of the body is suspicious.
Re: (Score:2)
Re: (Score:2)
McGann is the lobbyist of EICTA. You don't expect members of the administration to work for a lobby organisation. The question is who defines what they do. And here ENISA does mostly awareness raising efforts for imaginative audiences.
http://www.enisa.europa.eu/pages/05_01.htm [europa.eu]
The point is not what ENISA is but what it is not! Ask European IT security experts what they think about ENISA and their consultant puppets.
Re: (Score:2)
Re: (Score:2)
You don't know Enisa. But I do know for whom Ebert works for.
Re: (Score:2)
tl;dr (Score:2)
Unfortunately privacy just isn't an important political issue.
Privacy? (Score:2)
Dear citizen of the EUSSR,
Here is the privacy you can expect from an ID card:
NONE!
Thank you for your tax money to aid the state oppression of Europe's citizens. We knew you'd never consent to having ID cards, that's why we sneaked in ID laws under disguise of other laws (see UK as an example of how state oppression is pushed through).
Have a nice day.
Want to know how to make a card private? (Score:2)
OK, this is rough thought, but this is one way off the top of my head to make privacy as integral as part of the structure as security.
First of all, start with your average smart card, have your user private key on it and a PIN. The key stored can be revoked by whatever the EU's CA is and reissued.
Now, start adding certificated by whatever certifying agencies. For example, a county adds a certificate that this user is born in their county. A university adds a certificate that the user got a B. S. in chai