george Posted March 18, 2004 Share Posted March 18, 2004 Can you hack it? BANGKOK: The information and communications technology (ICT) minister plans to test security by challenging hackers to break into the systems for the upcoming smart identity cards. Surapong Suebwoglee said yesterday that he would ask the National Electronics and Computer Technology Centre to find hackers to break into the card management system (CMS) and key management system (KMS) on March 26. CMS and KMS are the core infrastructures for tracking the use of smart cards by the Bureau of Administration Registration (Bora). Surapong said that the hacking test would be done at the Local Administration Department’s HQ. The ICT Ministry will start issuing 10,000 cards to senior officials and high-ranking executives of private firms next month. Bora officials have confirmed that the bureau is ready to issue 12 million cards in the first stage and cards for the entire 63 million population by 2006. The ministry has already allowed private companies to submit intentions to join the bid to supply 12 million smart cards, but there are only two participating consortiums – SSI-OCL and Chanvanich-Exsolto. Surapong said that the bidding would be conducted through an electronic auction, which allows all bidders to view the quotes of their rivals. The auction will be held on March 22 at the ICT Ministry. --The Nation 2004-03-18 Link to comment Share on other sites More sharing options...
Zendesigner Posted March 18, 2004 Share Posted March 18, 2004 Most systems of thailand corporations , including banks and multinationals don't need to be hacked into.... You just need to access them.... Security in IT is a pretty far goal to reach here. If i would be them i wouldn't cry Wolf to much. Besides What is this smartcard supposed to do ? Open doors? give internet acces in internet shops ? A new ATM card, Personal Id for governement workers ?? Link to comment Share on other sites More sharing options...
ASIC Posted March 18, 2004 Share Posted March 18, 2004 Nobody bothers crack that card. Where's the reward? If the reward was free porn channels on UBC, it would get hacked in a matter of days. I mean, do these hackers care about a health insurance card from some technological backwater? Besides, who would crack it now? It would be much more fun AFTER it has been released and used widely. ASIC Link to comment Share on other sites More sharing options...
sting01 Posted March 19, 2004 Share Posted March 19, 2004 who will be moron enought to do the hack and then say to the whole world he did it ... lol ... Do you need to be jailed? Maybe better to install silently a backdoor, and wait and see how to use it later? Maybe also the security is too weak to be a real challenge, or for some script kiddies only. Link to comment Share on other sites More sharing options...
Guest chingy Posted March 19, 2004 Share Posted March 19, 2004 Most systems of thailand corporations , including banks and multinationals don't need to be hacked into....You just need to access them.... No need to hack bank, once in a while a truck drive my your house and drop a bag of money worth around 10mil baht, like the other dude on the other post who pick up a bag of money Link to comment Share on other sites More sharing options...
francois Posted March 19, 2004 Share Posted March 19, 2004 hi' on 26th march if the server is down how can they play within seconds, get the IP .... and send a DDOS, you know ... just a ping 65550 ... just to see how many days they need to find out might be that they can collect a big amount of informations about these hackers who are supposed to come ... do you really think that guys and girls behind screens would come to share their knowledge with government lamerz, and put their "freedom" at risk? there is a BIG DUDE here ... Thai government francois Link to comment Share on other sites More sharing options...
grayhat Posted March 20, 2004 Share Posted March 20, 2004 This is a new ID system using Java-based chip cards, which will support 32Kb of memory for data storage. The card will include the user's digitized fingerprints for biometric identification and will carry insurance, tax and welfare benefit information. Zendesigner, the Thai government's plan is to use this as a central database. First, 10 essential agencies will connect to the central system including those for driving licenses, passports, trading registration and land title deeds. Eventually, this will be a central database registration system covering 572 registration offices and serving both public and private organizations. To provide the service to the public, the system will use an email address and a certificate authority (CA). The general public and businesses will be able to apply for electronic signatures for the CA service free of charge from the BORA. However, they need to have a pin code by applying at khonthai.com Link to comment Share on other sites More sharing options...
sting01 Posted March 20, 2004 Share Posted March 20, 2004 Dear Grayhat, recently you given to us a link to the DEFCON 12. Does the inherent errors of scripting on this website are normal? or is it another joke from FBI (as jail innocent russian progammer during the lastest DEFCON). Also, why my firewall don't stopped to ask me to allow access to some weird programs ... lol ... sound like the grays turn blacks . Link to comment Share on other sites More sharing options...
Zendesigner Posted March 20, 2004 Share Posted March 20, 2004 This is a new ID system using Java-based chip cards, which will support 32Kb of memory for data storage. The card will include the user's digitized fingerprints for biometric identification and will carry insurance, tax and welfare benefit information.Ah , we have something similar in belgium also called a sis card. From all the benefits the public were supposed to get the only thing that's left is that Big brother governement can see everything in one go. all the rest is no use to anyone.First, 10 essential agencies will connect to the central system including those for driving licenses, passports, trading registration and land title deeds. Eventually, this will be a central database registration system covering 572 registration offices and serving both public and private organizations. Aaai , and they are going to give each thai a card ?? Wonder how many title deeds will suddenly change name into Shinawatra ?? Great for taking out your driver license violations of course :-). wonder why nobody hacked into immigration yet, they also use a webbased intranet to file your overstay's i saw in trat last time. just pasword box protected. I did some war driving around bangkok a few months ago. You wouldn't believe how many open wireless connections you find from big corporations and banks. you could login , hack something or get some info and drive away in 5 minutes out on the street. Link to comment Share on other sites More sharing options...
parryhandy Posted March 20, 2004 Share Posted March 20, 2004 what was the name of that film staring sandra bullock where someone hacked into a similar system and suddenly she was a wanted criminal overnight.There are some quite frightening abuses that could occur if the info on these cards is taken as a given and there is no other way of coroborating the information that they give. Link to comment Share on other sites More sharing options...
grayhat Posted March 20, 2004 Share Posted March 20, 2004 I did some war driving around bangkok a few months ago. You wouldn't believe how many open wireless connections you find from big corporations and banks. you could login , hack something or get some info and drive away in 5 minutes out on the street. I find war driving in Bangkok makes the traffic tolerable. Spread eagled businesses, clueless... Link to comment Share on other sites More sharing options...
Zendesigner Posted March 20, 2004 Share Posted March 20, 2004 I find war driving in Bangkok makes the traffic tolerable. Spread eagled businesses, clueless... Clueless indeed.... Link to comment Share on other sites More sharing options...
netkoala Posted March 23, 2004 Share Posted March 23, 2004 hmmmm Sandra <deleted> hmmmm Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now