Slashdot Log In
Homeland Security Director Defends Real ID
Posted by
Zonk
on Thu Dec 14, 2006 06:22 PM
from the fighting-the-fight dept.
from the fighting-the-fight dept.
An anonymous reader writes "Homeland Security chief Michael Chertoff is defending the upcoming rollout of the national ID card as vital for the nation's security. Chertoff reminded reporters of the importance of the initiative after this week's uncovering of an ID-forging ring. The Real ID Act of May 2005 dictates the uses and requirements for the documentation, which by 2008 may be required for everything from travel to banking. Just the same, the HSD has yet to dictate how exactly the cards will work. " From the article: "The Homeland Security chief, who is nearing his two-year mark with the agency, was likely trying to quell rampant skepticism about the IDs voiced by some privacy advocates, immigrants and other groups. Some have said they fear that the IDs are a stepping stone to a veritable police state, complete with ready surveillance of individuals. Some have argued that the idea of creating more tamperproof IDs is only a marginally better way to screen out those intent on committing terrorist acts because ID cards don't even begin to tackle a core crime prevention challenge: determining a person's unspoken intentions. "
Related Stories
[+]
Your Rights Online: More States Rebel Against Real ID Act 295 comments
Spamicles writes with a link to a Lawbean post about more rebellion against the Real ID act. New Hampshire and Oklahoma have joined Montana and Washington state in passing statutes refuting the ID act's guidelines. "However, these actions could eventually lead to drivers licenses issued in these states to not be accepted as official identification when boarding airplanes or accessing federal buildings. In addition to these four states, members of the Idaho legislature intentionally left out money in the budget to comply with the Act."
This discussion has been archived.
No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
Oh no, think about our children! (Score:5, Funny)
Re:Oh no, think about our children! (Score:4, Insightful)
Of all the stupid irrelevant measures to fight terrorism. Forcing everyone to carry ID will just make the existing millions of people in America who are out of the system go further underground. It will make it much easier for the terrorists to hide if they want to stay in America and it will be harder for the FBI to track anyone.
Re:Oh no, think about our children! (Score:5, Insightful)
Actually, terrorists often do carry ID. In fact, in most major terrorist attacks in the West since 9/11, the terrorists have been carrying genuine ID. The 9/11 hijackers used real ID to get on the planes. The Madrid train bombers had official ID. The London transport bombers were not using false ID.
This is why the whole ID card scheme business, both over in the US and here in the UK, is one big sham. In fact, our government has moved the goalposts so often, as each successive "justification" has been debunked, that I can't even remember what useful stuff they do think they'll achieve now.
Re:Oh no, think about our children! (Score:5, Funny)
You see, the new IDs will come with this form when you apply for one. It will have these check-boxes on it:
(select one)
* I intend to commit a terrorist act
* I do not intend to commit a terrorist act, but I will in the future
* I am a criminal
* I am a pedophile
* I believe in personal freedoms
* I am capable of critical though and analysis
* none of the above, therefore I am an honest citizen
If your status ever changes, you will be required to apply for a new card. It's completely fool-proof.
Re: (Score:3, Interesting)
Re:Oh no, think about our children! (Score:4, Interesting)
Unless this Real ID thing is a giant glowing ball that hovers over our heads, this won't help jack shit. Look up how many drivers there are estimated to be on our roads without licenses (or even with revoked licenses). Just like those people, terrorists without a Real ID card are going to go about their daily lives without a single problem.
But we're going to be out how many billions of dollars paying committees and well-connected companies to study the issue, propose designs, assign some kind of identification and issue these cards?
Re:Oh no, think about our children! (Score:5, Insightful)
But then again, maybe you're just someone who forgets things or leaves them at home. Maybe you're a victim of pickpockets. Perhaps you put on the wrong pants.
It's not going to help law enforcement be more efficient if they go around interrogating everybody who forgets or loses their ID card. Actual troublemakers will probably be sure to have ID at all times.
Re: (Score:3, Interesting)
I never did.
Back in the day, when I used to regularly attend student protests, and take part in various other anti-government activities, I made it a point to never carry ID with me.
I
Re: (Score:3, Funny)
But how does that make you a troublemaker? That just makes you a good citizen. I was talking about "blow the whitehouse up" or "mafia crime boss" or "republican party lobbyist" kind of troublemakers.
Re:Oh no, think about our children! (Score:4, Insightful)
Re: (Score:3, Funny)
Re:Oh no, think about our children! (Score:5, Insightful)
There are really three things people are worried about here:
1 - The possibility of fraud inherent in even an ideal ID system.
2 - The possibility of fraud in a real-world system implemented by the US government (i.e., one that will probably be poorly designed).
3 - The negative consequences of an accurate ID system.
There are positives, too. I'll classify them as follows:
1 + Personal benefits of an ideal ID system.
2 + Benefits to companies from an ideal ID system.
3 + National / social benefits.
Before I get into details, what do I mean by an ideal system? One in which you can prove to anyone you wish any of the following information, or some subset thereof: name, age, eligibility to work, driving license, professional certifications, credit "card" account, etc. For instance, you might want to prove to a bar's bouncer that you're of legal age, but not reveal your name, credit card number, or even your exact age. How could this work? As soon as you reach legal age, the government sends you a digitally signed "certificate" that includes your photo and a statement that you can drink. When you go to a bar, you can upload the certificate to the bouncer's PDA or whatever, and he checks to see the picture is you. If it is, you're in. To break this, you'd need to break public key cryptography, which you can probably only do with a quantum computer.
Now, let's get into details.
1 - Fraud in an ideal ID system
Even in an ideal system, the card will only be as good as the information used to create it. While such a system is being adopted, there's a window of opportunity for people to forge old-style IDs, then use them to get a new "official" ID with the forged information. This is commonly done with birth certificates now. This is the main issue.
2 - Fraud in a real-world system
Even compared to other governments, the US seems particularly bad at large-scale IT projects. It's surprising, considering all the IT talent in the country. A system designed by the US government would probably start with bad specs, have a bad design, and be poorly implemented. A disaster, in short. I suspect radical changes in the process might help here. Put NIST in charge of designing open standards, with the NSA consulting. Get Bruce Schneier, the EFF, and others involved. Maybe try something like the AES challenge.
3 - Negative consequences of an ideal system
This is the most insidious of all the negatives. An accurate, effective, ubiquitous ID card will be used for more and more things, and will become a method for tracking and controlling people. We'd need some really good privacy laws to prevent this, as well as a smart design that puts people in charge of their own information and how much they reveal.
1 + Personal benefits
Wouldn't it be great to ditch all those cards in your wallet and just have one thing to carry? I know I'd like that. It would also be great to not have to worry about ID theft (at least, not in an ideal system). Depending on how the backend worked, a unified ID could also mean not having to change your address in a gazillion databases every time you move (for instance, did you know the California DMV driver license database is independent of the California vehicle registration database, and you have to change your address separately in both?) Really, this category boils down to convenience and reduced vulnerability to ID theft, IF the system is well-designed.
2 + Benefits to companies
This one's pretty simple--reduced fraud leads to reduced expenses, for banks, credit card companies, and merchants. It probably also simplifies a lot of transactions, which wo
Straight outta sci-fi (Score:4, Interesting)
mandelbr0t
Re:Straight outta sci-fi (Score:5, Funny)
but then i remembered that for example universal healthcare works pretty much everywhere else, too.
A few questions. (Score:5, Insightful)
Re: (Score:3, Insightful)
Re: (Score:3, Insightful)
Re: (Score:3, Insightful)
* Establish an objective standard that, when VOLUNTARILY satisfied by a state (or for that matter, Canadian province) with regard to its IDs, would per
Well, it can make a difference to a limited extent (Score:4, Insightful)
If there's a single, universal ID then the forgeries need to be much better. If you only need to learn about one ID, you can learn all the features on it and become quite familiar with it. Likewise any machine that checks it can be tailored to check all the security features to a high degree. This raises the bar a ton as now you have to produce essentially perfect forgeries and there aren't a lot of forgers that can do that.
Now please don't mistake this for an endorsement of the national ID concept, however it is a legit point. I can tell you to a very high degree of accuracy if an Arizona ID is real or not, at least if it's one of the newer ones, since I've looked at them quite carefully and gotten a list of the things to look for. However you give me a California ID and basically all I can do is look for stupid mistakes. I've no idea how it ought to actually look.
Re:Well, it can make a difference to a limited ext (Score:4, Insightful)
On the other hand, most forgeries are bad precisely because there are so many types of IDs. Therefore, forgers must use fake base materials. All this will do is provide a single set of legitimate base materials that can be stolen anywhere and will be considered "trusted" everywhere. So now, instead of faking the materials in a local forgery ring, they'll buy the legitimate raw materials on the black market from someone who stole them in another state. Once that shift in operation occurs, all fake IDs will be almost indistinguishable from the real thing, making things worse than they are now, not better.
Re:Well, it can make a difference to a limited ext (Score:4, Insightful)
Re: (Score:3, Insightful)
Re:A few questions. (Score:5, Insightful)
All of the 9-11 hijackers had valid ID.
If necessary, read that again and let it sink in.
I can't tell you what problem a national ID card solves, but I can tell you for sure what problem it doesn't solve.
Re:A few questions. (Score:5, Insightful)
Oooh! I know! I know!
The problem is that right now it's just too darn hard to dig up information on the person whose ID you are checking. Under The Real ID Act, though, the state ID authority (usually the DMV) will be required not only to examine your birth certificate and social security card, but also to scan and create digital copies of them in their system, as well as collecting further information on their forms. This makes the database so created a convenient one stop shopping point for identity theft^Wverification.
Citizens, rest assured that the millions of checkpoints in airports, police cars, banks, and doctor's offices will all keep this information secure, protecting you from Evil and ensuring your continued Freedom. You do want to be Free, don't you? Just hand over the document, and you'll be Free to pass this checkpoint...
So here's another shoe to drop. (Score:3, Informative)
Re:A few questions. (Score:4, Insightful)
Hell right now we could get most of that with your SSN, a picture of you, and a thumbprint stored centrally that had to be verified against.
The problem is not the id card. The problem is that soon after it comes in, it will be used for a lot of uses we never thought of. Ministers will be provably caught with gay or straight hookers, We'll know Ms Straight and Narrow down the corner buys leather whips and cuffs, We'll know john has a drug problem and that suzy buys a lot of booze.
As long as we have cash or some way to anonymize our credit (Xrost, etc) it's not such a big issue.
But they will be able to track where you are/go/etc.
HOWEVER
Weighed against that is the fact that we will never be able to secure our borders unless we have a national ID. And the risks of having non-citizens here are growing. When the likelyhood strangers will kill a couple million of us grows high enough-- we'll either give up the kinky sex or just say "to hell with it- I like kinky sex".
As MOST of us give up our secret's we will either become a straightlaced nation of prudes or we will become fairly jaded. But at least the illusions and lies will be reduced.
What if... (Score:3, Interesting)
Re:What if... (Score:4, Insightful)
Who cares? (Score:4, Insightful)
It doesn't matter. Suicide terrorists couldn't care less about people knowing their real identities, it isn't as if they would have to repeat their crimes and worry about being recognized the second time...
Unspoken intentions (Score:3, Interesting)
I feel safer already.
Re:Unspoken intentions (Score:4, Insightful)
The older I get, the better this sounds... (Score:2)
Now that I'm older and I've been damaged by identity theft ($1k and counting, not to mention the credit damage and IRS audit)
I can't wait.
How would "Real ID" stop fraud? (Score:4, Insightful)
How would "Real ID" stop "identity theft"? Particularly since "identity theft" is basically fraud.
If anything, it will make it more difficult to "prove" that you did not apply for those loans, run up those credit cards, etc.
Nothing will stop fraud until the banks start having to pay for it instead of dumping the expense on their clients.
And the more a single piece of ID is accepted as "proof" of identity, the more valuable it becomes and the more people will try to forge it. Or just get a job in the office issuing them.
Quotes (Score:2, Funny)
"With RealID, we can easily track down minorities and poor people."
"You know when someone shows you a RealID, its real. I mean, its in the name."
"To stop people from making fake RealIDs, we called it 'RealID'."
Re: RealID Quotes (Score:2, Funny)
asdf2349qu0sadifjafsld@3290### buffering...
Where do they think they get this power from? (Score:4, Interesting)
The powers not delegated to the United States by the Constitution, nor prohibited by it to the states, are reserved to the states respectively, or to the people.
Where does the federal government claim to derive the power to mandate federal IDs? Are they using the interstate commerce clause yet again? There's one part of the Constitution that has been seriously misused time and time again and is in dire need of fixing.
Re: (Score:2)
Government: Um, yeah. Commerce clause. Why not.
Re:Where do they think they get this power from? (Score:4, Insightful)
When one considers that the new REAL ID cards will probably have RFID chips embedded in them how long do you suppose it will be before the thousands of police surveillance cameras, that now keep tabs on a lot of our public spaces, will be equipped with RFID scanners so that a record can be kept of exactly who is within the camera's view at any given time. Welcome to the Soviet Union of America, where the government's police powers rampage unchecked and the citizenry have voluntarily surrendered their liberty - making that horrible trade-off of liberty for "security". Somehow or other this move must be stopped or we will run the very real risk of this ID turning into an internal passport - which it will be in some sense right out of the gate when one considers that it will be required in order to travel via airline to anywhere.
The idea that privacy will be better protected by the implementation of REAL ID is laughable. Not only will RFID chips make it easy for police to track the whereabouts of everyone, but you can bet that the same people who developed the technology to clone cell-phones won't be long in developing technology to allow criminals to read the REAL ID chips themselves. Then, the whole world will open up to them as no one will question my assertion that I'm you when I present them with a forged REAL ID card that has the stolen info on its own RFID chip. This whole scheme is nothing but a way to stick yet another part of the camel of unfettered State police powers into the the tent of people's private lives.
Since our Congresscritters are showing their usual lack of concern about the continual erosion of our civil liberties I think it's time we rubbed their noses in our concern. Let's put together a March on Washington for next July 4. I urge everyone reading this to go to Washington and just show up on the Mall come next 4th of July. We'll turn Washington into a "free speech zone" and tell our government that we're tired of the continual and expanding use of the police powers of the State to interfere with and monitor the affairs of normal American citizens. It's time that we show President Bush and the rest of the anti-civil liberties crowd that at least some of us take this threat seriously and we won't take it lying down. Marches and peaceful civil disobedience worked in the 60s and they can work again if people can be made to understand the fact that their own government is a far greater threat to their safety than any number of terrorists. I'd rather take my chances as a free man, thank you.
Just my $.02,
Ron
Re:Where do they think they get this power from? (Score:5, Insightful)
Which is a tactic that is abused even more than the interstate commerce clause. They take our money as federal tax and then ransom it back to us to make us do things we don't want to do.
Where they get this power from (Score:5, Insightful)
Imagine that you are a US Senator, elected to that position by the legislature of your state. A bill is proposed that will demand that the same legislature enact a certain law, and the state executive branch enforce it to the satisfaction of some national executive agency, or have funds withheld. Now imagine you want to be re-elected by that legislature. How do you think you're going to vote?
The result of these changes is that more and more decisions are being made in the US Congress and by the faceless mass of bureaucrats in national agencies, rather than in state capitals, county courthouses, and city halls. The concentration of power favors well-funded lobbyists who represent powerful interests, for whom the return on their investment can be huge; against diffuse interests of common citizens.
Instead of 50 different 'distros' of government, with the chance to learn from each other and merge improvements that succeeded elsewhere, we get stuck with a single implementation. Any flaws in that monoculture are global and potentially catastrophic.
National ID:Security::DRM:Data (Score:5, Insightful)
DRM for your data and national ID systems for your security. It's like a broken record. Making it harder to forge IDs will do... what exactly? The number of illegal immigrants who use no ID whatsoever should be our first clue.
This is yet another example of politicians who need to Do Something(TM). It's not really about protecting anyone or making the world a better place. It's about being able to say "we're hard at work here in DC, curtailing your civil liberties and ignoring the 10th amendment to the best of our abilities." It's about being able to say, next time something bad happens, "Well, we did something to prevent it, guess we need to do even more..."
When did government change from something that protects our freedoms from invaders and criminal elements into something that curtails our freedoms? I'm pretty sure it hasn't always been this way, though perhaps it is a predictable enough historic trend.
And this does... what? (Score:5, Insightful)
But, if people enter the US from other countries, they'll be using their passports for ID, not this thing, so... um... what was the point again?
Ah, but if they made everyone, even people visiting from other countries, get one of these, then it's much more secure than showing the passport. And how would they get one? They'd need some other ID first... like, for instance, a passport...
So, what possible good can this do? Well, I guess it'll make it harder for underage kids to buy beer. Other than that? Nothing, really...
ID cards are common... (Score:3, Insightful)
SSN (Score:5, Insightful)
So, shit, even though I don't want there to be a national ID card, the one coming soon is sure to be better than the one we have now.
I just really hope my new Social Conformity Number is 54601.
Nothing to do with terrorism (Score:3, Insightful)
I live in the Phoenix area. Read the article about how you can get a fake SSN + drivers license + immigrant ID for $160 on the street corner in Phoenix.
Today, it is barely possible to verify the "credentials" of a prospective employee. DHS rules (as stated on the I-9 employment documentation form) says employers are not supposed to attempt to verify the validity of documents presented. So, if someone comes along with a driver's license drawn in crayon we are supposed to accept this.
One quick step to ending illegal immigration and "undocumented" workers is to make employer's liable for hiring people that aren't supposed to be here. A year in jail would go a long way towards ending it and there would be a mass exodus southward. The problem right now is there is no central authority for validating documents. There isn't even a consistent method on a state-by-state basis. If someone shows you an Illinois driver's license in Arizona as far as I know there is no way whatsoever to know if it is real, faked or "borrowed".
This also has an effect on just about everything else that today requires some kind of identification. If I go into a bank they want a local driver's license. One from another state isn't good enough. Why? Because they have no idea how to validate out-of-state identification.
This has nothing whatsoever to do with "terrorists" since many of them are state-sponsored and have access to whatever resources are required to defeat this kind of thing. However, we can all be concerned, if not terrified that today it is easier and cheaper to hire an undocumented worker than a citizen - because the citizen wants a fair wage and benefits. The undocumented worker wants nothing except more money than he was getting at home - which is an incredibly low bar to meet.
"realID" !! you know it's real, it's in the name! (Score:5, Insightful)
First lets talk about passwords. One thing I run into that people who set corporate policies for passwords often do not understand is that the password strength is very rarely the weak point in an attack. Quite often the requirements will be sent to something crazy like 20 characters, no repeating characters, enforced alphanumeric, (you all know the usual strong password requirements) and they feel that is it. Oh, but to reset a forgotten password all you need to know is your mother's maiden name or some such. THAT is the weak link, you have effectively made every user's password their mother's maiden name. All of the other password strength requirements are irrelevant.
"How does this relate, finkployd, you arrogant prick?" I hear most of you asking. Simple, how does one get one of these super duper realID cards? I strongly suspect it is by showing OTHER, PRE-EXISTING forms of ID. How else would it work? The problem of how to distribute these cards in such a way that you know they are being generated for and sent to the proper people pales in comparison to actually designing the damn thing in the first place. It will certainly depend in some way on existing forms of ID, meaning it is absolutely no more secure then them.
Of course the government and financial institutions will inevitably consider it to be the absolute last word in authentication, so expect that if your identity is ever stolen via a false realID card, nobody will ever believe you. YOU will be financially (and likely criminally) responsible for anything done if your realID is spoofed. Good luck everyone, we are screwed
Finkployd
The damned thing is coming, one way or another, so (Score:3, Interesting)
What *I* mostly care about is this: Is it going to be as fast and easy as it is to obtain that fucking thing as it is to obtain legitimately a DL in Oregon?
In 2003, I moved there, got my apartment and had utility billing (showing proof of intent to reside there, not mooch or drift), and had my former CA DL (valid, non-expired) and auto insurance and my car smog-checked and in good condition, plus new tires and engine upkeep.
Closing in on the 30-day reside or leave law thing, I studied a few days for the test. I went to DMV by appointment (or, was it a drop-in? Yeh, by appointment since it was late when I first arrived). I sat before a computer. Answered maybe 20 questions. Passed.
Shocker? They told me to sit about 12 minutes and my ID would be ready. I thought I mis-heard the clerk. Huh? What?! 12 minutes? Hell, in California, I'd have to wait a month, maybe two (and mine have in CA been lost in the mail once or twice, when time was critical and having an ID for contract work was mandatory... not paper temporary vouchers...).
I concede that Oregon has a FRACTION of CA's population, but give me a BREAK! Are Oregon homeless or con artists any more crafty than those in California? CA is one of the most HIGH TECH states in the US, and if CA were a country, it'd have maybe the 3rd or 4th largest economy in the world (a good reason for CA to say FUCK DC and secede, heheheheh), so it ought to be EASIER and faster to obtain ID in CA. It should be possible to get the frackin' thing within 20 MINUTES of proving ones identity or passing ID and passing the DMV test.
The brouhaha over internal passport and threat to privacy and such may be well-intentioned, but as long as the ID has no wires, trace capability, or the like, then it's probably a GOOD thing that the ID information will be centralized. I am not speaking about "keeping out migrant workers". I'm talking about putting a crimp in the asses of those who legitimately obtain multiple IDs but who then go on to ABUSE the multiple IDs across state lines, defraud the IRS (I don't mind PAYING taxes; it's the LEVEL that I am bothered by at times), and evade paying bills, tickets, or child support. If you MAKE a kid, PAY FOR IT! Owe a debt, PAY for it, or stay in the loop until it's discharged or someone picks up the bill to give you a clean slate.
All this bitching about the ID is good and some of it is not. Another GOOD thing is that some back-jerkwater-ass hobo-run sheriff or PO-LEASE in parts of the US can't (hopefully can't) ding passers-through on D/L issues. (Broken turn or signal lamps can still cause you problems if they want to detain you or scrape a few dozen dollars out of your wallet before telling you to come back and visit our little town again....)
Hell, many countries, due to historical and formation pains, have had national IDs from their START. We, here in the USA, had it good for a while. The criminal types will still evade; the good types will comply; the cottage lawyers will bitch up a storm and get paid up the ass and smile for the make-work. Cops (good or bad) and bars and certain businesses will love it because they won't have to memorize, train others, or keep annual books on valid forms of acceptable ID.
(*** It *ought* to be a *win* for a lot of people. The cell phones and pagers, NIC cards, and roaming login accounts tell more about us than the damned RealID would. I am pretty sure a number of states are afraid of losing control not over states' rights, but over the cottage card-printing industry (like presidents' and governors' wives painting and selling junk art so DC and the states' frame-making industry can be artificially propped up....) ***)
Anyway, some states permit individuals to possess more than one state ID as long as there is no sign of fraud. Frakin' California would punch a HOLE through my Oregon ID but I had to rationalize with the clerk that I HAD to not have my Oregon ID SCREWED WITH by some arcane process that could be double-checked by a simple inter-ag
Murder rates vs Terror rates (Score:3, Interesting)
16,000 Americans die to murder each year.
In spite of the impact it made, 9-11 had 1/5th the impact of a single year of murders in the USA. Somehow, for 200 years, we managed to uphold the constitution in spite of murder rates. 9-11 is a sorry excuse to change that now.
Therefore, it seems timely and appropriate to recommend that the administration and members of the department of "homeland security" read the constitution, and that THEY adjust to the CONSTITUTION, rather than the other way around.
9-11 already happened. Unless they intend to invent a time machine to stop 9-11, the DHS should just disband itself, b/c chiselling away at our rights hasn't done a damn bit of good for the country.
From a country with national ID (Score:3, Insightful)