tonymet
10 hours ago
Washington State “Enhanced ID” (which is also REALID compliant) was one of the first DHS-approved IDs from way back in 2005 . Ari Jeuls et al (see below) found a number of vulns including remote cloning and remote disablement, publishing their findings a few years after the launch.
I talked to WA DOL Privacy Officer about it a couple years ago, and found that the tech platform had remained unchanged. WA maintains the printed material and DHS maintains the RFID package which is over 20 years old now .
Think of other 20 year old tech and how safe you feel having that in your wallet.
https://www.arijuels.com/wp-content/uploads/2013/09/KJKB09.p...
Edit: clarified Enhanced ID because there are differences in the program
mothballed
10 hours ago
Enhanced ID allows border crossing for most cases covered by the passport card, while real ID does not, for reasons that are unclear to me.
tonymet
10 hours ago
My understanding is that you can be RealID compliant without checking for citizenship. And in theory RealID doesn’t have to have RFID in the chip. Enhanced ID has to have both of those requirements.
khuey
7 hours ago
I can't speak to the technical side of things but legally for a state to issue a REAL ID they have to verify that the person is allowed to be in the US at the time of issuance, not that they are citizens, and, if applicable, they have to shorten the validity of the ID to the period that the person is expected to be allowed to be in the US.