Bert's eid fuckketry lowlevel bit twisting

Latest revision as of 02:57, 30 October 2010

Note: this article is about a passed event.

Bert's eid fuckketry lowlevel bit twisting


From 2010/10/29 19:00 to 2010/10/29 23:59
Presenters ({{#arraydefine:p\|Bert}}{{#arraysize:p}}warning.png"{{#arraysize:p}}" is not a number.):
Bert
Attendees ({{#arraydefine:a\|Sandb, Tazo, Koenraad}}{{#arraysize:a}}warning.png"{{#arraysize:a}}" is not a number.):
Sandb, Tazo, Koenraad
Where:
Whitespace Blekerijstraat 75, Gent, Belgium Loading map... The following error has been detected in your syntax: * Parameter coordinates must be one or more valid locations.The value "s eid fuckketry lowlevel bit twisting@ [[Whitespace]]" has been omitted. Costs 0
Tweet

«Introduction to the belgian e-id card, and open source software to read it.»

Rijksregister: view a bunch of official documentation that the government has on you on https://www.mijndossier.rrn.fgov.be/; note, there is even an access log so you can see who "rijksregistered" you.
Extensive owasp documentation/presentation on eid: http://www.owasp.org/images/0/01/The_Belgian_e-ID_hacker_vs_developer.pdf
http://en.wikipedia.org/wiki/ISO/IEC_7816
http://en.wikipedia.org/wiki/PKCS11
opensc-pkcs11.so: the libaray to open up in firefox

Some low-level code to access your eID: eidshow.tar.gz

You need to have the following installed to get it working:

dependencies eidshow:

depending on your device model, you need a card driver, e.g.:

make to make pkcs15dump make eidshow to make the eidshow binary

First make sure that your card will be managed by the pcscd daemon. You do this by

vim /etc/opensc/opensc.conf

and making sure that the line

reader_drivers = ....

is not commented and only contains your card reader, e.g.:

reader_drivers = pcsc;

after that, either execute pkcs15dump to get a basic smart card dump or ./eidshow to get the full eid output.

@@ Line 10: / Line 10: @@
 http://ietherpad.com/0x20-eid
+== links ==
+* Rijksregister: view a bunch of official documentation that the government has on you on https://www.mijndossier.rrn.fgov.be/; note, there is even an access log so you can see who ''"rijksregistered"'' you.
+* Extensive owasp documentation/presentation on eid:  http://www.owasp.org/images/0/01/The_Belgian_e-ID_hacker_vs_developer.pdf
+* http://en.wikipedia.org/wiki/ISO/IEC_7816
+* http://en.wikipedia.org/wiki/PKCS11
+* opensc-pkcs11.so: the libaray to open up in firefox
 == Bert's code ==