Hacker News new | ask | show | jobs
by kreetx 2173 days ago
Didn't read the paper but it appears to be fresh, so maybe the newsworthy part is that they are still not fixed?
1 comments
Avamander 2173 days ago
The paper is half for giving a technical overview of the issues and part new analysis based on datamining old certificates. The issues have been mostly fixed, compliance violations however are still badly monitored.
link
kreetx 2173 days ago
Yup, true - from the end of section 2.3.4 jTOP SLE78: "The jTOP SLE78-powered ID cards were issued until the end of 2018. ID cards manufactured currently are powered by the chip platform supplied by IDEMIA (not covered in this work)."

Looks like the ID cards issued after 2018 are not covered, so I guess this really is "old news".

link