Η εξαίρεση του κανόνα: ραδιόφωνο της Κρήτης κάλυψε την απόφαση του ΕΔΔΑ για το τουρκικό σωματείο (και την ανάρτησε όλη) ενώ κανένα ραδιόφωνο ή εφημερίδα της Αθήνας, της Θεσσαλονίκης ή της Θράκης (πλην των τουρκόφωνων) δεν το κάλυψε
radio984.gr/post/pavlos-stefan…
in reply to Dieu

I am sure I don't have the most demanding job in the tech world, but it really seems like whenever I am somewhat stuck, ChatGPT is completely blown out of the water. Here I got lots of blather that I had to correct twice in order to be offered the obvious solution I was trying to avoid: chatgpt.com/share/685bdad2-caf…

Whoever considers this a useful technology must be using it for freshman homework assignments or something like that.

#Windows10 #updates will #cost you $30 - #Linux updates are for free 👍


Source: windowslatest.com/2024/10/31/m…

#Microsoft #cybersecurity #security #Software #os #update #Problem #fail #news #freedom #change #Windows #Windows11 #money #finance #economy

Not entirely unreasonably, if you're old enough to remember that the “UN weapons inspection programme in Iraq, was "infiltrated and fatally compromised" by the American and British intelligence agencies”…

news.bbc.co.uk/2/hi/middle_eas…
mastodon.social/@villebooks/11…


📢 #iran asserts its right to national security by suspending #IAEA access, following the agency’s silence over hostile attacks on its peaceful #nuclear program

#us #eu #uk #menaplot

📰 Report: Al Mayadeen JUN-25 12:30 Beirut-t

english.almayadeen.net/news/po…


Sanaa declares continuation of war on Israeli occupation en.ypagency.net/360715

‘FuckLAPD.com’ Lets Anyone Use Facial Recognition to Instantly Identify Cops


cross-posted from: lemmy.world/post/31924287


‘FuckLAPD.com’ Lets Anyone Use Facial Recognition to Instantly Identify Cops


A new site, FuckLAPD.com, is using public records and facial recognition technology to allow anyone to identify police officers in Los Angeles they have a picture of. The tool, made by artist Kyle McDonald, is designed to help people identify cops who may otherwise try to conceal their identity, such as covering their badge or serial number.

“We deserve to know who is shooting us in the face even when they have their badge covered up,” McDonald told me when I asked if the site was made in response to police violence during the LA protests against ICE that started earlier this month. “fucklapd.com is a response to the violence of the LAPD during the recent protests against the horrific ICE raids. And more broadly—the failure of the LAPD to accomplish anything useful with over $2B in funding each year.”

“Cops covering up their badges? ID them with their faces instead,” the site, which McDonald said went live this Saturday. The tool allows users to upload an image of a police officer’s face to search over 9,000 LAPD headshots obtained via public record requests. The site says image processing happens on the device, and no photos or data are transmitted or saved on the site. “Blurry, low-resolution photos will not match,” the site says.

fucklapd.com uses data provided by the City of Los Angeles directly to the public,” McDonald told me in an email. “This data has been provided in response to either public records requests or public records lawsuits. That means all of this information belongs to the public and is a matter of public record. fucklapd.com is not scraping any data.”

In addition to potentially identifying officers by name and serial number, FuckLAPD.com also pulls up a police officer’s salary.

“Surprisingly it [the domain name] only costs $10 a year to exercise my first amendment right to say fucklapd.com,” McDonald said.
playlist.megaphone.fm?p=TBIEA2…
I tested the tools by grabbing an image of a white and bald police officer from an LAPD press conference addressing its use of force during the anti-ICE protests in Los Angeles. I uploaded the image to the site, and within a few seconds the site presented me with nine headshots of officers who could be possible matches, all of them bald white men. The first correctly identified the cop in the image I uploaded.

Clicking “view profile” under the result sent me to the Watch the Watchers site by the Stop LAPD Spying Coalition, a community group based in the Skid Row neighborhood of downtown Los Angeles. “All of the information on this website comes from records that were deliberately made public by the City of Los Angeles in response to either public records requests or public records lawsuits,” the Watch the Watchers site says. “We plan to keep refreshing this data from new public records requests as well as to add other data.” Stop LAPD Spying Coalition is not associated with FuckLAPD.com and did not endorse the site.

McDonald told me that since the site launched, it had around 50,000 visitors, but “Because the analysis happens on-device I have no way of knowing what people are using it for, except for some people who have posted screenshots to Twitter or Instagram,” he said.

In 2018 McDonald made another tool called ICEspy which used hundreds of photos of ICE employees from LinkedIn and does much the same thing as FuckLAPD.com. “This app is designed to highlight and embarrass the organization committing atrocities against refugees and immigrants to the United States,” ICEspy’s website says. That tool originally used a Microsoft API, before Microsoft restricted access to it. McDonald said on X that he recently relaunched the tool to run locally on devices. 404 Media tested ICEspy using images of ICE employees on LinkedIn to verify if the tool worked and each result was incorrect; McDonald indicated on X he was looking for others to re-scrape LinkedIn and update the database.

Over the last few months ICE officers have consistently worn masks, neck gaiters, sunglasses, and baseball caps to shield their identity while often refusing to provide their name or even confirm the agency they belong to. This includes while violently assaulting people, detaining U.S. citizens, and pointing weapons at bystanders, leaving little room for recourse or accountability against the individual agents or the agency.

ICE’s constant use of masks has created a climate where people cannot be sure that the heavily armed group of men coming towards them are really federal agents or not. In Philadelphia, a man pretended to be an ICE agent in order to rob an auto repair shop and zip tie an employee. In Brooklyn, a man posed as an immigration officer before attempting to rape a woman.

ICE claims that assaults against its officers have increased by 413 percent, and use this as the justification for covering their faces. But as Philip Bump showed in the Washington Postthere are still plenty of questions about those numbers and their accuracy. ICE says its officers’ family members have been doxed too.

Neither the LAPD or ICE responded to a request for comment.

Joseph Cox contributed reporting.


in reply to Nibodhika

Again, I want to establish that I've learned a ton and really appreciate your writings. Thank you!

That looks interesting, although I would be weary of learning a layout that only works on specific keyboards, it will make it hard for you to use a laptop on the go, work in an office with a normal keyboard or any other similar situation.


Thanks for the reminder! While I can't completely ignore the main takeaway, I do find myself only rarely (read: less than 5%) engage with normal keyboards. And, AFAIU, by only adopting the exotic layout for splitting keyboards, I can keep the muscle memory for QWERTY on regular keyboards. Though, please feel free to correct me if I say something that goes against your own experiences.

which btw I strongly recommend you check out wrist and finger stretching exercises as they help a lot


Would you be so kind to share what has worked for your wrist? While there's no reason to assume that your exercises work out for me, I can at least discuss them with the physiotherapist. BTW, to be clear, I've already visited the physiotherapist a number of times and we've discussed exercises that I've eventually incorporated in my daily routine.

Lots of the changes I made (e.g. split ortholinear keyboard) were probably not needed


Question: If we focus on the split ortholinear keyboard, is only the ortholinear aspect (possibly) redundant? Or..., the split itself?

in reply to HayadSont

Damn, I thought I had sent the reply and it's been erased.

I'll keep it short, muscle memory for qwerty doesn't go away that easily, at least it didn't for me, but I'm able to type blindly in qwerty (just not touch typing). Still I think that something I can use in my laptop is very useful so I can keep the ergonomics on the go.

I don't have the exercises, it was just something someone told me to do, I'm sure whatever your doctor is telling you would be better.

For the split vs ortholinear I think split makes more difference, whenever I use a normal keyboard I feel this, but never had any pains related to it, it's just more comfortable.

in reply to oatmeal

#ynet news alert

Deri rejects Trump’s claim: “No one has visited Fordow yet”

Shas party chairman Aryeh Deri said in an interview with the “Kikar Hashabbat” website that “damage was certainly caused to Iran’s nuclear facilities,” and rejected the claim by US President Donald Trump that “people on behalf of Israel visited the Fordow facility.” Deri was asked what damage was caused to the Iranian nuclear program and whether there was enriched uranium inside the facilities, and replied: “No one knows for certain, because no one has visited there yet.“​​​​​​​​​​​​​​​​

@israel

International law, so it goes, is supposed to govern how nation states resolve their differences.

Analysis of US & Israel's current flouting of international law in the Middle East:

"Preventive attacks like this are clearly illegal under international law & have been over the last eighty years."

~Ben Saul, UN Special Rapporteur

abc.net.au/listen/programs/the…

#internationalLaw #WesternImperialism #MiddleEast #Settler-ColonialStates #USPol #UKPol #EuroPol #Genocide .

This entry was edited (1 month ago)

Sony faces another class-action lawsuit over PlayStation Store prices and monopolistic practices


in reply to Agent Karyo

To be honest that would just be the end of the consoles system as there is a reason Sony is selling the PS5 for so cheap.

As much as I understand why Apple shouldn’t be allowed to keep everything in the Apple Store, Sony’s situation isn’t the same.

But what would bother me more is if Sony starts to raise the prices of everything without justification.

I got a Steam Deck and I’m slowly migrating my gaming from Playstation only to Linux/Playstation gaming. Still a Playstation 5 is a great product, especially with kids and its ease of use and great graphics for your bucks.

This entry was edited (1 month ago)
in reply to LandedGentry

Maybe it’s because I don’t use it enough but the last Sony console I bought was the absolute opposite of “no fuss”. It was nothing but mandatory unskippable updates and I constantly got signed out and had to sign in and the 2fa app kept changing names. And also all those updates and sign-ins had mandatory EULAS you had to scroll through. Such a hassle.

Edit: also it tried to talk to my Sony tv in some “smart” way over HDMI (so I couldn’t disable it) which would sometimes cause my TV to crash and reboot for several minutes.

This entry was edited (1 month ago)
in reply to LandedGentry

For the updates: I put it to sleep. However my power cuts out every now and then. When the power comes back, the ps4 turns itself back on on and makes obnoxious beeping noises, just to tell me the power was cut. The dumb thing is it will stay on that screen until manually dismissed and won’t auto-update until you dismiss that screen, with no timeout. The hassle-free appliance experience!

For your claim that the eulas being easy to skip, keep in mind that sometimes there were back-to-back updates that each required me to agree to a eula. So I would babysit the thing, walk away when it was taking forever, and when I came back it wouldn’t even be ready for gaming. Even windows isn’t that obnoxious.

Also my tv at the time had no way to disable CEC (my new one does, and also doesn’t crash lol).

in reply to LandedGentry

I don’t understand where the confrontation came from, but I guess if that’s what you want you can have it. I literally told you two posts ago about how it’s not just waiting for 20s and clicking a button. It’s an attended upgrade and scrolling process. I won’t bother quoting what I wrote 3 minutes ago, go scroll up and read it again yourself. No, my microwave does not present me with EULAs when the power goes out.

What “score” are you talking about? Do you take personal offense when a Sony product sucks? Did you invent the PlayStation or something? I was just sharing my lived experience.

This entry was edited (1 month ago)

Mamdani Wins Stunning Upset in Democratic Primary as Cuomo Concedes Race


Assemblymember Zohran Mamdani is on track to secure the Democratic nomination for mayor, after former Gov. Andrew Cuomo conceded to him Tuesday night following the first round of ranked-choice primary votes.

With 95% of precincts reporting two hours after polls closed at 9 p.m., 44% ranked Mamdani as their first choice while 36% chose Cuomo first and 11% had city Comptroller Brad Lander.

Mamdani emerged to raucus applause at his election party on a brewery rooftop in Long Island City, about 20 minutes after midnight.

My bank, business, changed their site, but lost my entire account I set up 15 yrs ago. It was like a new acct. All day, I spoke to 4 people & they didn't know what I meant. My bill pay is gone, no tax documents, no mortgage documents. Just one loan document. The "operations" dept tried to blame me. Nope. The last girl said, "Just fool around with the buttons. That's what I had to do." Like I didn't try that already many times. 🙄 I'll face them, just not today. I'm too tired. SMH
in reply to Rose

My sympathies for your situation. I had to contact two of my banks yesterday to straighten out situations similar to yours. (though not as extreme, thank God!) At the first bank I spoke on the phone with a rep who apologized for the situation, promised to resolve it, but it will take aprox. 10 days to get me new cards, etc. At the 2nd bank I dealt with an AI chat bot. Resolved this situation quicker. I expect to see everything back to normal there tomorrow. We'll see.

Rose reshared this.

in reply to roscoeellis

@roscoeellis That's awful! We started the business just before the crash under Obama & committed to pay back a venture capitalist within a year. We talked to many banks. This is the only one that would give us a refi to pay him back @14%. No buyers, so we had to rent. And so it goes, the crime, destruction of property, rehabbing them over and over, shocking filth. We needed Hazmat once for the slimy filth, drug dealers, too. One was set on fire. Insurers dumped us. We got thru it all. 😆

🗨️ Don't worry Israel- #US, nobody in this fxxxing world cares what's going on in #syria and #lebanon - literally, no soul!

#UnitedNations #EU #warcrimes
#UNres1701 #violationoftruce (VOT)

📢 An Israeli drone strike on Wednesday targeted a young man in the town of Mansouri

🔹 The injured civilian was transported to the Lebanese-Italian Hospital in Tyre for treatment

📰 Source: NNA JUN-25 12:00 Beirut-t

nna-leb.gov.lb/en/justice-law/…

📢 🕯️ At least 12 Palestinians were killed and several others injured today as ISR forces intensified their bombardment of various areas in the #gaza strip - including eastern and western Gaza City and the town of Bani Suheila in #khanyounis

Acc to WAFA, an entire family from the Dahdouh household—comprising a father, mother, and five of their children—were killed in an airstrike in Gaza City’s Shujaiya neighborhood.

#palestine #news

📰 WAFA JUN-25 11:00 local-t

english.wafa.ps/Pages/Details/…

The beginning of Ignis Mission


image

Video: 00:03:10

These are the highlights of the launch on Axiom Mission 4 (Ax-4) of ESA project astronaut Sławosz Uznański-Wiśniewski from Poland to the International Space Station. The mission is called Ignis.

A SpaceX Falcon 9 rocket lifted off from launch pad 39A at NASA’s Kennedy Space Center in Florida, USA, on 25 June 2025.

Sławosz is mission specialist on the Dragon spacecraft. The other crew members are Shubhanshu Shukla from India and Tibor Kapu from Hungary. They fly under the command of Peggy Whitson from USA.

Sponsored by the Polish government and supported by ESA, the Polish Ministry of Economic Development and Technology (MRiT), and the Polish Space Agency (POLSA), the mission will include an ambitious technological and scientific programme with several experiments led by ESA and proposed by the Polish space industry.

#news #space #science #esa #europeanspaceagency
posted by pod_feeder_v2

📢 #iran will hold official state funerals this Saturday for a number of senior military commanders and leading #scientists who were killed during the recent 12-day war with "Israel," according to state #media

#attackoniran #us #eu #menaplot
#news

📰 Report: Al Mayadeen JUN-25

english.almayadeen.net/news/po…

in reply to Otto Pureblood

Good Morning to New York's 1 Million New Illegal Gun Owners
2014 - THEY REFUSED TO REGISTER THEIR WEAPONS WITH THE STATE
The deadline for New York residents to register their so called “Assault Weapons” and “High” (read standard) Capacity Magazines came and went. An estimated million plus, formerly law abiding, gun owners have refused to comply with Cuomo and down state Democrat’s naive belief that the NY Safe Act, passed in a so called emergency session of the New York legislature, could force free people to register their hard earned property.
ammoland.com/2014/04/good-morn…

Recordatorio periódico:
NO uses un bloqueador de anuncios, usa uBlock Origin

Es mucho mejor que la mayoría de los otros bloqueadores de anuncios en privacidad, rendimiento y control, y muchos otros en realidad son estafas o venden tus datos.
github.com/gorhill/uBlock/wiki…

La noticia NO es si MIcrosoft bloqueo el correo del TPI cuando Trump lo ordenó y sin pestañear. Eso no nos sorprende y, por lo tanto, no puede escandalizarnos.

La noticia debería ser que el TPI usaba correo de Microsoft
#DigitalizacionDemocratica

dig.watch/updates/microsoft-al…

FACUA insta al ayuntamiento de Sevilla a multar a Mercadona por no respetar el horario de carga y descarga 🚛⏰ facua.org/noticias/facua-insta…

« … if you listen to Smotrich, the Finance Minister, last week [...] talking brazenly and openly about cleansing Gaza of all Palestinians... that is ethnic cleansing... that is a war crime… »⁣⁣⁣

🔗 · youtube.com/watch?v=x5AcNZ02Ja…

#Palestine #ceasefire #FreePalestine @palestine⁣⁣

🕊️ 🇵🇸 🍉 🙏🏻 ✌️ ☮️

in reply to Otto Pureblood

@Otto Pureblood They can take their alleged Jewish genius and move the fuck to Israel with no money or weapons from the US. We'll gladly revert to our traditional lifestyle of planting potatoes, raising livestock and learning eternally.

However, this is an apt presentation of what goes on in the mind of our greatest allies ever and presumably, God's chosen folk. They can have all their ornaments of deception back, we no longer want them. The novelty has worn thin. One wonders, if the Amish are also parasites feeding off alleged Jewish genius? We will not be jealous, one doubts that anyone ever was. What we will be and continue to be, is contemptuous.

Lyon Drops Microsoft to Boost Digital Sovereignty

Link: digitrendz.blog/newswire/busin…
Discussion: news.ycombinator.com/item?id=4…

the youtube save-a-fox lady yeeted.
sorry but you can't blame that on reddit. normal people don't give a shit what redditors say.

once the psychiatrists get their hooks in someone it's really hard to get out of that trap

dexerto.com/youtube/youtubes-s…

Five elected representatives to the largest body representing British Jews have been suspended for two years after criticising the Israeli government’s actions in Gaza.

All 36 signatories to an open letter published in April have been found to have breached the Board of Deputies’ code of conduct after a two-month investigation.

The letter said “Israel’s soul is being ripped out” by military action that renewed in March.

theguardian.com/world/2025/jun…

🕎 🇵🇸 ☮️
#Gaza #Palestine
#Press #News

Jad Salfiti - Pride has never been apolitical, but in recent years, particularly after the Israeli occupation’s onslaught on the Gaza Strip after 7 October 2023, the coalition of queer rights in the west has felt increasingly fractured.

In Berlin, the city I call home, Pride events have splintered along political lines as Palestine has been a recurring point of contention.

theguardian.com/commentisfree/…

🕎 🇵🇸 ☮️
#Gaza #Palestine
#Press #News

Reading NFC Passport Chips in Linux


shkspr.mobi/blog/2025/06/readi…

For boring and totally not nefarious reasons, I want to read all the data contained in my passport's NFC chip using Linux. After a long and annoying search, I settled on roeften's pypassport.

I can now read all the passport information, including biometrics.

Table of Contents

BackgroundRecreating the MRZPython code to generate an MRZCan you read a cancelled passport?Cryptography and other securityCan you brute-force a passport?Is it worth brute-forcing a password?InstallingGetting structured dataSaving the imageWhat didn't workmrtdreaderJean-Francois Houzard's and Olivier Roger's pyPassportbeaujean's pyPassportd-LogicAndroid readerIs it worth it?

Background


The NFC chip in a passport is protected by a password. The password is printed on the inside of the physical passport. As well as needing to be physically close to the passport for NFC to work0, you also need to be able to see the password. The password is printed in the "Machine Readable Zone" (MRZ) - which is why some border guards will swipe your passport through a reader before scanning the chip; they need the password and don't want to type it in.

I had a small problem though. I'm using my old passport1 which has been cancelled. Cancelling isn't just about revoking the document. It is also physically altered:

Cut off the bottom left hand corner of the personal details page, making sure you cut the MRZ on the corner opposite the photo.


So a chunk of the MRZ is missing! Oh no! Whatever can we do!?

Recreating the MRZ


The password is made up of three pieces of data:

  1. Passport Number (Letters and Numbers)
  2. Date of Birth (YYMMDD)
  3. Expiry Date (YYMMDD)

Each piece also has a checksum. This calculation is defined in Appendix A to Part 3 of Document 9303.

Oh, and there's a checksum for the entire string. It's this final checksum which is cut off when the passport cover is snipped.

The final password is: Number Number-checksum DOB DOB-checksum Expiry Expiry-checkum checksum-of-previous-digits

Python code to generate an MRZ


If you know the passport number, date of birth, and expiry date, you can generate your own Machine Readable Zone - this acts as the password for the NFC chip.
Python 3def calculateChecksum( value ): weighting = [7,3,1] characterWeight = { '0': 0, '1': 1, '2': 2, '3': 3, '4': 4, '5': 5, '6': 6, '7': 7, '8': 8, '9': 9, '<': 0, 'A':10, 'B':11, 'C':12, 'D':13, 'E':14, 'F':15, 'G':16, 'H':17, 'I':18, 'J':19, 'K':20, 'L':21, 'M':22, 'N':23, 'O':24, 'P':25, 'Q':26, 'R':27, 'S':28, 'T':29, 'U':30, 'V':31, 'W':32, 'X':33, 'Y':34, 'Z':35 } counter = 0 result = 0 for x in value: result += characterWeight[str(x)] * weighting[counter%3] counter += 1 return str(result%10)def calculateMRZ( passportNumber, DOB, expiry ): """ DOB and expiry are formatted as YYMMDD """ passportCheck = calculateChecksum( passportNumber ) DOBCheck = calculateChecksum( DOB ) expiryCheck = calculateChecksum( expiry ) mrzNumber = passportNumber + passportCheck + DOB + DOBCheck + expiry + expiryCheck mrzCheck = calculateChecksum( mrzNumber ).zfill(2) mrz = passportNumber + passportCheck + "XXX" + DOB + DOBCheck + "X" + expiry + expiryCheck + "<<<<<<<<<<<<<<" + mrzCheck return mrzprint( calculateMRZ("123456789", "841213", "220229") )

Can you read a cancelled passport?


I would have thought that cutting the cover of the passport would destroy the antenna inside it. But, going back to the UK guidance:

You must not cut the back cover on the ePassport


Ah! That's where the NFC chip is. I presume this is so that cancelled passports can still be verified for authenticity.

Cryptography and other security


The security is, thankfully, all fairly standard Public Key Cryptography - 9303 part 11 explains it in excruciating levels of detail.

One thing I found curious - because the chip has no timer, it cannot know how often it is being read. You could bombard it with thousands of password attempts and not get locked out. Indeed, the specification says:

the success probability of the attacker is given by the time the attacker has access to the IC, the duration of a single attempt to guess the password, and the entropy of the passport.


Can you brute-force a passport?


Wellllll… maybeeeee…?

Passports are generally valid for only 10 years. So that's 36,525 possible expiry dates.

Passport holders are generally under 100 years old. So that's 3,652,500 possible dates of birth.

That's already 133,407,562,500 attempts - and we haven't even got on to the 1E24 possible passport numbers!

In my experiments, sending an incorrect but valid MRZ results in the chip returning "Security status not satisfied (0x6982)" in a very short space of time. Usually less than a second.

But sending that incorrect attempt seemed to introduce a delay in the next response - by a few seconds. Sending the correct MRZ seemed to reset this and let the chip be read instantly.

So, if you knew the target's passport number and birthday, brute forcing the expiry date would take a couple of days. Not instant, but not impossible.

Most commercial NFC chips support 100,000 writes with no limit for the number of reads. Some also have a 24 bit read counter which increments after every read attempt. After 16 million reads, the counter doesn't increment. It could be possible for a chip to self-destruct after a specific number of reads - but I've no evidence that passport chips do that.

Is it worth brute-forcing a password?


If you were to brute-force the MRZ, you would discover the passport-holder's date of birth. You would also get:

  • A digital copy of their photo,
  • Their full name,
  • Their sex2,
  • The country which issued their passport, and
  • Their nationality.

All of that is something which you can see from looking at the passport. So there's little value in attempting to read it electronically.

Installing


As mentioned, I'm using github.com/roeften/pypassport

The only library I needed to install was pyasn1 using pip3 install pyasn1 - your setup may vary.

Download PyPassport. In the same directory, you can create a test Python file to see if the passport can be read. Here's what it needs to contain:
Python 3from pypassport import epassport, reader# Replace this MRZ with the one from your passportMRZ = "1234567897XXX8412139X2202299<<<<<<<<<<<<<<04"def trace(name, msg): if name == "EPassport": print(name + ": " + msg)r = reader.ReaderManager().waitForCard()ep = epassport.EPassport(r, MRZ)ep.register(trace)ep.readPassport()
Plug in your NFC reader, place your passport on it, run the above code. If it works, it will spit out a lot of debug information, including all the data it can find on the passport.

Getting structured data


The structure of the passport data is a little convoluted. The specification puts data into different "Data Groups" - each with its own ID.

By running:
Python 3ep.keys()
You can see which Data Groups are available. In my case, ['60', '61', '75', '77']

  • 60 is the common area which contains some metadata. Nothing interesting there.
  • 61 is DG1 - the full MRZ. This contains the holder's name, sex, nationality, etc.
  • 77 is the Document Security Object - this was empty for me.
  • 75 is DG2 to DG4 Biometric Templates - this contains the image and other metadata.

Dumping the biometrics - print( ep["75"] ) - gives these interesting pieces of metadata:
'83': '20190311201345','meta': { 'Expression': 'Unspecified', 'EyeColour' : 'Unspecified', 'FaceImageBlockLength': 19286, 'FaceImageType': 'Basic', 'FeatureMask': '000000', 'FeaturePoint': {0: {'FeaturePointCode': 'C1', 'FeatureType': '01', 'HorizontalPosition': 249, 'Reserved': '0000', 'VerticalPosition': 216}, 1: {'FeaturePointCode': 'C2', 'FeatureType': '01', 'HorizontalPosition': 141, 'Reserved': '0000', 'VerticalPosition': 214}}, 'Features': {}, 'Gender': 'Unspecified', 'HairColour': 'Unspecified', 'ImageColourSpace': 'RGB24', 'ImageDataType': 'JPEG', 'ImageDeviceType': 0, 'ImageHeight': 481, 'ImageQuality': 'Unspecified', 'ImageSourceType': 'Static Scan', 'ImageWidth': 385, 'LengthOfRecord': 19300, 'NumberOfFacialImages': 1, 'NumberOfFeaturePoint': 2, 'PoseAngle': '0600B5', 'PoseAngleUncertainty': '000000', 'VersionNumber': b'010' }
If I understand the testing document - the "Feature Points" are the middle of the eyes. Interesting to see that gender (not sex!) and hair colour are also able to be recorded. The "PoseAngle" represents the pitch, yaw, and roll of the face.

Saving the image


Passport images are saved either with JPEG or with JPEG2000 encoding. Given the extremely limited memory available photos are small and highly compressed. Mine was a mere 19KB.

To save the image, grab the bytes and plonk them onto disk:
Python 3photo = ep["75"]["A1"]["5F2E"]with open( "photo.jpg", "wb" ) as f: f.write( photo )
As expected, the "FeaturePoints" co-ordinates corresponded roughly to the centre of my eyes. Nifty!

What didn't work


I tried a few different tools. Listed here so you don't make the same mistakes as me!

mrtdreader


The venerable mrtdreader. My NFC device beeped, then mrtdreader said "No NFC device found."

I think this is because NFC Tools haven't been updated in ages.

Jean-Francois Houzard's and Olivier Roger's pyPassport


I looked at pyPassport but it is only available for Python 2.

beaujean's pyPassport


This pypassport only checks if a passport is resistant to specific security vulnerabilities.

d-Logic


Digital Logic's ePassport software only works with their hardware readers.

Android reader


tananaev's passport-reader - works perfectly on Android. So I knew my passport chip was readable - but the app won't run on Linux.

Is it worth it?


Yeah, I reckon so! Realistically, you aren't going to be able to crack the MRZ to read someone's passport. But if you need to gather personal information3, it's perfectly possible to do so quickly from a passport.

The MRZ is a Machine Readable Zone - so it is fairly simple to OCR the text and then pass that to your NFC reader.

And even if the MRZ is gone, you can reconstruct it from the data printed on the passport.

Of course, this won't be able to detect fraudulent passports. It doesn't check against a database to see if it has been revoked4. I don't think it will detect any cryptographic anomalies.

But if you just want to see what's on your travel documents, it works perfectly.


  1. There are some commercially available long range readers - up to 15cm! I've no doubt some clever engineer has made a some high-powered radio device which can read things from a mile away using a Pringle's tube. Of note, the ICAO guidance says:
    the unencrypted communication between a contactless IC and a reader can be eavesdropped within a distance of several metres.


    ↩︎

  2. I'm not dumb enough to do this stuff on a live passport! ↩︎
  3. Sex is complicated5. But ICAO allow for "F for female, M for male, or X for unspecified". ↩︎
  4. Under the auspices of GDPR, of course! ↩︎
  5. Nor does it check if the holder is on some Interpol list. ↩︎
  6. Stop giggling at the back! ↩︎


#CyberSecurity #hacking #linux #nfc #rfid

This entry was edited (1 month ago)

Warum kriegen wir kaum noch #Kinder in #Deutschland?


Anabel #Schunke und Philip #Hopf im Streitgespräch
#HKCM

youtu.be/bbEYWiBROEU

🚨Le vice-président américain Jay D. Vance : « La #Russie et la #Chine ne veulent pas que l'Iran se dote de l'arme nucléaire. » Il a ajouté que la prolifération nucléaire au Moyen-Orient serait « une catastrophe pour tous ».
Premièrement, la Russie et la Chine ne veulent aucune ingérence des #États-Unis dans leurs affaires intérieures, sous quelque forme que ce soit. Et tous ceux qui font des déclarations au nom de nos deux pays, mais sans mandat de leur part, feraient bien de commencer par là.
Par exemple, ne pas fournir de missiles meurtriers au régime terroriste de Kiev, ne pas militariser Taïwan, etc.
Deuxièmement, la Russie et la Chine s'expriment elles-mêmes : les déclarations correspondantes sur l'agression d'Israël et des États-Unis ont été publiées par les ministères des Affaires étrangères des deux pays.
Troisièmement, la Russie et la Chine estiment que l' #Iran (comme tout autre pays) peut et doit déterminer lui-même sa stratégie de développement de l'énergie #nucléaire conformément au droit international, en particulier au TNP, et que les autres États peuvent également fonder leur position à cet égard sur le droit international.
Quatrièmement, l'Iran a développé l'énergie nucléaire à des fins pacifiques, ce à quoi il a pleinement droit, et n'a pas fabriqué d'armes nucléaires, ce qui a été confirmé à plusieurs reprises tant par Téhéran que par l'AIEA.
Cinquièmement, un peu d'histoire. L'idée d'un #Moyen-Orient exempt d'armes nucléaires a peut-être été évoquée pour la toute première fois dans une déclaration de l'agence de presse soviétique, qui était alors la voix officielle de Moscou, le 22 janvier 1958 : « Le Proche et le Moyen-Orient doivent et peuvent devenir une zone de paix, où il n'y a pas et ne doit pas y avoir d'armes nucléaires et de missiles, une zone de bon voisinage et de coopération amicale entre les États ».
En 1974, l'Iran, qui subit aujourd'hui les frappes d' #Israël et des États-Unis, a lancé un débat sur ce sujet à l'Assemblée générale des Nations unies, qui s'est conclu par l'adoption de la résolution « Création d'une zone exempte d'armes nucléaires dans la région du Moyen-Orient ». 128 pays ont voté « pour », dont l'Union soviétique et les États-Unis. Israël s'est abstenu.
L'URSS/Russie s'est systématiquement prononcée en faveur de la création d'une zone exempte d'armes nucléaires au Moyen-Orient.
À l'heure actuelle, le seul État de la région à posséder l'arme nucléaire est Israël, qui ignore systématiquement les initiatives visant à créer une zone exempte d'armes nucléaires au Proche-Orient et qui, désormais, bombarde conjointement avec les États-Unis l'Iran, qui ne possède pas l'arme nucléaire.
Alors, que voulait dire M. #Vance ?
@BPARTISANS
in reply to New York Magazine

Victory? Don't drink your own cool-aid.

#Israel is almost out of weapons and if #Iran keeps pummeling for another week, Tel Aviv will soon look like #Gaza.

Israely Occupying Forces can only win a fight against civilians, killing children in #Gaza is their only "success" story.

The #USA basically tried to save face by pretending they did something (a very expensive hole on a mountain) to stop the war #terrorist #Netanyahu was losing.

@ecpoir@toot.io @NYMag@flipboard.com @intelligencer-NYMag@flipboard.com Yeah but #Israeli #war hawks in the #US will drag the US into the war and #Republicans will gladly answer their call because how else will the US #DefenseIndustrialComplex make money if the US is not at war? Over the course of our entire 249 year History the #UnitedStatesOfAmerica has entered or started a war on average every 20 years. It's 2025. #Iraq/ #Afghanistan was about 20 years ago. The timing is perfect. @israel@a.gup.pe @iran@a.gup.pe


Victory? Don't drink your own cool-aid.

#Israel is almost out of weapons and if #Iran keeps pummeling for another week, Tel Aviv will soon look like #Gaza.

Israely Occupying Forces can only win a fight against civilians, killing children in #Gaza is their only "success" story.

The #USA basically tried to save face by pretending they did something (a very expensive hole on a mountain) to stop the war #terrorist #Netanyahu was losing.


As Israel Attacked Iran, Multi-National Effort to Bring Last Three Madleen Sailors Out of Israeli Prison covertactionmagazine.com/2025/…

Pavel #Durov étrille les #médias français et #LeMonde

Dans un post #Telegram, Pavel Durov, fondateur de l’appli cryptée, a taclé sans ménagement la presse française. Après son arrestation controversée à Paris en août 2024, le patron de Telegram dénonce une campagne de dénigrement systématique – et Le Monde en tête. Analyse d’un règlement de comptes qui en dit long sur l’état de notre paysage médiatique.

Premier grief de Durov : son interview fleuve accordée à Tucker #Carlson, vue des millions de fois sur YouTube… mais passée à la trappe par tous les journaux français. « Aucune couverture », souligne-t-il, avec un émoji silence en guise de pied de nez. Étrange, pour un pays si prompt à s’indigner dès qu’un entrepreneur ose critiquer l’ordre établi. Oubli involontaire ? Plutôt une omission bien pratique, tant le récit de Durov – détaillant son interpellation ubuesque – dérange.


arretsurinfo.ch/pavel-durov-et…

📢 #FaggotTourney SEMIFINALS!

It is time for the Adam :madam: and CSB :csb: voters to come together in solidarity with the SRK voters and but this obnoxious faggot into the finals!

SRK will win if we accentuate the fact that him winning may actually trigger the biggest sperg-out thread in fedi history.

@SiRrogueKnight 🏳️‍🌈 vs. @jeffcliff

🥊 The homosexual pedophile that is obnoxious and unfunny vs Some guy, i guess

Vote here:

noauthority.social/@ceo_of_mon…

This entry was edited (1 month ago)

Hace más de una década, pescadores de Roses (Girona) llegaron a un acuerdo oral para dejar de pescar merluzas en la zona. La veda, que aún hoy prevalece, ha permitido mejorar el ecosistema marino y establecer una unión atípica entre el sector pesquero, el científico y las ONG.

Un reportaje de Ana Iglesias Mialaret.

climatica.coop/pescar-menos-pe…