Potential security risk could affect 750,000 Estonian ID cards

[Kaido]

[quote]Last Thursday, Estonia's Information System Authority (RIA) was informed by an international group of researchers that a potential security risk had been detected affecting all national ID cards issued in Estonia after October 2014.
Estonian experts have determined that the potential risk does indeed exist, affecting 750,000 currently valid ID cards issued after Oct. 17, 2014.
ID cards issued prior to this date use a different chip and are unaffected by this risk. Likewise unaffected is the SIM card-based Mobile-ID system, which the government is recommending people sign up for.
[/quote]
[url]http://news.err.ee/616732/potential-security-risk-could-affect-750-000-estonian-id-cards[/url]
[quote][B]What happened in October 2014 that such an error occurred? Was Estonia aware of this change?[/B]
In October 2014, a new chip was introduced on the ID cards, which was faster, based on the latest technology and was therefore presumably safer. The French and German security certificates given to the chips confirm their compliance with all security requirements. The same chip is used in the identity card of several other countries, including payment cards and work certificates.

The security risk arose with the new chip and software combined.[/quote]

[url]http://id.ee/?lang=en&id=38066[/url]

[EcksDee]

"The risk is bad enough to take seriously, but not bad enough to recall any of the cards"

That's a relief, though with them elections coming soon it's pretty nice timing.

[editline]5th September 2017[/editline]

Also for reference, Estonia's POPULATION is around 1.3 million, so in theory this is half of the population.

[KevBeans]

[QUOTE=EcksDee;52649761]"The risk is bad enough to take seriously, but not bad enough to recall any of the cards"

That's a relief, though with them elections coming soon it's pretty nice timing.

[editline]5th September 2017[/editline]

Also for reference, Estonia's POPULATION is around 1.3 million, so in theory this is half of the population.[/QUOTE]

Realistically definitely not that many. The cards are valid for 5 year intervals before needing renewal, and EVEN if they're past their date, they don't even "turn off". All ID-linked services and functions still work and thus lots of people who are in their routine and haven't needed it for much else won't probably even have noticed their ID is expired. I am one of those sinners.

Was about to get a new ID too, but was too lazy to drag my ass to the offices. So good for me? Not sure what precisely the dangers are here. Voter fraud? Bank credentials being abused? The FAQ isn't entirely clear either.