[an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] (none) [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] (none) [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive]
 
[an error occurred while processing this directive] [an error occurred while processing this directive]
Skåne Sjælland Linux User Group - http://www.sslug.dk Home   Subscribe   Mail Archive   Forum   Calendar   Search
MhonArc Date: [Date Prev] [Date Index] [Date Next]   Thread: [Date Prev] [Thread Index] [Date Next]   MhonArc
 

Re: Bruteforce-cracking af PID (was: Certifikat til Anders And)



Anna Jonna Armannsdottir <sslug@sslug> writes:

> søn, 2002-07-07 kl. 11:47 skrev Arne Jørgensen:
>
>> Jamen ... Sammenhængen mellem PID og CPR-nummer findes vel kun i en
>> database hos KMD-CA og den har du ikke adgang til.

[klip]

> PID-nummeret er formodentlig dannet fra en "one way hash" af de samlede
> oplysninger der består af CPR-nummer plus yderligere oplysninger.  

Du antager altså at der eksisterer en matematisk sammenhæng mellem
CPR-nummer og PID. Jeg skal da ærligt indrømme at jeg ikke aner
hvordan PID laves, men det har i hvert fald været min opfattelse at en
sådan sammenhæng ikke eksisterer (og dermed er brute force cracking
ikke muligt). Jeg kan naturligvis tage fejl.

> Samtidig vil jeg gøre opmærksom på at denne form for "cracking" ville
> være fuldt lovlig idet certifikaterne er offentliggjorte oplysninger og
> CPR-numre ikke er hemmelige oplysninger eller på anden måde anses for at
> være personfølsomme oplysninger. 

Jeg tror nu nok CPR-nummer opfattes som en personfølsom oplysning.

mvh
        /arne
-- 
stud. scient. Arne Jørgensen
Kollegium 5, 2., v. 222, Universitetsparken, 8000 Århus C
tlf: 89 42 72 22, mobil: 21 65 01 13
e-post: sslug@sslug, http://www.daimi.au.dk/~arne/


 
Home   Subscribe   Mail Archive   Index   Calendar   Search

 
 
Questions about the web-pages to <www_admin>. Last modified 2005-08-10, 20:33 CEST [an error occurred while processing this directive]
This page is maintained by [an error occurred while processing this directive]MHonArc [an error occurred while processing this directive] # [an error occurred while processing this directive] *