However, it had not passed the certifications needed for government use. And it was, in as much as it would read them. He purchased a card reader for home use, turning to Amazon for a $15 reader that claimed it was made for US government smart cards.
The report points to one unnamed source who works IT for a government defence contractor and uses a smart ID card. Many of them are turning to cheap online products that just do not provide the same level of protection.
It seems the US government is not issuing readers for this use, leaving employees to find their own secure smart ID card readers. However, employees are also able to use their cards at home for remote access. These vendors have been vetted to pass strict security demands. In the workplace, readers for these cards come from officially greenlit vendors chosen by the government. Each card has a security level attached for the specific employee. US Government employees have a secure Personal Identity Verification (PIV) smart ID card that provides access to buildings, services, controlled spaces, and computer networks/systems. According to a report from KrebsOnSecurity, personal home readers are not providing the same level of security as readers in the workplace.
Amongst the millions of employees who work for the US government, there is a potential that smart ID card readers they use at home are leaving a major security hole.
0 kommentar(er)
