note to governments: because of your overly strict AML policies a million passports are now in the hands of a hacker. And if gox stored the "recent bill" scan it will be SIMPLE for a criminal to load that into a graphics editor and update it. So AML verification spoofing will be simple for the new owners of this database.
But the REAL tragedy here is that in an attempt to prevent a relatively minor crime -- and I know preventing $ laundering is important but the volumes here are tiny compared to fiat AFAIK -- you printed a million boarding passes so terrorists can bring their evil right to our front door.
Passport doc requirements should be limited to physical travel only and even travel companies should be legally required to store no data except a single number call it a public key which is used to confirm (insecurely but to a small degree anyway) that the company in question saw the passport.
But the REAL tragedy here is that in an attempt to prevent a relatively minor crime -- and I know preventing $ laundering is important but the volumes here are tiny compared to fiat AFAIK -- you printed a million boarding passes so terrorists can bring their evil right to our front door.
Passport doc requirements should be limited to physical travel only and even travel companies should be legally required to store no data except a single number call it a public key which is used to confirm (insecurely but to a small degree anyway) that the company in question saw the passport.
Well said.
Now imagine the same thing happening with biometric data...
