road toll transponder hacked

[Eugen Leitl]

On Thu, Aug 28, 2008 at 06:03:14PM +0200, Stefan Kelm wrote:

> We've been helping the German "Toll Collect" system (as
> discussed in this thread as well) setting up and implementing
> their data privacy concept. This concept requires Toll Collect
> to delete almost any data after a certain (quite short, actually)

They (not Toll Collect, though) do a realtime query against a 
reasonably long list of license plates in some German states, I recall reading.

http://www.heise.de/newsticker/Hessische-Polizei-hat-seit-Maerz-eine-Million-Kfz-Kennzeichen-gescannt--/meldung/99197

> amount of time. Even with disk prices falling they save lots
> and lots of money (even compared to what we charged them for
> telling them... :-) ).

Given where things are headed in Germany, I guarantee you Toll Collect
will be required by law to do data retention for at least a year or
two in less than 5 years.

http://www.heise.de/newsticker/Debatte-um-Zugriff-auf-LKW-Mautdaten-fuer-Fahndungen-geht-weiter--/meldung/76321

-- 
Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org
______________________________________________________________
ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org
8B29F6BE: 099D 78BA 2FD3 B014 B08A  7779 75B0 2443 8B29 F6BE

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com