1. BCS?
2. After further reading it, I see that even when you ignore the stupid bug with the sequential numbers and using a checksum digit as part of a bloody key, the whole thing is at best 50 bit encrypted. 50 bit. Most geeks use 128 bit security to read their email. And the government decides to use halve that for a passport, opening up a photo, fingerprint and everything else.
Also, no-one has explained to me how exactly false passports can be found using this. I mean, unless they check everything with a central dbase, it ought to be easy enough to put all the ID stuff onto a chip, and let that reply like it's a passport one.