Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Privacy-preserving features in the Mobile Driving License

security.googleblog.com

Post reply on HN
Print view View original

61–70 of 79 posts

Re: Privacy-preserving features in the Mobile Driving License

#61

Post by austhrow743 »

rmrfstar wrote: post #58
diebeforei485 wrote: post #25

Earlier quoted context omitted.

But why? Why do people have to carry a wallet everywhere, unless they want to? I have my payment cards on my watch. Pre-pandemic, my gym membership card was on my watch. If I had my ID on my watch as well, I don't ever have to worry about a wallet being stolen because I wouldn't carry one. Sure, people can steal your watch at gunpoint- but it can be remotely disabled (even if you were forced to give your passcode und…

What if you had a serious business dispute with Apple or Google, and were (justifiably) uncomfortable walking around with a mobile bug running software of their choosing? [1] For most people on this site, this kind of threat is far more likely than the mugging you described. [1] https://www.theguardian.com/technology/2018/mar/16/silicon-v...

Then

1. Keep using a drivers licence in card form.

2. If you want to use it in phone form instead despite your dispute with google and apple, have it on a phone thats not made by google or apple.

3. If you insist on using a google or apple phone for your drivers licence phone app despite your dispute with google and apple, just leave it off after putting your licence on it except for when you need your licence, and don't connect it to the internet.

Re: Privacy-preserving features in the Mobile Driving License

#62

Post by notRobot »

kelnos wrote: post #53
notRobot wrote: post #26

No. Nope. No. No. No. There's nothing wrong with plastic card drivers' licenses. Don't fuck up and complicate a system that already works perfectly. I don't want my identity in society controlled by a fucking Google app. I don't know when they'll lock me out. I don't know if I'll always have a working, charged smartphone on me. I don't see a single advantage to this approach.

Perfectly? Hardly. Why does a random bar or liquor store get to scan the barcode on my license and get my name, address, and phone number that they can sell to a third party? Not saying this is the solution, but the current system isn't that great.

> Why does a random bar or liquor store get to scan the barcode on my license and get my name, address, and phone number that they can sell to a third party?

That's not a thing where I live. Sucks that you have to deal with that, and that it's not outlawed. Where do you live?

Re: Privacy-preserving features in the Mobile Driving License

#63

Post by [deleted] »

kelnos wrote: post #45
mawise wrote: post #14

Earlier quoted context omitted.

Until the bouncer (or the bar's contracted developer) thinks it's easier or more secure to use the "Request all data" feature, and logs everything to an unprotected MySQL database. When a bouncer looks at your ID he doesn't write down or save any of that information. This really seems like a solution looking for a problem.

As a sibling mentioned, they already have ID barcode scanners in many bars, and then sell your data to marketing companies. I think I'd be fine walking away from a bar that used this system to request everything, rather than just a simple "over 21?" verification question. There are plenty of bars out there and I don't have to patronize shitty ones.

[deleted]

Re: Privacy-preserving features in the Mobile Driving License

#64

Post by wtfrmyinitials »

rootsudo wrote: post #12

This is horrible, it should remain a card. Why should a cell phone, or any technological device now be required for participation in society or to validate yourself to any government official? At that point, where do you draw the line of privacy? You're carrying with you an object that you can't trust 100% and can work against you anytime. This is truly chilling dystopian type stuff. Soon a cell phone will be require…

If I recall correctly, Moxie Marlinspike did a great talk about this idea years ago. How things like having a cell phone are theoretically “optional” yet to be normally integrated into today’s society entirely requires it. This is especially true in these covid-times.

Re: Privacy-preserving features in the Mobile Driving License

#65

Post by rmrfstar »

wtfrmyinitials wrote: post #64
rootsudo wrote: post #12

This is horrible, it should remain a card. Why should a cell phone, or any technological device now be required for participation in society or to validate yourself to any government official? At that point, where do you draw the line of privacy? You're carrying with you an object that you can't trust 100% and can work against you anytime. This is truly chilling dystopian type stuff. Soon a cell phone will be require…

If I recall correctly, Moxie Marlinspike did a great talk about this idea years ago. How things like having a cell phone are theoretically “optional” yet to be normally integrated into today’s society entirely requires it. This is especially true in these covid-times.

"Changing Threats to Privacy" at Defcon 18.

Re: Privacy-preserving features in the Mobile Driving License

#67

Post by ivan_gammel »

lmz wrote: post #15
ivan_gammel wrote: post #7

This is a very US-centric approach to set a standard for having your ID on your phone. Why not calling it simply Mobile ID and having the driver license as one of the data records or features? That would be more natural design.

It's an ISO standard for a driver's license and the US isn't the only party involved in it (although it may be unique in that it plays the role of a national ID there).

Well, they position it as a general purpose ID solution, mentioning age control, for example.

Re: Privacy-preserving features in the Mobile Driving License

#68

Post by ivan_gammel »

kelnos wrote: post #52
ivan_gammel wrote: post #7

This is a very US-centric approach to set a standard for having your ID on your phone. Why not calling it simply Mobile ID and having the driver license as one of the data records or features? That would be more natural design.

Yeah, I did think it was kinda weird (even as an American) that this is presented as a digital driver's license and not just a digital ID. It's possible that they are afraid the latter will raise more "big brother" type concerns with people in the US, so they're focusing on the DL part of it. I know people who don't have a DL, and instead have a (nearly identical looking, also obtained from the same government agency…

I’ve recently learned that there’s also a national passport card, used by 12 million people in USA at the moment. Is it the same as state ID?

Re: Privacy-preserving features in the Mobile Driving License

#70

Post by WolfRazu »

JoeAltmaier wrote: post #69
WolfRazu wrote: post #24

Earlier quoted context omitted.

The image would still need to match

Which is the easiest thing to change, and no different in this implementation.

It's cryptographically signed by the issuing authority. Nothing can be changed...?
Post reply on HN