Live data from Hacker News

Privacy-preserving features in the Mobile Driving License

security.googleblog.com

71–79 of 79 posts

Re: Privacy-preserving features in the Mobile Driving License

#71

Earlier quoted context omitted.

Which is the easiest thing to change, and no different in this implementation.

It's cryptographically signed by the issuing authority. Nothing can be changed...?

The picture is signed? In any case, using an older sibling's ID still works about as good as ever.

Re: Privacy-preserving features in the Mobile Driving License

#72

Earlier quoted context omitted.

It's cryptographically signed by the issuing authority. Nothing can be changed...?

The picture is signed? In any case, using an older sibling's ID still works about as good as ever.

I haven't read the exact spec myself, but I'd be extremely surprised if it wasn't. Unfortunately tech can't solve the problem of doppelgangers without going into biometry, which might be a bit of an overstep for simple ID purposes.

Re: Privacy-preserving features in the Mobile Driving License

#73

Earlier quoted context omitted.

The picture is signed? In any case, using an older sibling's ID still works about as good as ever.

I haven't read the exact spec myself, but I'd be extremely surprised if it wasn't. Unfortunately tech can't solve the problem of doppelgangers without going into biometry, which might be a bit of an overstep for simple ID purposes.

Right, like this whole effort. A bit of an overstep for simple ID purposes, when fundamentally it still depends on somebody looking at the picture and making a call.

Re: Privacy-preserving features in the Mobile Driving License

#74
post #15

Earlier quoted context omitted.

It's an ISO standard for a driver's license and the US isn't the only party involved in it (although it may be unique in that it plays the role of a national ID there).

Well, they position it as a general purpose ID solution, mentioning age control, for example.

There's already an international electronic non-driving-related general ID standard - eMRTD / "ePassport". It doesn't seem like the kind of thing any country would want to put in an app though.

Re: Privacy-preserving features in the Mobile Driving License

#75

Earlier quoted context omitted.

But why? Why do people have to carry a wallet everywhere, unless they want to? I have my payment cards on my watch. Pre-pandemic, my gym membership card was on my watch. If I had my ID on my watch as well, I don't ever have to worry about a wallet being stolen because I wouldn't carry one. Sure, people can steal your watch at gunpoint- but it can be remotely disabled (even if you were forced to give your passcode und…

What if you had a serious business dispute with Apple or Google, and were (justifiably) uncomfortable walking around with a mobile bug running software of their choosing? [1] For most people on this site, this kind of threat is far more likely than the mugging you described. [1] https://www.theguardian.com/technology/2018/mar/16/silicon-v...

There is a standard that allows you to make a compatible implementation on a device without Apple or Google software.

Re: Privacy-preserving features in the Mobile Driving License

#76

Would there be any way for similar protections to come to digital auto insurance cards?

It's such an unusual concept to me that you guys still need to show insurance/registration documents when being pulled over.

Ditch the concept entirely, no need for proof of insurance - either in physical card or digital form.

Re: Privacy-preserving features in the Mobile Driving License

#77

Earlier quoted context omitted.

What if you had a serious business dispute with Apple or Google, and were (justifiably) uncomfortable walking around with a mobile bug running software of their choosing? [1] For most people on this site, this kind of threat is far more likely than the mugging you described. [1] https://www.theguardian.com/technology/2018/mar/16/silicon-v...

There is a standard that allows you to make a compatible implementation on a device without Apple or Google software.

Which device would that be? This is pure interoperability theatre by a duopoly.

Re: Privacy-preserving features in the Mobile Driving License

#78
post #47

Earlier quoted context omitted.

A pretty common way to get a fake id is to borrow a real id from someone else. Bouncers ask you how old you are or what your house number is as a check on that. That seems like a plausibly useful feature, or are there other ways to tell that the virtual id matches the real person holding the phone?

Is this common, though? In my 18 years of legally entering bars, that has literally never happened to me, even when I was in my early 20s.

I don't know how common it is. It does happen, though. It probably depends a lot on the bouncer's impression of how old you likely are and how much you look like your license photo.

I changed hairstyles dramatically between my license photo and age 21, so I had my license challenged a significant (probably single-digit percentages) number of times until I got a new photo in my mid-20s.

Re: Privacy-preserving features in the Mobile Driving License

#79

Earlier quoted context omitted.

But why? Why do people have to carry a wallet everywhere, unless they want to? I have my payment cards on my watch. Pre-pandemic, my gym membership card was on my watch. If I had my ID on my watch as well, I don't ever have to worry about a wallet being stolen because I wouldn't carry one. Sure, people can steal your watch at gunpoint- but it can be remotely disabled (even if you were forced to give your passcode und…

What if you had a serious business dispute with Apple or Google, and were (justifiably) uncomfortable walking around with a mobile bug running software of their choosing? [1] For most people on this site, this kind of threat is far more likely than the mugging you described. [1] https://www.theguardian.com/technology/2018/mar/16/silicon-v...

Presumably you aren't in dispute with everyone, so you can use a phone from a company other than the one you're in dispute with.

Eg. If you're an ex-Google employee or contractor, use a personal iPhone without any Google apps on them.

Post reply on HN