Live data from Hacker News

FalsiScan: Make it look like a PDF has been hand signed and scanned

gitlab.com

291–300 of 399 posts

Re: FalsiScan: Make it look like a PDF has been hand signed and scanned

#292

Earlier quoted context omitted.

>they can simply mail you a unique qr code which you could then scan and complete the process entirely online. Or at a minimum bring physically to an office. How is that any different than bringing any other piece of official mail that you receive at your home address?

Because it actually validates your address. Plenty of “official mail that you receive at your home address” can be accessed (or produced) without access to the listed address, but you can't spoof knowing information that you never received.

It would be reasonably easy to check my mail before I do every day.

Or maybe I conspire with someone that doesn't live here but wants to appear to live here (which can obviously also be done with utility bills).

I'm all for making it as easy as possible to vote, I'm analyzing the properties of the piece of mail that the government sends.

Re: FalsiScan: Make it look like a PDF has been hand signed and scanned

#293
post #89

Earlier quoted context omitted.

I have a png of my signature, and I just paste it into the pdf, and submit that. Haven't run into a complaint yet, and I don't have to print anything.

Just a couple months ago I had a couple of forms rejected with a note “needs wet signature” They were for a 401(k) plan I was updating RMD choices. I got the PDF form from their site, filled it out in Preview, pasted my signature PNG, and used an app on my phone to fax it(!) to their number. Got rejected. Had to actually print the damn things and sign them with a pen, scan them again with my phone’s camera, and re-fa…

How wet ? You could add a "splash" effect on top of the signature

Re: FalsiScan: Make it look like a PDF has been hand signed and scanned

#294
post #95

I had another version of this at the DMV. They needed to see bills that offered proof of my residence (ie power/water/etc). Turns out they wanted them to be mailed to you, which wasn't going to work because I do paperless billing for everything. So I printed them out and tri-folded them as if it had been in an envelope. People in front of me in line got turned away for using printed bills, but mine worked just fine.

> They needed to see bills that offered proof of my residence (ie power/water/etc). Turns out they wanted them to be mailed to you, What state? Certainly, that's neither in the Federal REAL ID requirements (more stringent than most preexisting state requirements) nor most states implementation of REAL ID (which can be narrower than what REAL ID allows.) E.g., California, for REAL ID, requires documents (not necessari…

I've made a couple attempts in the past to learn why proof of one's address was considered important in the REAL ID spec yet proof that is (and was in 2001) often easier to fake than obtain honestly is accepted. Each time I've come up short. Previous state IDs I got in two states did not demand any proof of my address that I can recall.

Is there a good explanation of the reasoning behind this requirement documented somewhere?

Re: FalsiScan: Make it look like a PDF has been hand signed and scanned

#295
post #32

I really hate dealing with my printer (or any printer for that matter), so I make pretty liberal use of my drawing tablet at this point. I import the PDF into Krita, use the ballpoint pen brush, and sign. I export to PNG, then use an imagemagick script to rotate it some random number between 1-3 degrees, and add noise onto it to look like a scan. It's a pain, but it's still less annoying than dealing with a printer.

I use Figma quite a bit for this. Just make my signature a component and drop it in where I need it.

Used to use Photoshop where I just made my signature a custom brush.

Disclaimer: I work for Figma.

Re: FalsiScan: Make it look like a PDF has been hand signed and scanned

#296

Earlier quoted context omitted.

There's also this website which I've used successfully with many bureaucracies. https://www.scanyourpdf.com/

I've seen this one, I think it was on HN about a year ago, but a lot of the forms I've been signing in the last year have been stuff containing a fair amount of personal information (e.g. wife's immigration stuff, refinancing a house, banking annoyances, etc.). I can't really audit the code for an online service, and I find it unlikely that either Krita or ImageMagick are sending this information externally, consider…

https://news.ycombinator.com/item?id=23157408

Github repo: https://github.com/baicunko/scanyourpdf

But yeah, the security implications of uploading a PDF with your SSN and signature to a random website is, um, not good.

Re: FalsiScan: Make it look like a PDF has been hand signed and scanned

#297

Earlier quoted context omitted.

Yes, they also do this for ID's, and for voter ID's. It's specifically created to prevent people whom don't have only 1 permanent address,with paper billing, being able to live their daily lives. I had to go to a local county courthouse 4 times to get a "realid" and to renew a driver's license. I had to call all sorts of people to get printed statements sent to me. It's incredibly ridiculous, I would call it complete…

It's also designed to make sure that poorer people who don't have stable, permanent housing have a tough time

I think the mechanism is indirect. After 9/11, Congress wanted to make it difficult to falsify IDs. The optimization was to maximize the probability that an ID is real and correct if an ID is presented to board a plane. Unfortunately there’s was no constraint that the process shouldn’t prevent people from getting IDs or make it easy. Poor people don’t have enough of a voice for Congress to care.

Poor people are excluded via apathy not malice

Re: FalsiScan: Make it look like a PDF has been hand signed and scanned

#298

Earlier quoted context omitted.

In fact postal services in many countries do function as banks. When I was a primary school student in South Korea, we all made a savings account at the local post office and learned about how banks work and the importance of saving money.

I've never understood this. There doesn't seem to be a natural synergy between delivering mail and storing money. Is it just because post offices are everywhere? Why not make court houses banks? At least they would have security. Or town halls? It just feels kinda random.

Because in some countries it is/was rather common to receive payments (most often pension payments) in cash that where delivered by the postman. That's why it makes sense in a way.

Re: FalsiScan: Make it look like a PDF has been hand signed and scanned

#299
post #225

Earlier quoted context omitted.

The point isn't to prevent a skilled attacker. The point is to prevent casual lying and low-skill fraud. Most people who lie/cheat/steal do so because it's easy or because they're dumb. Your QR code idea will cost more money to implement and won't block skilled attackers either, as it doesn't take a genius to figure out a way to get mail from a mailbox you don't own. Utility bills are the DMV's equivalent of a cheap…

> it doesn't take a genius to figure out a way to get mail from a mailbox you don't own iirc stealing other people’s mail by tampering with a mailbox is a ~~felony~~ federal crime. If they threw out the mail and you went through their trash it might be different. I anal though.

And election fraud isn't a crime or even a felony? If one is going to commit one of those things, would the threat of another charge REALLY stop them?

Re: FalsiScan: Make it look like a PDF has been hand signed and scanned

#300
post #240

Earlier quoted context omitted.

It's also designed to make sure that poorer people who don't have stable, permanent housing have a tough time

I wouldn't say it's intentionally designed to do this, but that it's a consequence. There's no good reason anyone would intentionally want to keep the poor poor, it's just bad design.

> There's no good reason anyone would intentionally want to keep the poor poor

That's not what Karl Marx said

https://en.m.wikipedia.org/wiki/Reserve_army_of_labour

Post reply on HN