Live data from Hacker News

One million passports leaked online

theverge.com

171–180 of 264 posts

Re: One million passports leaked online

#171

Much as passports are very important for proving identity etc, people who travel have had their passport scanned, photographed or photocopied by pretty much every hotel they've stayed in. I'm not sure the shoebox in the backroom in Koh Samui with the photocopies in constitutes good storage hygiene protocols. How that doesn't turn into rampant identity theft I don't know, or maybe it does? Not, happily, for me... yet.

I had my identity stolen this way before.

Since then, I do not allow the scans anymore. It is a dreadful feeling showing up to a hotel not knowing if you'll get turned away at the last minute because you take a stand for your privacy. So far, none have been willing to lose the bookings, but I know sooner or later my luck will run out and I'll have to find last minute accomodations.

Re: One million passports leaked online

#172
post #92
post #11

Earlier quoted context omitted.

How so, are you purely speculating or you found a hole in the zero knowledge proof system some countries are implementing ?

It is not using ZKP. Zero knowledge proof is mentioned as an optional experimental feature in the next release. https://ageverification.dev/av-doc-technical-specification/d...

The specs are for the pilot phase. The faq and other documents state that it will be using ZPK. There is already multiple tech proof of concept, ie: https://github.com/eu-digital-identity-wallet/av-lib-android...

Re: One million passports leaked online

#174
post #147

Earlier quoted context omitted.

[flagged]

I wish people stopped using distracting animations below the text I'm trying to read and comprehend.

I take it as entertainment for a target audience substantially unable to comprehend the text. This helps me decide to pass on this provider.

Re: One million passports leaked online

#175

I have a real problem with the pretense posed by the article that the club has no blame. They should have understood the risk they were taking on by subcontracting a vendor to collect passports, and better vetted that vendor. Obviously the service provider was completely inept, but that doesn't absolve the fools using them. I preach to my clients this sort of PII should be treated as a toxic, hazardous substance. Ide…

Why would they treat it as toxic?

They don't have a moral code, and they don't pay any price for mistakes.

They have zero incentive.

Re: One million passports leaked online

#176
post #165

Ahh so that's what they mean at the reception when they take photo of my ID and say "it's for the police". So that any police anywhere can freely download it at any time!

To be able to push back you should know the law requirements for hotels in that jurisdiction, so they can't gaslighting you with fake "it's for police" reasons.

Ok then. What should I show or say in Spain, Italy, and Croatia?

Usually on plain "I don't consent on making copy, write down the data you need" they become more pushy and even aggressive.

Re: One million passports leaked online

#178

Earlier quoted context omitted.

Different countries handle these things differently, but it's honestly surprising to me that a photo of a passport or drivers license have any value. It provides no security, so why would anyone ever accept it a proof of identity?

> It provides no security, so why would anyone ever accept it a proof of identity? Because there is no other universal method that works online, and because companies don’t really care about identity verification – they just need something “good enough” so that they can say “hey, we’ve followed industry standard protocols, how could we have known this passport scan was photoshopped?” And to be honest I think it’s for…

There's certainly a point to reducing scrutiny online. However when companies are forced to do this verification, I just question why a photo of a password is considered "good enough", when it clearly isn't.

I don't think you should be able to do anything with your passport online. That's a document that should only have value if you're actively holding it in your hand.

Re: One million passports leaked online

#179

Earlier quoted context omitted.

> The family member got the sack. Isn't this classic wrongful termination?

It wasn't worth pursuing, partly because it was a part time job. A bit sad, as the company had promised to sponsor him though further study. It was the right decision, as it turned out to be less effort than a court case to get better opportunities with other companies.

It was the right choice for the individual, wrong choice for society.

Re: One million passports leaked online

#180
>>But how could the company be so careless?

Generally, these systems are designed by people whose only goal is to make money. Security is just treated as a liability until shit actually hits the fan.

Post reply on HN