51–60 of 263 posts
Earlier quoted context omitted.
Am I missing something? What do you mean the DMV makes tens of millions of dollars a year selling data to itself?
The DMV sells the data you give to the DMV. The DMV does not sell the data you give to the DMV to the DMV.
And again, there will be no monetary consequences for the companies that failed to secure our private data.
Earlier quoted context omitted.
It also dropped off the front page, pretty quickly, despite getting a lot of upvotes and comments. I was surprised by that, as this is exactly the type of story that tends to spend a couple of days on the front page. But it’s also the kind of story that won’t stay down, and will definitely be back. It appears as if there are folks here that don’t want to talk about this.
Was on the front page for ~12 hours. https://hnrankings.com/49529621
But it's still the type of story that should have had a much longer tenure, especially as it was Krebs.
I am now thinking that the access may have been through a backdoor. It certainly seems to have operated like a direct intravenous link.
BTW: Thanks for this link: https://securitywall.co/tools/ipa-analyzer
Looks interesting.
The original idea for the ID verification was broken by design anyway. The only safe and secure way is a chain/tree of trust, e.g. with PKI, where you could generate some certificate just for that particular service, while keeping your root key safe. Then, in the case of leak, the most you lose, is one particular key for one particular service that could be immediately revoked. You could even slap zero-knowledge proo…
I’ve often thought that replacing the US social security number with a more robust root key makes for a fun thought experiment. Hard to imagine how such a system could securely serve so many people but passports with embedded chips seem to be doing okay.
Earlier quoted context omitted.
As a citizen under the France Passoire[1] and in an increasingly fascist chauvinist nationalist drifting in the geopolitical landscape, I wouldn’t be that found of delegating too much of these responsibilities to some centralized governmental institutions. Note that’s this is not here some rant against any governmental power, just that in context, large private group use them as puppets and shrink their budget which…
I live in the UK and was having this exact discussion with someone recently - I'd actually prefer Apple to be the owners of my digital identity over the UK government who would happily throw you in jail for expressing support for Palestine Action.
If anyone has to have this type of control, better it be a local national government that you can in at least some small way influence.
The original idea for the ID verification was broken by design anyway. The only safe and secure way is a chain/tree of trust, e.g. with PKI, where you could generate some certificate just for that particular service, while keeping your root key safe. Then, in the case of leak, the most you lose, is one particular key for one particular service that could be immediately revoked. You could even slap zero-knowledge proo…
Passkey?
Earlier quoted context omitted.
All the kids will be safe now they're logging into porn sites as Pete Hegseth.
Only after they've had their mandatory scrotum inspection and testosterone check to join the military at age 18.
This is a sacrifice we just have to be willing to make as a society if we want to project kids from the horror of using the internet
This is precisely why the authority doing these checks needs to be the government that already issues the IDs . Using ZKP as the EU proposes is the only way to prevent this data being leaked to unreliable third parties and leaves the knowledge with the institution it derives from in the first place . I don't know why HN rails against it constantly, it is the obvious technical and organizational solution to this issue…