Hackers had a live feed of every ID verification company scanned for over a year

Post by trashb » Fri, Sep 04, 2026, 2:14 PM UTC

Tangurena2 wrote: post #105

spuz wrote: post #15

Earlier quoted context omitted.

Am I missing something? What do you mean the DMV makes tens of millions of dollars a year selling data to itself?

I used to work for my state's DMV. They'd sell vehicle registration data to various companies, which is how and why you get those "we've been trying to reach you about your car warranty" phone calls. I don't know about CA, but KY had a problem with tracking who ordered and who paid for that data. When I worked there, we found a number of "purchasers" who only paid for Year 1 but stopped paying afterwards. Federal law…

Post by SV_BubbleTime » Fri, Sep 04, 2026, 2:17 PM UTC

Larrikin wrote: post #133

martyfunkhouser wrote: post #107

Earlier quoted context omitted.

The US Government is one of the reference implementations of PKI. Unfortunately, IDs are issued 50 different ways by the less competent states. Combine that with accusations that getting new IDs constitutes systematic racism (a widely held belief on HN), ignoring that the ruralest of India has been able to do this successfully, and you're not getting digital ID any time soon.

IDs being required for voting is essentially a poll tax the way that it's argued for in the US. There's a minimum amount you have to spend to even get one that will expire in a certain amount of years. That's also assuming you can get all the documents you need for the initial ID. If you don't already have all the essential documents you'll need multiple appointments at government facilities. The local social securit…

Post by mindslight » Fri, Sep 04, 2026, 2:23 PM UTC

vrganj wrote: post #19

saghm wrote: post #5

This is a sacrifice we just have to be willing to make as a society if we want to project kids from the horror of using the internet

This is precisely why the authority doing these checks needs to be the government that already issues the IDs . Using ZKP as the EU proposes is the only way to prevent this data being leaked to unreliable third parties and leaves the knowledge with the institution it derives from in the first place . I don't know why HN rails against it constantly, it is the obvious technical and organizational solution to this issue…

Post by esseph » Fri, Sep 04, 2026, 2:28 PM UTC

jerf wrote: post #84

gonzalohm wrote: post #58

Earlier quoted context omitted.

I think with passkey you don't own the private key. It's in your device and managed by the OS. That's one of the reasons I don't use passkeys (the other being that if I lose the device I can't access my account)

My passkeys are in my self-hosted Vaultwarden. If I can't put them there, I don't use them. It's not all sunshine and roses, though. Despite having Bitwarden set as the only passkey provider in my Android setup, the phone persistently only offers me Google. Which is empty, because as I said, I won't use one tied to things I can't control. Works great on desktops, though. Passkeys can theoretically require you to be o…

Post by hollow-moe » Fri, Sep 04, 2026, 2:28 PM UTC

poilcn wrote: post #94

nope1000 wrote: post #43

Earlier quoted context omitted.

In Google Maps Timeline you can definitely see it (if you set it up and you brought your phone)

Isn't it turn on by default?