11–20 of 64 posts
Is there any verification / info other than a tweet?
As a Stripe Atlas customer, I received a snail mail letter from Stripe about this issue. It included some suggestions from them to prevent identity theft. As I texted a tech friend of mine: if I’m receiving a physical letter from a leading tech co like Stripe, then it’s at least a moderately serious issue.
Earlier quoted context omitted.
As a Stripe Atlas customer, I received a snail mail letter from Stripe about this issue. It included some suggestions from them to prevent identity theft. As I texted a tech friend of mine: if I’m receiving a physical letter from a leading tech co like Stripe, then it’s at least a moderately serious issue.
Google sends Google adwords ads with physical letters in Germany at least.
Earlier quoted context omitted.
Google sends Google adwords ads with physical letters in Germany at least.
What does it mean to send an "adwords ad"? Has Google branched out from digital advertising and started distributing ads via the mail?
I agree with https://twitter.com/constmontague/status/1213309357204688899 "... we need a new personal identifier, SSNs are all stolen at this point" Though identity and authentication should be different things, as an identifier the only real problem with SSNs is that we should be using UUIDs instead. The hard part is authentication, which should have a far more secure process than merely knowing 9 digits everyone (r…
Maybe it would be more clear if I used some examples. Identity: mjevans on news.ycombinator.com Authentication: is allowed to post as (Identity), is allowed to vote on things, etc. Identity alone should not imply authorization, when someone is asking for a proof of identity what they really want is a record that you are actually an identity (authorization).
I agree with https://twitter.com/constmontague/status/1213309357204688899 "... we need a new personal identifier, SSNs are all stolen at this point" Though identity and authentication should be different things, as an identifier the only real problem with SSNs is that we should be using UUIDs instead. The hard part is authentication, which should have a far more secure process than merely knowing 9 digits everyone (r…
If you solve that, you'll unlock an entire business model centered around "anonymous entities that can be regenerated at any time using a biometrics booth at the mall and a secret passphrase known only to you".
I agree with https://twitter.com/constmontague/status/1213309357204688899 "... we need a new personal identifier, SSNs are all stolen at this point" Though identity and authentication should be different things, as an identifier the only real problem with SSNs is that we should be using UUIDs instead. The hard part is authentication, which should have a far more secure process than merely knowing 9 digits everyone (r…
Can we calculate reproducible cryptographic private keys from fingerprints? If you solve that, you'll unlock an entire business model centered around "anonymous entities that can be regenerated at any time using a biometrics booth at the mall and a secret passphrase known only to you".
Earlier quoted context omitted.
Can we calculate reproducible cryptographic private keys from fingerprints? If you solve that, you'll unlock an entire business model centered around "anonymous entities that can be regenerated at any time using a biometrics booth at the mall and a secret passphrase known only to you".
That's even worse. Impossible to change fingerprints if a malicious party has your biometrics.
Earlier quoted context omitted.
That's even worse. Impossible to change fingerprints if a malicious party has your biometrics.
Secure enclave like with Ios is an option. You never give your biometrics away.