Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Federal Right to Privacy Act – Draft legislation

righttoprivacyact.github.io

Post reply on HN
Print view View original

11–20 of 79 posts

Re: Federal Right to Privacy Act – Draft legislation

#11

Post by JoshTriplett »

panny wrote: post #10

>Update CAN-SPAM for one-click deletion of email addresses from databases. Then how can I know not to send you another email if I don't have your email flagged in my database to do-not-send?

You delete the rest of your spam database and replace it with `fn can_send_spam(_: Email) -> bool { false }`. You delete the "can we spam you" checkbox from your checkout page and replace it with "return false".

For legitimate newsletters and similar: you delete any and all forms that allow signing up to receive emails without affirmative consent from that email address that they want to receive mail, and you offer a one-click effective-immediately "unsubscribe" to retract that consent at any time. Then, you can tell if you can send someone mail based on whether they're in your database of people who have explicitly consented to send you mail, and you don't ever send email to anyone else other than one-time consent requests and order-confirmation-style transactional mail.

The only legitimate database of emails is "these people have explicitly confirmed to us that we can email them"; any other database is radioactive waste, delete it.

Re: Federal Right to Privacy Act – Draft legislation

#13

Post by abound »

panny wrote: post #10

>Update CAN-SPAM for one-click deletion of email addresses from databases. Then how can I know not to send you another email if I don't have your email flagged in my database to do-not-send?

Wouldn't a hash work great for this purpose? I.e.

1. User requests for email alice@example.com to be removed from database

2. Company removes "alice@example.com" from 'emails' table

3. Company adds 00b7d3...eff98f to 'do_not_send' table

Later on, the company buys emails from some other third-party, and Alice's email is on that list. The company can hash all the email addresses they received, and remove the emails with hashes that appear in their 'do_not_send' table.

You'd have to normalize the emails (and salt the hashes), but seems doable?

Re: Federal Right to Privacy Act – Draft legislation

#14

Post by buzer »

kg wrote: post #6

Does anyone know what this part means? > Require Social Security Numbers to authenticate preventing fraud. There's a ton of stuff piled into the agenda on this page but that one in particular stumped me. Is it proposing that people (who?) are required to use their SSN to authenticate (for what?) or that the SSN agency is supposed to authenticate... something before doing something?

The bill text is at https://github.com/righttoprivacyact/bill/blob/main/bill/rig...

It contains following:

> (i) Finance and high-risk identity proofing.—No person shall extend credit, originate a loan, open a high-risk financial account, or provide another high-risk financial service based solely on a Social Security number, static identity information, or an uploaded image or copy of a government-issued identity document. A person engaging in such activity shall use multi-factor identity verification reasonably designed to verify both record consistency and claimant control, using less intrusive reasonably reliable methods where available.

> (j) Social Security number not sufficient identity credential.—A Social Security number, taxpayer identifier, or similar identifier shall not by itself be treated as proof of identity for purposes of this Act.

So, to me at least, it sounds like they actually mean "Providers must not use SSN for authentication (including fraud)".

Re: Federal Right to Privacy Act – Draft legislation

#15

Post by JumpCrisscross »

chzblck wrote: post #5
Nevermark wrote: post #4

Earlier quoted context omitted.

You are saying exactly, and I mean exactly, what they would want. Dismissing an avenue of progress outright is to be defeatist or to sow defeat. AI is going to use all this information against us. Because AI alignment can’t be better than people and corporations deploying the AI. Lack of privacy is now a gaping security hole, being continually exploited on all our devices, across most sites on the internet. [EDIT: An…

Google, TTD, Applovin, Magnite, Roku, Freewheel, + 100 more adtech and martech companies. Lets add Facebook, twitter, openai, claude + all the others. then lets add Flock, Palantir. Do you honestly think the lobbying from them would be more or less if this bill gained any traction?

> Do you honestly think the lobbying from them would be more or less if this bill gained any traction?

Small communities are thwarting these companies’ datacenter buildouts. The difference is they show up. Defeating privacy in tech is easy because there is no functional opposition.

Re: Federal Right to Privacy Act – Draft legislation

#16

Post by Spivak »

Defining a picture of your government id not being a sufficient credential for… well anything would probably be enough to kill all these age verification laws and might get some traction legislatively if you frame it right.

It has the benefit of being literally true, whoever thought the was necessary to have a bunch of hard to forge security measures on IDs which require physical inspection probably wouldn't be okay with easily faked scans being accepted.

Re: Federal Right to Privacy Act – Draft legislation

#17

Post by rexpop »

Nevermark wrote: post #7
chzblck wrote: post #5

Earlier quoted context omitted.

Google, TTD, Applovin, Magnite, Roku, Freewheel, + 100 more adtech and martech companies. Lets add Facebook, twitter, openai, claude + all the others. then lets add Flock, Palantir. Do you honestly think the lobbying from them would be more or less if this bill gained any traction?

Of course they are going to resist. That is the terrain. That doesn’t change the critical need to make progress. Surrendering power, even when apparently outgunned, is a far more insidious enemy than opposition.

Amen! And, in fact, the harder they fight, the harder our resolve.

Re: Federal Right to Privacy Act – Draft legislation

#19

Post by samename »

Of course, I’m absolutely for this. It is way overdue. But, what’s the group behind this? Who’s pushing it?

I haven’t read through the bill and text yet, but credibility is important in this fight. Plus, this can change at anytime, so knowing who’s behind it amplifies the trust.

We need to be having these conversations yesterday. Our fundamental freedoms are under attack, and a bill like this would go a long way to protecting future generations

Re: Federal Right to Privacy Act – Draft legislation

#20

Post by ArchieScrivener »

maxrmk wrote: post #18

The bill bans making access to a service contingent on consent. This would kill Gmail, Google Maps, Facebook, Instagram and basically every other ad supported service. Making subscriptions the only consumer business model would be bad imo.

How is paying for a product instead of being the product a bad thing?
Post reply on HN