121–130 of 259 posts
Earlier quoted context omitted.
How does this apply to a digital version of an official government ID? The government already has all this data.
I didn't say anything about the data the government has or doesn't have. I'm talking about perfect enforcement. Try faking a digital ID.
Earlier quoted context omitted.
> Reading the passport and its chip implies some terminal authentication capabilities coming from Apple devices They’ve had some form of this for ages with Apple Pay
Sorry I was meaning to say "passport terminal" capabilities which would require a cert to be issued by a country whose passport chips you want to read. Well maybe they had this for a while but AFAIK you could not read passport details with an apple device before
It seems (again, if I'm reading correctly) that you only really need a private key in order to issue a passport.
Earlier quoted context omitted.
Sorry I was meaning to say "passport terminal" capabilities which would require a cert to be issued by a country whose passport chips you want to read. Well maybe they had this for a while but AFAIK you could not read passport details with an apple device before
From that article it looks like all you need to establish a secure connection with the passport is some data that is printed in plaintext on the photo page. It seems (again, if I'm reading correctly) that you only really need a private key in order to issue a passport.
Issuing a passport is a different issue entirely, since you need a country's document signing key.
There was a post from trailofbits blog recently about how passport crypto works. Kind of related here. I wonder if this is some zero knowledge proofs here or what? Reading the passport and its chip implies some terminal authentication capabilities coming from Apple devices. Passport would not allow reading sensitive data from the chip unless the terminal is valid. Another question is if Apple is allowed to read your…
I still find it bonkers reading passport doesn't validate it against it some centralised database. Like, $1 in your bank account and a credit card is more advanced than a passport.
(There are national-level databases, but presumably not every country has access to every other country's database.)
Earlier quoted context omitted.
Only if you're being arrested. If you're at a traffic stop or tons of other scenarios would never need to.
It's normal for police at a traffic stop to take your license back to their car while they write a ticket or whatever. Until laws change, having your only license on your phone means handing your phone to an officer until they are satisfied they no longer need it.
The people building this know nobody wants to hand their phone over to the police.
I'm really wary of these initiatives, because perfect law enforcement is how society ossifies. Imagine if we could prosecute all homosexual tendencies when they happened, or all interracial relationships, or any other antiquated law. Society would never progress. What happens if the government can now perfectly enforce that people under 18 can't do X or Y?
How does this apply to a digital version of an official government ID? The government already has all this data.
Earlier quoted context omitted.
How does this apply to a digital version of an official government ID? The government already has all this data.
Governments aren’t just rolling out Digital IDs. They’re rolling out the platform to enable them to require that you authenticate with a range of apps and websites, ostensibly to keep children safe, with the real purpose being to link your unique identifier to all your online activity. They can then easily build an overall picture of who you are from that ID. Potentially, all this data can be fed into a pre-crime AI.
Earlier quoted context omitted.
I still find it bonkers reading passport doesn't validate it against it some centralised database. Like, $1 in your bank account and a credit card is more advanced than a passport.
Passports are inherently decentralized, which is needed because not all countries cooperate with each other - or have the same budget for technology/security. It's really way something at global scale could work. (There are national-level databases, but presumably not every country has access to every other country's database.)
Countries don't need access to database. They need to validate public key / hashsum is valid (or something along those lines).
I’m still waiting for the day where 100% of state drivers licenses are supported in wallet and anyone requesting ID are required to accept them. Quite literally the only reason I have a wallet these days is for the drivers license.
My bank, however, has one of those authenticator doohickies that I need to use when I make big transactions online. Pop my debit card in, enter the pin, and then do a little dance with codes back and forth on their internet banking to authenticate the transaction.
So I am in this annoying situation where my wallet is never where I needed it: either I'm making a payment and I need to go to my car to get my card, or I need my license and my wallet is on my desk where I forgot it last time.
Google Pay and digital wallets have literally freed up one of my jean pockets permanently.
I'm really wary of these initiatives, because perfect law enforcement is how society ossifies. Imagine if we could prosecute all homosexual tendencies when they happened, or all interracial relationships, or any other antiquated law. Society would never progress. What happens if the government can now perfectly enforce that people under 18 can't do X or Y?