Live data from Hacker News

The Future of Online Identity Is Decentralized

yarmo.eu

181–190 of 202 posts

Re: The Future of Online Identity Is Decentralized

#181
post #95

Have worked in the identity space for a long time. Authentication isn't a hard problem, but identity is. It will be decentralized because if it is not fragmented, it is literally just oppression. Trusting authentication is not trusting identity, and the origin of identity is the Ur-problem because it comes down to questions of recourse, collateral, risk, authority, and legitimacy - which are all political economy que…

It will be decentralized because if it is not fragmented, it is literally just oppression. I've never understood that way of viewing things. For me identity is a right. The government must provide me with the means to prove who I am and my associated data like birth certificates, academic titles, health (vaccination), real estate and indirectly verifying identity for private contracts that use my national id card num…

It's interesting how different countries treat "names" in different ways. In the UK, for instance, changing your name is super easy. You tell the government your name is now Foo Bar, and you're done. They'll update their pointers and issue new documents.

In Belgium, changing your name is virtually impossible. The king (ostensibly) has to grant permission; you need to provide a "valid reason". This never made sense to me.

Re: The Future of Online Identity Is Decentralized

#182
post #166

Have worked in the identity space for a long time. Authentication isn't a hard problem, but identity is. It will be decentralized because if it is not fragmented, it is literally just oppression. Trusting authentication is not trusting identity, and the origin of identity is the Ur-problem because it comes down to questions of recourse, collateral, risk, authority, and legitimacy - which are all political economy que…

What is the Ur-problem? I googled it and the top result was this post.

It means approximately "the original problem", i.e. where the problem ultimately stems from.

The prefix "ur" is derived from old high German "ur", old Nordic "ōr" or Gothic "us": "from, out of".

That there's an ancient city of that name is purely incidental.

Re: The Future of Online Identity Is Decentralized

#183

Earlier quoted context omitted.

Why not do both? As you say, using your real name builds your brand. However, you must then be very careful to avoid saying stuff that damages your brand. And as you basically say, you must therefore censor yourself online. So why not do other stuff using pseudonyms? That's exactly why I started using them. I'm retired now, so there's really nothing about my meatspace identity to protect. But when there was, having t…

I've given this a lot of thought (I also practice what I preach - I 95% post under my real name). I advise against that, because in my experience, when you have a real name and a pseudonym account, there's a strong temptation to post all your edgy, attention-grabbing content to the alt, and all the boring content to your real name account. Which is really bad for your main account, actually. Note that some of the mos…

That works for some, but for others it's been disastrous. And sometimes, it goes from popularly edgy to canceled in a flash. But yes, I agree that keeping a real name account totally boring is also risky.

Re: The Future of Online Identity Is Decentralized

#184

Earlier quoted context omitted.

I want to express a frustration with this type of response I have. Inevitably, when this topic of discussion comes up, I almost always see a response of this type, calling into question the entire foundation of the USA on the basis of the founding brothers being white slave owners, and it really bugs me, but I'm having a hard time trying to articulate it well... I think it mostly centers around a very superficial und…

My main point was that there's been plenty of oppression in the US despite it being to some degree a democracy. It doesn't sound like you're actually disputing my main point at all, but wanting to shift the discussion on to whether the American system of government needs to be replaced and why, which is really off-topic. Still, in response to your tangential point, I want to make clear that I'm not advocating discard…

I guess you are right I wasn't really disagreeing with you too much, but rather pointing out that I see this type of response very often, but without the more in-depth discussion as you and the other commentator go into.

So to use your example of more democracy. One of my pet peeves is when people say we are a democracy. We are a constitutional democratic republic to be precise. There are elements of democracy, but we elect representatives. The problem to me is that the representatives no longer represent us. If you consider moving them towards representing the people democracy than I am all for that. What I am not for is a move towards rights of groups as opposed to individuals, because history has shown that ends up being abused.

All in all, I hope that reform is possible, but it is hard to see the pragmatic path there with how bad the system is currently, so we agree there. I just hope it doesn't devolve too much, because if it does, in this age of technology it will be extremely bloody for all involved.

Re: The Future of Online Identity Is Decentralized

#185

Earlier quoted context omitted.

>All the use cases for digital identity are about enforcement and liability, and there are almost none that anyone would volunteer for. Everything from a LinkedIn or Facebook account to your personal artist homepage with your CV on it establishes identity. People obviously disclose identity voluntarily, because identity is the primary means by which strangers establish trust. If your identity is not transparent to me…

> If your identity is not transparent to me, I won't enter a relationship with you that requries me to know who you are, which in practice is almost every one. There are two things about this that don't require centralized identity. The first is that it's very commonly not true at all. If you want to sign up for an account for an online service (e.g. email, YouTube, gaming), they don't need the name on your driver's…

But again, in practice banks will loan more money more easily to those with a verified identity that has recourse beyond simple "loss of creditworthiness", so those loans will always be more appealing to those who can get them, and so nonrecourse loans never become a thing for normal citizens who can avoid them.

And those who can't get shunted down into the "Payday Loan" tier of finance and they have to dig themselves back out with the equivalent of deposit-backed credit cards.

But few people will choose a deposit-backed card when they have the option of trading identity for better pricing / convenience. If the online ad industry has taught us anything it is that mainstream consumers will trade their data for even the smallest of considerations.

Even if decentralized financial identity would be an improvement (and it is not clear that it would be), a vision with no practical incentive to get there from here is just the basis for another startup destined for whatever is the spiritual successor to f*ckedcompany.com.

Re: The Future of Online Identity Is Decentralized

#186
why isn't there an OAuth system that is purely GPG keys based. For example I could sign some custom message from the server using only my keys, without ever having to deal with emails.

This way sign-up is as seamless as login. Is there anything like this I can use? Are websites not doing this because of spam and other issues?

Re: The Future of Online Identity Is Decentralized

#187
post #186

why isn't there an OAuth system that is purely GPG keys based. For example I could sign some custom message from the server using only my keys, without ever having to deal with emails. This way sign-up is as seamless as login. Is there anything like this I can use? Are websites not doing this because of spam and other issues?

You may be interested in https://indieauth.com/pgp

Re: The Future of Online Identity Is Decentralized

#188
post #187
post #186

why isn't there an OAuth system that is purely GPG keys based. For example I could sign some custom message from the server using only my keys, without ever having to deal with emails. This way sign-up is as seamless as login. Is there anything like this I can use? Are websites not doing this because of spam and other issues?

You may be interested in https://indieauth.com/pgp

exactly what I was looking for. thanks!

Re: The Future of Online Identity Is Decentralized

#189
post #85

I feel like a domain is a nice way to link identities, with a small nominal fee being a nice deterrant to botting. Not the most user-friendly for those not tech savvy, but third-party services could help with setting up such sites. Make a page on your domain with rel=me links to your social media profiles, have the social media sites link back to your site with a verified symbol next to the link when it scans and val…

Do you work for a domain registrar?

$10/year * 4 Gigapeople online.

Mandate that much free revenue to the likes of godaddy? No thanks.

Re: The Future of Online Identity Is Decentralized

#190
I believe that in this day and age we probably all need at least two identities: the birth/official transparent, trusted one for official/professional use and an anonymous one for unofficial/online things.

But this is because I think nobody should be fired, de-platformed, banned or "canceled" for opinions/thoughts outside of those contexts.

Sure you could be fired from your work if you started shouting your opinions on your workplace. No you shouldn't be fired from your work for anything that happened outside that work.

Anonymity is needed for the sake of free thinking as a shield to any current/future mob that could ruin your life/career for just any reason at all.

In 10 Years you might find yourself ostracized because someone found some 20yo old snippet of code you wrote with "banned words" in them.

I used to think it was an acquired thing that you could have free opinions with your official identity (political or anything) and not risk your livelihood for opinions but the thought enforcing mobs are now everywhere and most companies will bend the knee to their bidding.

And obviously this identity needs to be decentralized to also protect that identity itself from being ruined by the various de-platforming attempts.

These days, I'm genuinely more concerned about the current mob rule mentality than government oppression.

Post reply on HN