Live data from Hacker News

Fury at Facebook as login requests “Government ID”

thedrum.com

191–200 of 233 posts

Re: Fury at Facebook as login requests “Government ID”

#191
I encountered this, perhaps ironically, while attempting to deactivate my long unused Facebook account.

I was able to log in using my credentials (which I store in a keepass database), but since the account had been inactive for so long (I guess?) this was insufficient. After successfully providing my username and passphrase, I was prompted with a security question, the answer to which I did not recall (I had created the account many years ago).

The only remedy, according to Facebook support, was to provide a scan of a government ID (via email, of course). Nevermind that I knew the password. Nevermind that I had access to the email address associated with the account.

I told them I was unwilling to provide this, and they told me I was out of luck. I decided that leaving a phantom, inactive FB account in the wild was better than providing these people with what they wanted, and got on with my life.

After several weeks, I for some reason decided to try again - and at that time all I needed was my passphrase. Why? Who knows. Maybe it was my lucky day.

I don't really know what the takeaway should be, but my personal lesson is that I should probably also store secret questions and answers in a password database, since apparently some services deem them to be required even when I have the passphrase.

Re: Fury at Facebook as login requests “Government ID”

#193
post #89

One of my least favorite memes in western society is that individual people actually believe that the government has some say in defining your name or the boundaries of your family. Everything from the idea of "legally changed his name" to "same-sex marriage" illustrates the problems of turning to city hall for approval or consent of individuals' and families' deeply personal and private matters. I wish the US had tw…

If I have a contract with John Doe, I need to be aware of any name changes of him. How do you identify someone who changes names constantly?

> I need to be aware of any name changes of him

You don't.

You have a contract with the person currently calling themselves John Doe. When they call themselves Jo Doe and then Jack Bob and then etc it's still the same person.

Currently in England you're allowed to call youself what you want, so long as you don't have the intention to deceive. In practice, 'deed poll' or marriage certificate are handy if you want people such as banks or doctors or airlines to actually use your new name.

Re: Fury at Facebook as login requests “Government ID”

#194
post #138

Earlier quoted context omitted.

"identify 5 photos of your friends to gain access" Really? I don't use FB so I can't verify, but that sounds like an epic security hole for prankers, stalkers, ex's, and abusive spouses.

I can confirm that this happened to a friend when accesin facebook from another country. Also I remember reading an article (from HN) where some guy hacked a facebook account (if I recall correctly) and that was one of the steps (he and the hacked one where friends and coworkers so they had lots of friends in commmon)

Hmm, well hopefully just one of many steps and not "that's all it takes".

I'm no FB fan, but if they are using friends pictures as a CAPTCHA to verify the authenticator is a human not a automated computer, I grudgingly tip my hat in respect toward them. That would be much more elegant than the usual lame CAPTCHA.

This strikes me as it may become more of a problem as kids abandon FB and older people use it. The kid I sat next to in middle school lunchroom back when Reagan was president, and I clicked "yes" on his friend request out of guilt, well, I have no idea what the heck he looks like now. Ex-girlfriends? Well, I remember really well how she looked when she was 19, but that was a long time ago, and...

Re: Fury at Facebook as login requests “Government ID”

#195
post #176
post #102

Earlier quoted context omitted.

> Nobody invites anyone to anything without creating a Facebook event. > If I suddenly leave Facebook I am certain I'll also lose out on a lot of social life. This. You can't expect people to set up and populate their own mailing lists to notify everybody they want to invite to their birthday party or share news of their engagement. I hate it too, but the reality is that being off facebook means losing touch with peo…

One could always maintain a very skeletal Facebook account. No "liked" movies, TV shows, etc., one photo, no bio other than whatever is necessary. You wouldn't be contributing much to FB's market research efforts, but that's OK; you'll still be able to connect with schoolmates and cousins and get invited to parties.

That might very well work, but part of the problem would be the content others generate about you. Pictures and video of you, mentions of where you have been and so on.

Re: Fury at Facebook as login requests “Government ID”

#196

Earlier quoted context omitted.

Facebook's problems are their own. Why should HN community bother with their problems? - What's wrong with secret questions?

> Facebook's problems are their own. Of course. > Why should HN community bother with their problems? No one has to, I just like to learn something by solving problems, even when those problems are not mine. > - What's wrong with secret questions? Probably nothing, I just know that I have always entered garbage into secret question fields, because I knew that I'd never be able to remember the correct answer to the se…

"No one has to, I just like to learn something by solving problems, even when those problems are not mine."

I liked your answer, but its not a "facebook problem" its a problem for anyone on the internet who has users log into accounts. Probably a large fraction of HN is directly or tangentially involved with that problem.

Re: Fury at Facebook as login requests “Government ID”

#197
post #135

Earlier quoted context omitted.

These legal ramifications should be either abolished or applied to everyone who applies those titles equally. Anything else is state-sponsored discrimination and harassment, which is our current sad state of affairs.

Your wife can mandate health care when you are otherwise incapable. You have 7 wives. Who has final say. You get a divorce from one wife. What does she get? These are just two things off the top of my head that throw a monkey wrench in things making the 'just abolish it' not quite as simple. As for 'state-sponsored discrimination and harassment' just no. That is people and their attitudes, legality has nothing to do…

> "Blacks weren't seen as equals and without harassment just because slavery became illegal and they could vote. Homosexuality is legal, but again, individuals don't harass based on legal status."

When blacks became legal equals it went a long way towards their being considered cultural equals throughout society. The underlying motives for harassment may not be due to someone's legal status, but the legally endowing someone with less rights because of their race/sex/orientation/etc gives a lot of ammo to people who want to harass them.

> "Your wife can mandate health care when you are otherwise incapable. You have 7 wives. Who has final say."

Unless otherwise specified, the first wife could have final say. Or the last. Any consistent system would work here. Important decisions about your health and property should really be decided and specified in advance by the individual.

> "You get a divorce from one wife. What does she get?"

/ seems reasonable. These are not hard problems. Courts exist to settle exactly these issues.

The parent comment expressed a moral principle that it is wrong for any government to usurp your authority to form relationships according to your own desires or to legally recognize or withhold legal recognition (where necessary) from relationships in which it has no business. You are looking at implementation details and saying that because a change of this magnitude causes some practical problems (which would not be surprising) the moral premise is flawed.

Re: Fury at Facebook as login requests “Government ID”

#198
post #186

Earlier quoted context omitted.

Wouldn't solve the abortion debate. I used to say the same thing until someone explained to me that they are fighting for the same rights of the unborn children. I'm not saying that position is right or wrong; I'm just saying that said position exists.

A person holding to this position will have no problem with a woman wanting to cut off a finger or remove a toe, but as soon as you consider the unborn to be a person that has a body, every right given to someone with a body would be extended to the body in the womb. Not trying to start any debate (I promise), but I would say it does solve the issue with abortion, because there is a human body in the womb, and would…

It does not, because the whole point of the abortion debate is that many people don't think that there is a human body with rights in the womb. The only thing that would 'solve' the abortion debate is clarifying the legal status of unborn fetuses as rights-bearing humans; clarifying the rights of humans without specifying who counts as human is pointless for this purpose.

Re: Fury at Facebook as login requests “Government ID”

#200
post #90

How does Facebook intend to validate these government IDs? I'm pretty sure they can't. They want you to send a scan of some photo-id - that means that all the anti-tamper / anti-forgery tech that might be on the actual ID will be non-existent. If you are lying about who you are, it will take about 10 minutes in photoshop to come up with something that will pass their test. Are there any countries that even provide va…

In Finland, you can validate your identity with your banking authentication. It's a service all the banks provide.
Post reply on HN