Live data from Hacker News

The 'papers, please' era of the internet will decimate your privacy

expression.fire.org

641–650 of 655 posts

Re: The 'papers, please' era of the internet will decimate your privacy

#642
post #640

Earlier quoted context omitted.

Thinking about this further: it looks to me like we can fully prevent proxy attacks if we assume secure hardware handling the cryptography on the client side, and send an encrypted sessionid to the client after verification. The reason is that: - We send a random number from the server at the beginning which is associated with the session, so a proxy can't just replay the encrypted proof. - We pass the server key int…

This would not be anonymous and would allow website owners to uniquely identify the hardware used to authenticate. So, once again: you can have a secure system XOR you can have anonimity.

Well it would be anonymous because the client public key is randomly generated every time, and the zk proof doesn't include the identifier.

Re: The 'papers, please' era of the internet will decimate your privacy

#643

Earlier quoted context omitted.

The government could start by undoing cuts to food aid programs. https://frac.org/hunger-poverty-america >Children: 14.1 million children lived in households that experienced food insecurity, a slight increase from the 13.8 million children reported in 2023. This is something the government can actually fix without eliminating the first amendment. Rampant food insecurity in young people probably has more to do with d…

Unfortunately, this is incorrect. There has not been significantly increasing food insecurity since ~2004. This food aid problem was created incredibly recently, and is unlikely to have anything to do with the topic at hand at all. Please, try to stay on topic. I doubt you honestly thought that was the issue.

If you want my ultimate opinion on if the government should highly regulate the Internet with forced ID requirements, my answer is no regardless of the justification.

Because then you need to ban VPNs to stop users from bypassing ID verification.

My point is the government should fix issues within it's power to solve.

Food insecurity is solvable, and kids who know where they're next meal is coming from will be nicer people. Online and off.

Re: The 'papers, please' era of the internet will decimate your privacy

#644
post #640

Earlier quoted context omitted.

This would not be anonymous and would allow website owners to uniquely identify the hardware used to authenticate. So, once again: you can have a secure system XOR you can have anonimity.

Well it would be anonymous because the client public key is randomly generated every time, and the zk proof doesn't include the identifier.

If the public key signature of that random public key can't be uniquely identified as belonging to a particular device (allowing for a device to be revocated), then all it takes is 1 compromised phone to make the system insecure ...

(to say nothing of the fact that because of EU regulations the secure element is not app accessible on either apple or android. So you won't just be dependent on Google/Apple, you'll be using their APIs (which report every authentication to them) every single time an ID is needed)

If you can identify the device even just with a unique identifier, it's not anonymous.

Re: The 'papers, please' era of the internet will decimate your privacy

#645
post #644

Earlier quoted context omitted.

Well it would be anonymous because the client public key is randomly generated every time, and the zk proof doesn't include the identifier.

If the public key signature of that random public key can't be uniquely identified as belonging to a particular device (allowing for a device to be revocated), then all it takes is 1 compromised phone to make the system insecure ... (to say nothing of the fact that because of EU regulations the secure element is not app accessible on either apple or android. So you won't just be dependent on Google/Apple, you'll be u…

I already described in detail how to do revocations despite the website not being able to identify the device.

The whole point of zero knowledge is that you can prove you have possession of information with particular properties, without having to actually reveal the information. I explained how to use this in my first reply to you. You're just repeating your claim without bothering to understand the first thing about the technology I'm talking about.

Age verification itself is a change to regulations. Obviously to make a private system, our regulations would have to change in a way that allows that, instead of in a way that destroys all privacy as they're attempting now.

Re: The 'papers, please' era of the internet will decimate your privacy

#646
post #322

Earlier quoted context omitted.

You miss the point - they are stitching it all together in a way that deanonymize you to your ISP under the guise of save the kids and then convenience

Isn't this already the case in a lot of the Continent? I was just in CH and it seemed impossible to have anonymous Wi-Fi without a Swiss SMS or a airline boarding pass.

s/SMS/SIM

Re: The 'papers, please' era of the internet will decimate your privacy

#647
post #328

Earlier quoted context omitted.

You aren't required to identify yourself to get a phone. You can get a prepaid phone with no ID. You are required to identify yourself for an electricity account because it is essentially extending you credit. You use the electricity first, and then they bill you for it later. They also only identify the person who is receiving the bill. You could have a house with a dozen people in it but the electric company only k…

> You aren't required to identify yourself to get a phone. You can get a prepaid phone with no ID. Requiring ID to buy a prepaid SIM card has become the norm across the developed world. There are still a few holdout countries, but they won’t hold out for long.

Maybe so, but here in the USA I can walk into a 7-11 right now and buy a prepaid phone with cash and no ID.

Re: The 'papers, please' era of the internet will decimate your privacy

#648

Earlier quoted context omitted.

Creating a surveillance state isn't going to solve human trafficing.

As the parent poster pointed out, doing nothing and pretending this doesn’t happen doesn’t fly anymore. I guess, welcome to the middle age of tech? The part where you have to pick up the pieces and clean up the mess that you see around you.

No one is saying we should do nothing. Denying an obviously bad option doesn't perclude others.

Re: The 'papers, please' era of the internet will decimate your privacy

#649
post #530

Earlier quoted context omitted.

Creating a surveillance state isn't going to solve human trafficing.

Allowing the relevant authorities to control, shut down and arrest serious crimes doesn't turn a country into a surveillance state. Poor surveillance controls do though - let's perhaps fix those instead of allowing garbage like Flock to spread and then hand wring? EU started with GDPR, let's see others follow and build on it?

Who gets to decide which crimes are serious enough to warrant the types of actions being advocated for? Who is going to implement and regulate such controls? Our governments have shown their willingness to violate those controls any time they see fit and are not held to account. Do you honestly believe that you could never end up on the bad side of that deal?

Re: The 'papers, please' era of the internet will decimate your privacy

#650

Earlier quoted context omitted.

How is it possible to have something that both proves something about your identity but also does not allow ANYONE to deanonymize you?

That's probably too high a bar anyways? It's not like we have that today either.

Possibly aspirational.
Post reply on HN