Hacker News Reader

Comment by amyjess | Hacker News Reader

Then require the purchaser to provide high-resolution scans of identity documents (both sides, and all pages for multi-page documents) with nothing blocked out at the time of purchase. If the scans don't match your physical documents, you are made to leave the premises.

If they are a US citizen, they must scan both driver's license/state ID/passport/military ID and social security card. If not a US citizen, they must scan their home country's passport and if they come from a country that requires one, their visa.

Also, require the purchaser to type in (not check a box, but actually type the words and disable the browser's paste function) "I swear under penalty of perjury that I will not transfer this ticket to anyone else and that I will do everything I am physically capable of to not let anyone do so on my behalf".

View on HN

> and disable the browser's paste function

This is evil. Browsers should not even permit basic UI functions like paste or context menu to be overridden by arbitrary sites. Fortunately, it's not difficult to put together a script that simulates typing in the contents of the clipboard, which is my go-to solution for sites that disable paste. (Ctrl-V doesn't work? Just press Ctrl-Shift-V instead. It takes a few milliseconds longer but gets the same result.)

> If they are a US citizen, they must scan both driver's license/state ID/passport/military ID and social security card. If not a US citizen, they must scan their home country's passport and if they come from a country that requires one, their visa.

A single decent image of an official photo ID, checked at the gate, should be more than sufficient to prevent unauthorized ticket transfers. However, I would only apply this system to a small minority of discounted promotional tickets; non-promotional tickets should be sold at the fair market-clearing price, freely transferable, and usable by any bearer with no ID verification required.

Shall we send in a stool sample as well?

> Also, require the purchaser to type in (not check a box, but actually type the words and disable the browser's paste function) "I swear under penalty of perjury that I will not transfer this ticket to anyone else and that I will do everything I am physically capable of to not let anyone do so on my behalf".

I don't understand what this is meant to accomplish.

> Shall we send in a stool sample as well?

No, I think a cheek swab should be sufficient.

And what happens when that database leaks?

And this is why you should have good IT security policies from the start. If your database leaks, you done fucked up.

Uh...no.

You could use the same logic to excuse storing passwords in plain text instead of hashes.

You say "good IT security policies", but you really mean "perfect IT security policies"?

Welcome to a totalitarian state

Reply on news.ycombinator.com