Comment by toomuchtodo | Hacker News Reader

Comment by toomuchtodo | Hacker News Reader

Parent Full thread

Login.gov is a thing (and over 300 federal agencies use it as their idp as of this comment). USPS provided identity proofing in person for it. All federal gov agencies are moving towards it. The "right" way would be a national smart card ID system like Estonia has (built on cryptographic primitives), but you have a cohort of crazies who think it's the "mark of the beast" and other wild tales. So, we walk when we could run. This problem is at the people/policy OSI layer.

The Defense Dept already does this: CAC/common access cards [1]. Create a civilian root and do it already. A PIV/CAC can also be used as an auth factor with Login.gov [2].

[1] https://www.cac.mil/common-access-card/

[2] https://www.login.gov/help/get-started/authentication-method... (Physical PIV (personal identity verification) cards or CACs (common access cards) are secure options for federal government employees and military personnel. These cards, with encrypted chip technology, are resistant to phishing and difficult to hack if stolen.)

> mark of the beast

what bothers me the most about unfalsifiable predictions is that their predictive quality can only be retroactively applied, undermining its ability to be predictive at all

it relies on total ignorance of everything prior that fit, and other catastrophes that also looked like the “end times”

how was world war I not? everyone dying of mustard gas followed by famine, plague.

world war II?

the year 536?

other maladies in other countries? for many people it was the end time because their entire family and culture were killed and wiped out

I wonder if America will shake its Evangelical death cult. People are becoming unaffiliated with religion here but I feel like the mysticism is ingrained into the culture either way for another generation or two

Talking about it being the "mark of the beast" is a strawman. What you should talk about instead to win support among those same groups of people is to explain how it isn't/wouldn't be a means of government abuse. They're worried about it backdooring personal financial freedom the same way you would worry about the government backdooring encryption.

It’s not a strawman if thats exactly what the people being referred to will say.

But semantics aside, I agree that addressing their actual concerns is more productive. And there is no way to guarantee that.

You're right about it not being a strawman. I used the wrong word.

I love me some ID.me and think every bank and financial institution should be required to use it. It goes so far beyond to do good multi-factor auth and even accounts for the un-homed and un-phoned in their multifactor. Thousands of people can't bank or use many services because they can't get a phone number, but they can use id.me at a library or other public computer with few issues just having an old offline phone running an authenticator

Edit: TIL login.gov is the new hotness

Is Id.me and login.gov the same thing?

ID.me is a for profit private provider of identity proofing services. Login.gov is provided by the US General Services Administration. All federal agencies are moving to Login.gov. IRS is one of the last digital services that will move. There were some congressional hearings on ID.me, due to distorting the truth.

https://news.ycombinator.com/item?id=30430851 ("HN: IRS to adopt Login.gov as user authentication tool (Feb 2022)")

https://news.ycombinator.com/item?id=39691325 (a previous comment I wrote on the topic)

https://cyberscoop.com/idme-irs-identity-verification-congre... ("ID.me misled IRS on processing times for identity verification, congressional investigators found")

https://cyberscoop.com/id-me-ceo-backtracks-on-claims-compan... ("ID.me CEO backtracks on claims company doesn’t use powerful facial recognition tech")

https://cyberscoop.com/id-me-aclu-oregon-states-messaging-fa... ("Documents shed light on ID.me’s messaging to states about powerful facial recognition tech")

https://arstechnica.com/tech-policy/2022/11/id-me-made-basel... ("ID.me lied to IRS about unemployment fraud, average wait times, House Dems say")

I was neutral on id.me until I started getting unsolicited marketing emails through them. https://help.id.me/hc/en-us/articles/202709194-Why-am-I-rece...

id.me was steaming garbage the last time I used it.

"Scan the front and back of your Driver's License."

[upload scan of front of DL @ 200DPI]

"Unable to find a face in the image you uploaded."

[upload scan of front of DL @ 300DPI]

"Unable to find a face in the image you uploaded."

[upload scan of front of DL @ 72DPI]

"Thank you, now please upload the back of your Driver's License."

Hmm, 72DPI worked for the front, so...

[upload scan of back of DL @ 72DPI]

"Unable to read a barcode in the image you uploaded."

[upload scan of back of DL @ 200DPI]

"Unable to read a barcode in the image you uploaded."

[upload scan of back of DL @ 300DPI]

"Thank you for verifying your Driver's License".

An unmitigated turd.

Papers Please.

This is a tired argument. If you want better governance, it's a political problem, not a tech problem. "Papers Please" exists today due to a lack of law enforcement oversight and current statute [1]. A properly functioning national ID system and infrastructure doesn't change that.

The databases already exist [2] [3] [4] [5]; because you do not have the physical card does not mean you don't live this reality today. On the contrary, you already don't have the privacy you think you have, without any of the quality of life improvements a national ID card would provide.

> CBP has successfully implemented facial biometrics into the entry processes at all international airports, known as Simplified Arrival, and into the exit processes at 49 airport locations. CBP also expanded facial biometrics at 39 seaports and all pedestrian lanes at both Southwest Border and the Northern Border ports of entry.

> To date, CBP has processed more than 490 million travelers using biometric facial comparison technology and prevented more than 1,900 impostors from entry to the U.S.

[1] https://en.wikipedia.org/wiki/Stop_and_identify_statutes

[2] https://www.dhs.gov/biometrics

[3] https://www.tsa.gov/biometrics-technology/evaluating-facial-...

[4] https://www.cbp.gov/travel/biometrics/airports

[5] https://www.dhs.gov/real-id/real-id-faqs

This is why the US will never have functioning anything. People just immediately leap to why it's going to lead to dystopia.

Unfortunately that was literally true from the beginning. Much of the US Constitution is devoted to separation of powers. But the powers are so separated that it's practically impossible to do anything. Our checks and balances are badly overbalanced.

The government persists because the executive branch takes a lot on itself. The Supreme Court is currently deciding that this may be too much overreach, and the government will grind completely to a halt.

We already have that and have for a long time, it’s just more way time-wasting and far less secure than it could be.

This is a silly retort. We already have multiple identity systems in the US:

- Social Security

- Passports

- NAPHSIS

- Most states' ID systems using Real ID w/ SPEXS

- The DoD's ID card system

Reply on news.ycombinator.com