California authorizes its DMV to join a national ID database | Hacker News Reader

California authorizes its DMV to join a national ID database

papersplease.org

34 pointslogickkk113 comments

I understand there’s a balance between anonymity and privacy and ensuring transactions are real. For example when you buy a house you’re going to get on a public registry and titles and documents are going to identify you, and it’s an acceptable tradeoff to prevent fraud as long as no one can actually walk down to Records and start manipulating deeds.

This…this I don’t understand. If someone is driving with a fake drivers license, yeah, scary but the danger is limited and policies already have uninsured driver protection. This seems like the feds, who have not shown themselves as trustworthy, let alone their active involvement in fraud, demanding some foot in the door they’ll use later.

>it’s an acceptable tradeoff to prevent fraud as long as no one can actually walk down to Records and start manipulating deeds.

It would be reasonable if they were only accessible in person, but anyone in the world can get access to these public records and data brokers obtain them making it much easier to dox an American compared to a European.

I meant write access. Being 'doxxed' doesn't really apply if the information is public, I mean you could always walk up to the particular house and knock.

At the end of the day, it’s surprising there’s not a national ID database. I mean it practically already exists (social security). The government will have systems to identify its systems.

The real problem is that these systems exist, but:

It’s a horrible experience for the citizens. Your SSN is deeply insecure, used as a username/identification AND a PIN code or password, and is a tiny piece of paper that can easily crumble. On top of that, you have like a bajillion different forms of ID, and it’s frequently unclear who requires what. A “driver’s” license for CARS is the most commonly used identification for practically everything, a passport costs money and isn’t that easy to get… you move two miles to a different state and everything has to change.

We’re getting all of the privacy cons and none of the benefits. Let’s at least get the benefits.

And also, it could totally be cryptographically more secure and private if we wanted. Like scanning to verify age being able to track your name/address.

But in my view, citizens should get a proper ID card at birth that just covers everything. Instead of the current half assed system which has ALL of the same negatives.

Estonia has a good system, a national ID system that nevertheless is cryptographically secure such that you can't steal someone's identity.

How does a National ID system being "cryptographically secure" prevent someone from stealing your identity?

In the US if someone has your social security number they can do a lot of things with it. This is not the case in Estonia where they have public key cryptography so even leaking a public key doesn't mean anything. They'd need the physical ID with the chip on it as well as the password and PIN to access anything which is exponentially harder.

Decentralization has the benefit of minimizing the possibility of a tyrannical federal government, by design.

This is a step in the wrong direction, at a time when the tyranny is no longer hypothetical.

Estonia's national ID system is decentralized via the X-Road system, no one entity can see all your records in one place. For example health records live in one database, police in another etc. It is also difficult to cross correlate or to erase history due to Estonia also using a blockchain.

How does the blockchain make correlation difficult?

Erase history, not cross correlate

Does this mean every CA drivers license is Real ID compliant now? I thought it was only CA Real ID drivers license were submitted to the national database?

Well I guess that's the end of getting a warning instead of ticket when driving a rental car in another US state from the one I live in.

Reply on news.ycombinator.com