←back to thread

693 points macawfish | 2 comments | | HN request time: 0.802s | source
Show context
al_borland ◴[] No.44544145[source]
All these ID check laws are out of hand. Parents are expecting the government, and random websites, to raise their kids. Why would anyone trust some random blog with their ID?

If these laws move forward (and I don’t think they should), there needs to be a way to authenticate as over 18 without sending picture of your ID off to random 3rd parties, or giving actual personal details. I don’t want to give this data, and websites shouldn’t want to shoulder the responsibility for it.

It seems like this could work much like Apple Pay, just without the payment. A prompt comes up, I use some biometric authentication on my phone, and it sends a signal to the browser that I’m 18+. Apple has been adding state IDs into the Wallet, this seems like it could fall right in line. The same thing could be used for buying alcohol at U-Scan checkout.

People should also be able to set their browser/computer to auto-send this for single-user devices, where it is all transparent to the user. I don’t have kids and no one else’s uses my devices. Why should I need to jump through hoops?

replies(36): >>44544207 #>>44544209 #>>44544223 #>>44544253 #>>44544375 #>>44544403 #>>44544619 #>>44544667 #>>44544797 #>>44544809 #>>44544821 #>>44544865 #>>44544875 #>>44544926 #>>44545322 #>>44545574 #>>44545686 #>>44545750 #>>44545798 #>>44545986 #>>44546467 #>>44546488 #>>44546759 #>>44546827 #>>44547088 #>>44547591 #>>44547777 #>>44547788 #>>44547799 #>>44547881 #>>44548019 #>>44548400 #>>44548482 #>>44548740 #>>44549467 #>>44560104 #
Eavolution ◴[] No.44544926[source]
I am never providing my ID to anyone who can store it indefinitely. I am an adult and have no problem showing it in a shop if required as it isn't stored. Unless it can be proven it wont be stored (i.e. the bytes are never sent from my laptop) I will not provide it.
replies(1): >>44545123 #
ivan_gammel ◴[] No.44545123[source]
Your ID is effectively stored by the issuer indefinitely. What’s the difference between one and two entities? What’s the difference between two and a hundred?
replies(3): >>44545278 #>>44545554 #>>44548174 #
rocqua ◴[] No.44548174[source]
The difference between one and two is being able to link two things I did. If you know who I am, that barely affects me. But if you can then cross-check whether I also went ballroom dancing, or went to a golf course, or went to a sexclub, or went to a ball-game. Then it starts affecting me.
replies(1): >>44548574 #
ivan_gammel ◴[] No.44548574[source]
Just don’t consent to sharing your data to third parties for marketing or research purposes. In civilized world there exist laws which give you this right. It is surely not the problem with ID verification or storage.
replies(1): >>44549096 #
1. sethammons ◴[] No.44549096[source]
Giving your data to a website is the same as giving it to a stranger on the bus. Maybe closer to going to a seedy part of town and giving your ID to random criminal and hoping they don't do anything unscrupulous.
replies(1): >>44554015 #
2. ivan_gammel ◴[] No.44554015[source]
It is not the same, it’s a classic straw man argument. First of all, not just some data, but your ID details - this is important detail. Second, not to a random website, but to a website you wish to engage in a contractual relationship and where your ID is actually required. Third, they are unlikely criminal and there are legal protections in this scenario in most civilized countries. Fourth, the way it goes, it is very unlikely that you will be presenting your ID, instead providing attribute proof through a third party. See e.g. Nect Wallet and similar apps. ID verification will not increase your risks of identity theft etc compared to leaks of other PII. Probably the risk will be lower due to higher compliance requirements.