Most active commenters
  • 0x457(3)

←back to thread

64 points meetpateltech | 21 comments | | HN request time: 0.895s | source | bottom
1. xd1936 ◴[] No.45904129[source]
I am never handing my phone to a cop.
replies(3): >>45904212 #>>45904361 #>>45904538 #
2. bitpush ◴[] No.45904212[source]
I get what you're saying, but if you think of it what we're doing today - handing over the one and only official piece of document to a) cop b) club bouncer etc.

They can hold onto it, and never return it. They can deface it. All of that is a possibilty.

You could argue, a sufficiently locked down phone is a better alternative. If they do something, you'll only lose $$

replies(4): >>45904281 #>>45904288 #>>45904290 #>>45904501 #
3. barbazoo ◴[] No.45904281[source]
> They can hold onto it, and never return it. They can deface it. All of that is a possibility.

But they can't potentially look at your banking app, read private notes, messages and emails, operate your home automation, look at your calendar, etc. if all they have is a plastic card.

replies(2): >>45904376 #>>45904929 #
4. therein ◴[] No.45904288[source]
I feel exactly the opposite about what you said. The ID is just an ID, my phone is my phone with other stuff in it.
5. ayntkilove ◴[] No.45904290[source]
... and if they hold the document upside down they can see your browser history and with a UV flashlight they can quick scan your app list for intel.
6. throw0101d ◴[] No.45904361[source]
> I am never handing my phone to a cop.

The point is that you don't have to:

> To present a Digital ID in person, users can double-click the side button or Home button to access Apple Wallet and select Digital ID. From there, they can hold their iPhone or Apple Watch near an identity reader, review the specific information being requested, and use Face ID or Touch ID to authenticate.

"hold … near … review"

If you're (e.g.) buying alcohol, then the "specific information" would be your birthday, and that is all that would be sent over. With a regular ID, verifying your age would mean handing over your physical card which would have all sorts of other non-relevant information to the task at hand.

Further:

> Only the information needed for a transaction is presented, and the user has the opportunity to review and authorize the information being requested with Face ID or Touch ID before it is shared. Users do not need to unlock, show, or hand over their device to present their ID.

AIUI, cops would have a verifying device or app and the information requested—which you authorize—is sent over wirelessly. Kind of like how you no longer have to hand over your credit/debit cards to (possibly malicious) cashiers, and just keep it in your hand and tap. (Older people may remember the carbon copy 'ka-chunk' machines.)

With a physical ID you have to hand that over because that is the only way the information can be read off of it. With a digital ID you can send a copy of your ID without physical exchange / handover.

replies(2): >>45906021 #>>45906761 #
7. ◴[] No.45904376{3}[source]
8. JoshTriplett ◴[] No.45904501[source]
If I lose a piece of ID, I've lost a piece of paper/plastic. I'm inconvenienced, but can easily get a replacement and have the original invalidated.
replies(2): >>45906083 #>>45906406 #
9. moralestapia ◴[] No.45904538[source]
That is usually not something you choose.
replies(1): >>45904691 #
10. dmix ◴[] No.45904691[source]
Only if you're being arrested. If you're at a traffic stop or tons of other scenarios would never need to.
replies(1): >>45904992 #
11. magnetic ◴[] No.45904929{3}[source]
They can't do that either with Wallet items. That's kind of the point: you can hand over your phone with a wallet item "unlocked" and visible on the screen, and that's all they'll have access to.
replies(2): >>45905191 #>>45905263 #
12. ◴[] No.45904992{3}[source]
13. barbazoo ◴[] No.45905191{4}[source]
Sure but then you've already given them your phone after which you don't know what happens. Plus it's a lot of leverage for them to have it, e.g. "unlock or you won't get it back".
14. iamnothere ◴[] No.45905263{4}[source]
Until they covertly plug it in to the Cellebrite unit back in the patrol car.
15. 0x457 ◴[] No.45906021[source]
> If you're (e.g.) buying alcohol, then the "specific information" would be your birthday, and that is all that would be sent over.

Unless there is a very tight control over this - lol nope. Big stores will request as much as they can to target you with ads.

replies(1): >>45906388 #
16. 0x457 ◴[] No.45906083{3}[source]
> have the original invalidated.

Only for it's "original" use case - traffic laws enforcement. I don't think any other entity can validate if this piece of plastic is invalidated or not. Also, it's not like information on lost ID gets erased when you get a new one: still has your address, DOB and other info that can be misused.

17. op00to ◴[] No.45906388{3}[source]
You could then decide not to buy the alcohol. Unless you are severely addicted, you will not die if you don't purchase alcohol.
replies(2): >>45906722 #>>45907540 #
18. op00to ◴[] No.45906406{3}[source]
> have the original invalidated.

I once had three valid drivers' licenses, because my wallet was stolen (later returned), and I left my ID at a bar. All three were valid for use at the same time despite being reported lost/stolen - they had identical barcodes, etc.

19. 0x457 ◴[] No.45906722{4}[source]
Yes, but the point is that we already know (app permissions, cookie tracking consents) that "ask only what you need to function" isn't how sellers operate.

Also, you need an ID to buy some OTC medicine and to pick up some prescribed medicine. As well some other cases when ID needs to be presented, but those probably require more than just DOB anyway.

20. raoulj ◴[] No.45906761[source]
For buying alcohol, I wonder if faceID will also somehow be required to verify the holder of the phone corresponds to the digital id
21. mrighele ◴[] No.45907540{4}[source]
Following the same reasoning, one could decide not to open any website, their TV, their phone and even their fridge. None of these will kill you

While should companies tracking us to make more money affect our habits?