News for hackers. Stuff that matters.
Re:Email addresses are not good 'permanent' identifiers for ... by newsclues on Sunday December 31, 2023 @10:06AM (#38824512)
"There is no good identity."

Government has failed to adapt with modern times and technology and has failed to provide modern and secure identification and authentication services for citizens.

I log in with my bank credentials to access my government tax account, talk about a total failure to do your job from the people still using SIN as an important piece of identity for some of the most important aspects of life.

This is a solvable problem. Governments can adapt and use modern technology to provide identity and authentication services, but they do not.

In my opinion this is a failure to be responsible for core government services, and I can only speculate why.

Re:Email addresses are not good 'permanent' identifiers for ... by pzmarzly on Sunday December 31, 2023 @10:59AM (#38824916)
> Governments can adapt and use modern technology to provide identity and authentication services, but they do not.

At least in many EU countries, they are adapting. I'm a fairly happy user of Irish myGovID (OIDC) and ROS (X509 "sign this message with your private key" challenge), and Polish Profil Zaufany (I think OIDC or CAS?).

The issues I see are:

- Each country has its own system, some documented, some not so much, some use OIDC, some SAML, some something more obscure.

- As an individual who moved countries, you end up with multiple accounts.

- As a developer you cannot easily register your own OIDC app. Send an email to some ministry and hope for the best. If you aren't part of government yourself, you may be out of luck.

Re:Email addresses are not good 'permanent' identifiers for ... by NooneAtAll3 on Sunday December 31, 2023 @10:26AM (#38824652)
the last thing I'd want would be connecting every online personality to my real identity
Re:Email addresses are not good 'permanent' identifiers for ... by newsclues on Sunday December 31, 2023 @12:31PM (#38825736)
Your aliases don’t need to be publicly disclosed.

But the reality is that virtually every online identity is tied to a real identity, just with layers of obscurity added.

This hacker news was created with anonymous accounts but it still links back to my real one.

Re:Email addresses are not good 'permanent' identifiers for ... by NikkiA on Sunday December 31, 2023 @04:08PM (#38827539)
Every day I get dozens of 'your account was hacked and we used your webcam to record videos of you jacking off' bitcoin 'blackmail' spam to various accounts that have been either hack-harvested or the company went bust and figured selling all their user data was a decent golden parachute.

Just imagine if those accounts all had had direct and firm ties to RL identity stored with them.

Re:Email addresses are not good 'permanent' identifiers for ... by FireBeyond on Sunday December 31, 2023 @02:12PM (#38826605)
They don't, but they will be. If for no other reason than the concrete knowledge that somehow your alias on a site is verifiably connectable to person X will lead to a raft of abuses of the legal system to silence or harass people saying things someone doesn't like. And average sites aren't going to have the resources or will to fight this.
Re:Email addresses are not good 'permanent' identifiers for ... by azlev on Sunday December 31, 2023 @10:11AM (#38824550)
It would be or a chaos or very limiting expect that companies would interact with a lot of govs to get authentication. It's way cheaper leave as is.
Re:Email addresses are not good 'permanent' identifiers for ... by LocalH on Sunday December 31, 2023 @10:22AM (#38824622)
"Cheap" should never be the driving factor for these things.
Re:Email addresses are not good 'permanent' identifiers for ... by jethro_tell on Sunday December 31, 2023 @10:28AM (#38824670)
That is, in fact, the purpose of government, to do the things necessary for a functioning society for which a profit motive does not exist.
Re:Email addresses are not good 'permanent' identifiers for ... by azlev on Sunday December 31, 2023 @10:55AM (#38824889)
Maybe I'm mistaken but China's super apps solve this problem with profit motivation.
Re:Email addresses are not good 'permanent' identifiers for ... by gsich on Sunday December 31, 2023 @10:51AM (#38824858)
It's not a problem though.
Re:Email addresses are not good 'permanent' identifiers for ... by Levitz on Sunday December 31, 2023 @12:43PM (#38825872)
It's definitely a problem. Identity theft is way more common in the US than in Europe.

If it wasn't a problem the SSN system wouldn't be used in unintended ways.

Re:Email addresses are not good 'permanent' identifiers for ... by gsich on Monday January 01, 2024 @11:50AM (#38833153)
Maybe. Still no need for the government to provide such a service to 3rd parties.
Re:Email addresses are not good 'permanent' identifiers for ... by goodpoint on Sunday December 31, 2023 @10:25AM (#38824645)
Identity is not centralized and therefore identification and accounting cannot be centralized.