News for hackers. Stuff that matters.
Re:Tea app leak worsens with second database exposing user c... by dom96 on Monday July 28, 2025 @07:43PM (#44717200)
Then how do you live in this world? You cannot avoid providing a copy of your photo ID to someone at some point in your life.

We really need some sort of standard for sharing specific and limited authenticated info about ourselves to third-party websites that doesn't require sharing a full photo ID.

Re:Tea app leak worsens with second database exposing user c... by fc417fc802 on Monday July 28, 2025 @07:48PM (#44717236)
You can't avoid it, but you can choose to refuse unless there is a legitimate need for it. Very few brick and mortar interactions require it, and at least historically a copy wasn't retained but rather verified on the spot by the business agent.

We really don't need a standard for sharing it online, at least nothing easy for businesses to implement. There are very few legitimate scenarios for an online service to ask for that. Online pharmacy, online signup with a bank, and online government interactions are the only that immediately come to mind.

I'm not even sure that the pharmacy case is legitimate now that I think about it. I don't need ID when I go in person. The prescriber can validate the mailing address for them.

Re:Tea app leak worsens with second database exposing user c... by tempnew on Monday July 28, 2025 @09:02PM (#44717757)
If you need to buy Sudafed in a pharmacy you need a drivers license, and I believe they record the information somehow. Presumably online alcohol or marijuana sales would also require some retained evidence that a dl was presented. Maybe car insurance too.
Re:Tea app leak worsens with second database exposing user c... by fc417fc802 on Wednesday July 30, 2025 @05:31AM (#44732353)
Sudafed in the US is an odd exception in that it's regulated but doesn't require a prescription. In comparison you can pick up an opiate prescription without ID (or at least I was able to several years ago).

> Presumably online alcohol or marijuana sales would also require some retained evidence that a dl was presented.

Why? Is that required for in person purchases where you are? I thought violations were typically caught with sting operations. I don't see why online should be any different.

> Maybe car insurance too.

Why? I guess the provider could choose to for due diligence if they felt there might be fraud. But I'm struggling to come up with any realistic scenarios. For what it's worth I've never once been asked for any official documentation in order to purchase car insurance. Simply provided information over the phone and received documents in the mail a few days later.

Re:Tea app leak worsens with second database exposing user c... by hn_acc1 on Monday July 28, 2025 @07:52PM (#44717272)
Sure, if I'm applying for a mortgage, or boarding an airplane.

Just to register for one-more-app / one-more-webboard? Nope.

Re:Tea app leak worsens with second database exposing user c... by WD-42 on Monday July 28, 2025 @08:12PM (#44717441)
You use judgement. I’d upload my id to a passport renewal site provided by the govt.

Some private app for rating other human beings? Nope.

Re:Tea app leak worsens with second database exposing user c... by tough on Monday July 28, 2025 @08:52PM (#44717713)
you have higher trust in your government IT services than I do on mine
Re:Tea app leak worsens with second database exposing user c... by WD-42 on Monday July 28, 2025 @09:09PM (#44717810)
Well I hope you didn’t trust this particular private app!
Re:Tea app leak worsens with second database exposing user c... by BobaFloutist on Tuesday July 29, 2025 @03:47PM (#44727505)
I mean if my government IT services are idiots they could easily leak a digital copy of my ID without me having to provide said digital copy.

Providing a digital copy of my ID to someone who otherwise would have no copy of my ID, digital or otherwise, is a different matter.

Re:Tea app leak worsens with second database exposing user c... by djoldman on Monday July 28, 2025 @09:20PM (#44717880)
This is a great question.

I dislike it to such a degree that I try to avoid services that require it.

Sometimes, however, it's worth trying to access services without giving the ID and just saying oh I'd like to keep that private or just not providing it and submitting an application for services without it.

Additionally, try to apply in person as often they'll accept paper.

It doesn't work in the majority of situations but it's worth a try.

Re:Tea app leak worsens with second database exposing user c... by dlcarrier on Tuesday July 29, 2025 @04:37AM (#44720722)
I show it to people, when needed, but don't send out copies.