this post was submitted on 04 Jun 2024
305 points (93.0% liked)

Technology

57453 readers
4611 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
 

I'm straight-up not comfortable uploading a government document online. Bite my shiny metal toosh, Microsoft.

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 16 points 2 months ago (2 children)

It's less about verifying ID, and more about trusting them to be responsible with the documents.

If they have a human assess the ID right away, and delete the file once that person's identity has been assessed, that's probably safe. But let's face it, they probably store it somewhere, and when they inevitably get hacked now everyone's driver's license (with their state ID number, address, and DoB) is for sale on the dark web. There is enough info on your State Drivers' License to open credit accounts, particularly if you forge some documents as well.

[–] [email protected] 10 points 2 months ago

Plus it's fucking microsoft.

[–] [email protected] -3 points 2 months ago (1 children)

Well, I guess I'm glad we have fairly secure documentation. Not that fraud doesn't happen, but given how ubiquitous and easy to find that info is the real value is in the document itself, which is minted very much like paper money is and is pretty hard to falsify or forge.

Like many other issues this is the kind of issue I find is fairly well solved.

[–] [email protected] 4 points 2 months ago (1 children)

Let me guess, you've never had your identity stolen, have you?

[–] [email protected] -1 points 2 months ago (1 children)

Nnnope. Presumably because I have secure government ID minted like paper money, containing a digital certificate and pretty hard to falsify or forge.

Look, I'm not saying it doesn't happen, I'm saying it's a useful tool to mitigate it. I've definitely shared my official ID online for things. It's even used for preorders sometimes in high demand items or concert tickets to prevent scalping and effectively limit amounts per person. It kinda works.

[–] [email protected] 7 points 2 months ago* (last edited 2 months ago) (1 children)

They dont steal your ID by cloning your passport, they steal it by getting just enough Personally Identifying Information to be able to start up credit cards and other loans that are tied to your credit history, without your knowledge. By the time you find out, they've run all the credit lines to the max and then you have to go around to all those companies and prove you didn't make all those charges. Then you have to get all of your account numbers changed, because you don't necessarily know what the hacker has compromised.

Most of the information necessary for opening accounts is on your driver's' license. Pretty much the only thing it is missing is your SSN. And in some cases, a valid state license number can be used in place of that

[–] [email protected] -1 points 2 months ago* (last edited 2 months ago)

Yeah, but that's the point, with universal secure ID all of those actions require showing your universal secure ID. You can't just give people enough information that sounds or is legit and get a loan, you need to provide your ID and have it verified.

And hey, if somebody that holds a copy of your ID leaks it you're only at risk for a bit of time, because these things expire and each new one you get looks different. It's very hard and not worth it to forge these for that reason, and if somebody went to the trouble of doing that you could easily prove it doesn't match the original you hold.

Fraud and identity theft obviously still exist, but it normally involves getting older people to sign things they didn't mean to or getting people to share their information through social engineering. But just finding your info online and generating enough debt to create a massive problem? That seems hard and reversible.