3 ms·
Personal identity seems like a generally intractable problem, despite the lofty goals stated in the introduction. And without it, the document is built on a fo
by andrewla 9y ago
Personal identity seems like a generally intractable problem, despite the lofty goals stated in the introduction. And without it, the document is built on a foundation of sand.
An argument that I find myself having quite frequently about Bitcoin and pseudonymity is that pseudonymity and concealing identity is not a feature of the system, but rather that defining two-way identity in any sort of useful way is such a difficult problem that solving it would be a bigger achievement than Bitcoin itself.
Seeking a biological equivalent to a non-portable key in a TPM is pretty hopeless, and that's what you'd need to get a HUID -- not just a hash fingerprint that anyone can appropriate, but an internal signing mechanism to allow zero-knowledge verification of identity. And the inverse problem, the Sybil problem, is just as intractable, and as far as I know has never really been solved without a centralized issuing authority or reliance on a scarce resource (like proof-of-work, which even there solves only a weak variant of the Sybil problem by conflating the unit of "identity" with a unit of "work").
- Allower 9y agonailed it
- anigbrowl 9y agoWe know multiple ways to reliably identify someone using biological markers with near-perfect accuracy. Yes, that lack of perfection leaves open the possibility of subversion, but so what? You'll grow old and die waiting for the perfect solution.
- hueving 9y agoAnd those are not subject to replay attacks?
- xg15 9y agoThis seems to me like the whole misadventure of putting finger print readers in door locks and phones: Someone noticed that fingerprints work quite well for identifying people in customs and law enforcement and simplified that thought to "fingerprints can identify people" - ignoring the circumstances of how fingerprints are taken when they work.
- wyager 9y agoHuman biometrics are subject to spoofing, replay, and birthday attacks. You can't extract enough entropy from any extant biometrics to be useful, secure, and free of collisions (without having an intolerably high false negative rate).