7 ms·
Other countries have the equivalent of SSNs, i.e., a number issued by the government tax collector. However, other countries don't use it as a form of ID. In my
by incompatible 9y ago
Other countries have the equivalent of SSNs, i.e., a number issued by the government tax collector. However, other countries don't use it as a form of ID. In my experience, they use passports, ID cards, drivers licenses, etc., which are supposedly "hard to forge".
- incompatible 9y agoThese systems don't work well remotely, of course. Sometimes an organisation will accept an upload of a scan or a mailing of a photocopy. They sometimes require it to be signed by a somebody to verify that it's genuine (e.g., a Justice of the Peace). But by doing that, the "hard to forge" feature is lost entirely.
- my_ghola 9y agoThey do use a scan or a photocopy, but having that stored it is easier to check the identity of the real person once they claim there was identity theft.
- incompatible 9y agoThe "verified photocopies" can be a bit of a joke. I know somebody who was having trouble finding enough ID for something. They printed an online bank statement, photocopied it, and got a JP to verify the photocopy against the original printout.
- kilotaras 9y agoUkraine is experimenting and slowly rolling out an oauth-like system called BankID, where you bank can provide information to third party.
- novium 9y agoAt first I was surprised by you mentioning Ukraine and BankID, especially since it's developed by Swedish banks. But reading about it now makes it seem like they are branching out to other European countries as well. Over here it's basically used for everything that needs authentication / signatures - taxes, banking etc.
- amigoingtodie 9y agoYou talking about Facebook?
- LoSboccacc 9y agoIt's not just hard to forge: tgey expire often and change code frequently sp the exploytable window is smaller than for the quasi permanent ssn
- incompatible 9y agoPerhaps true to some extent, but a passport can last 10 years, which is plenty of time for identity theft.
- llukas 9y agoIf your identity gets stolen you get new passport with new number and put old one into stolen document database. Cannot do this with SSN.
- incompatible 9y agoThe question would then be how many organisations check the stolen document database when looking at a passport id.
- LoSboccacc 9y agohowever, that clearly puts the blame where it's due. ssn changes being exceptions make easy to shield company from due process. id's, otoh, have specific procedures for handling.
- llukas 9y agoIf you want to legally lend money why shouldn't you be required to do look up? If you didn't you're liable...
- alkonaut 9y agoMore importantly, we can 2FA from my id number to my address because there is a db mapping from id to post address. With a locked mailbox (which is the default) it becomes a hassle to steal an identity. If I get a new credit card it's sent to the address I id'd for.
- mseebach 9y agoIt's better than just trusting the SSN, but I'd still prefer a system that can't be beat with a stick and some chewing gum. (Yes, I had an ID theft near-miss that involved a locked mail box in a locked stairwell. To me, the more obvious perpetrator seemed to be someone with access to the mail delivery pipeline, but the investigator I spoke certainly did not think terribly highly of the security of a locked mailbox)