4 ms·

That's not really true though philosophically speaking. Even if I forget everything about myself, my identity (as far as my creditors are concerned) is the same

That's not really true though philosophically speaking. Even if I forget everything about myself, my identity (as far as my creditors are concerned) is the same. I think that there should be some kind of hardware key or smart card system issued by the government, where if you loose it or get it stolen, you can go to the post office or DMV or something to get the old key revoked and a new one reissued. The post office or DMV would verify your identity by biometrics or N other forms of ID.

ng12 9y ago
Ok, how do we use that to build a useful system? How do I open a credit card in this world such that my key can't be stolen/exploited?
- warkdarrior 9y ago
  Public key cryptography.
  - ng12 9y ago
    Key-based cryptography falls apart once you have a manual component to it. Let's say hypothetically I have an ID card containing my keys -- how do I use it to pay a bill online?
ryacko 9y ago
Facemask. Could voice act. Well, it's non-trivial for most people, but so is hacking. Everything about you is a data point that could be copied.
- coldtea 9y ago
  You missed the parent's point. The kind of identity he alludes to is not copiable with a "face-mark". Think more of some uncrackable government issued id card, that anybody that wasn't to hack it should go to the police station to get one.
  - Koshkin 9y ago
    > to get one Which you can only do after proving that you are who you say you are - which ultimately involves some (hackable) data.
    - coldtea 9y ago
      Which is a moot point, as it moves the barrier to getting it to "impersonating another person in front of US authorities", so more like getting a forged passport. If only most online authentication was that hard, and with so much risk for those attempting to fake it.
      - neuland 9y ago
        You're right that ryacko missed my point. And, you nailed exactly the benefits of an in person government issued asymmetric key process. Even if showing up in front of US authorities was completely hackable, it'd still be better than the current state of affairs, because you'd have to hack people one at a time in person. (Unless you discovered some 0day in the key generation process or the hardware or something) That naturally limits identity theft to a targeted attack on one individual, rather than being able to steal half of US adults identities all at once. Also, the hacker (or their accomplice) would only be able to hack one person per DMV (or Post Office) per month. And they'd have to at least vaguely fit your race, height, gender, etc. A gang would maybe have the organizational skills to farm it out to a bunch of people. But, that's still limited to something on the order of thousands of people. Let's not let the perfect be the enemy of the good.

ng12 9y ago

Ok, how do we use that to build a useful system? How do I open a credit card in this world such that my key can't be stolen/exploited?

warkdarrior 9y ago
Public key cryptography.
- ng12 9y ago
  Key-based cryptography falls apart once you have a manual component to it. Let's say hypothetically I have an ID card containing my keys -- how do I use it to pay a bill online?

ryacko 9y ago

Facemask. Could voice act. Well, it's non-trivial for most people, but so is hacking. Everything about you is a data point that could be copied.

coldtea 9y ago
You missed the parent's point. The kind of identity he alludes to is not copiable with a "face-mark". Think more of some uncrackable government issued id card, that anybody that wasn't to hack it should go to the police station to get one.
- Koshkin 9y ago
  > to get one Which you can only do after proving that you are who you say you are - which ultimately involves some (hackable) data.
  - coldtea 9y ago
    Which is a moot point, as it moves the barrier to getting it to "impersonating another person in front of US authorities", so more like getting a forged passport. If only most online authentication was that hard, and with so much risk for those attempting to fake it.
    - neuland 9y ago
      You're right that ryacko missed my point. And, you nailed exactly the benefits of an in person government issued asymmetric key process. Even if showing up in front of US authorities was completely hackable, it'd still be better than the current state of affairs, because you'd have to hack people one at a time in person. (Unless you discovered some 0day in the key generation process or the hardware or something) That naturally limits identity theft to a targeted attack on one individual, rather than being able to steal half of US adults identities all at once. Also, the hacker (or their accomplice) would only be able to hack one person per DMV (or Post Office) per month. And they'd have to at least vaguely fit your race, height, gender, etc. A gang would maybe have the organizational skills to farm it out to a bunch of people. But, that's still limited to something on the order of thousands of people. Let's not let the perfect be the enemy of the good.