4 ms·

Facemask. Could voice act. Well, it's non-trivial for most people, but so is hacking. Everything about you is a data point that could be copied.

by ryacko 9y ago

coldtea 9y ago
You missed the parent's point. The kind of identity he alludes to is not copiable with a "face-mark". Think more of some uncrackable government issued id card, that anybody that wasn't to hack it should go to the police station to get one.
- Koshkin 9y ago
  > to get one Which you can only do after proving that you are who you say you are - which ultimately involves some (hackable) data.
  - coldtea 9y ago
    Which is a moot point, as it moves the barrier to getting it to "impersonating another person in front of US authorities", so more like getting a forged passport. If only most online authentication was that hard, and with so much risk for those attempting to fake it.
    - neuland 9y ago
      You're right that ryacko missed my point. And, you nailed exactly the benefits of an in person government issued asymmetric key process. Even if showing up in front of US authorities was completely hackable, it'd still be better than the current state of affairs, because you'd have to hack people one at a time in person. (Unless you discovered some 0day in the key generation process or the hardware or something) That naturally limits identity theft to a targeted attack on one individual, rather than being able to steal half of US adults identities all at once. Also, the hacker (or their accomplice) would only be able to hack one person per DMV (or Post Office) per month. And they'd have to at least vaguely fit your race, height, gender, etc. A gang would maybe have the organizational skills to farm it out to a bunch of people. But, that's still limited to something on the order of thousands of people. Let's not let the perfect be the enemy of the good.

4 ms·

Facemask. Could voice act. Well, it's non-trivial for most people, but so is hacking. Everything about you is a data point that could be copied.

by ryacko 9y ago

Facemask. Could voice act. Well, it's non-trivial for most people, but so is hacking. Everything about you is a data point that could be copied.

coldtea 9y ago
You missed the parent's point. The kind of identity he alludes to is not copiable with a "face-mark". Think more of some uncrackable government issued id card, that anybody that wasn't to hack it should go to the police station to get one.
- Koshkin 9y ago
  > to get one Which you can only do after proving that you are who you say you are - which ultimately involves some (hackable) data.
  - coldtea 9y ago
    Which is a moot point, as it moves the barrier to getting it to "impersonating another person in front of US authorities", so more like getting a forged passport. If only most online authentication was that hard, and with so much risk for those attempting to fake it.
    - neuland 9y ago
      You're right that ryacko missed my point. And, you nailed exactly the benefits of an in person government issued asymmetric key process. Even if showing up in front of US authorities was completely hackable, it'd still be better than the current state of affairs, because you'd have to hack people one at a time in person. (Unless you discovered some 0day in the key generation process or the hardware or something) That naturally limits identity theft to a targeted attack on one individual, rather than being able to steal half of US adults identities all at once. Also, the hacker (or their accomplice) would only be able to hack one person per DMV (or Post Office) per month. And they'd have to at least vaguely fit your race, height, gender, etc. A gang would maybe have the organizational skills to farm it out to a bunch of people. But, that's still limited to something on the order of thousands of people. Let's not let the perfect be the enemy of the good.