5 ms·
Numbers have to be assigned in order to break the symmetry. Otherwise how would you tell humans apart?
by ngneer 8y ago
Numbers have to be assigned in order to break the symmetry. Otherwise how would you tell humans apart?
- politician 8y agoCoarsely, the reason for the need to tell humans apart is to assign debts.
- pkaye 8y agoWould you be fine having your medical history mixed with someone else with the same name?
- drewmol 8y agoYes, I would even be willing to pay a small fee for this. (not the op)
- politician 8y ago(op here) The premise of the grandparent is an illusion that depends on the idea that somehow a medical provider (which one?) is a better caretaker for your medical history than you are. In the cases where that is actually true, power of attorney is the real solution -- not EMR records hosted offsite by 3rd party vendors in 3rd world countries on behalf of one or more hospitals. How absurd. My medical history is mine; it's ultimately not yours. If you need my medical history, allow me to give you limited access to it. Now, if your billing is opaque and you're playing shenanigans with the insurance companies about who owes what, then sure, you need my Passport, SSN, DNA, Real ID, and biometrics -- and you should probably hold my medical history hostage too -- to make sure that you can collect on the debt.
- mulmen 8y agoHuh? What about my Safeway card that tracks my shopping habits? Or my phone number that allows anyone in the world to contact me? Or my address that identifies a physical location to send me things. Or membership numbers in clubs? Or the example from TFA: passports. How would any of those be feasible with coarse mapping of ID to human?
- Spooky23 8y agoWhy do you need an externally defined unique ID? If I tell you that i am Spooky23, 123 Main St, anytown, AK, spooky23@example.com, what more uniqueness do you need? Hoarding passport numbers, drivers licenses, ssn, etc usually doesn’t serve a legitimate purpose. When it is required to meet compliance or other requirements (say an payroll processor who needs an SSN to withhold taxes), it needs to be protected and have access controls. Marriott does not have any need to authoritatively know who I am beyond payment arrangements. I'm not borrowing money from Marriott, so they don't need my SSN. They may need my passport when I check into an international hotel to meet compliance requirements, but they don't need to store it in a reservation system, and don't need to store it beyond the international jurisdiction where I checked in.
- ngneer 8y agoSpooky23 seems to be implicitly relying on uniqueness that is leveraged by the underlying message routing system. With the case of "123 Main St, anytown, AK" there is an implicit assumption that no one else lives at that address. With the case of "spooky23@example.com" there is an implicit assumption that the mailbox is not shared. Hoarding numbers serves the very purpose of ensuring a unique assignment. For instance, if "the" department of transportation did not have a "global" database, then it would risk minting the same number twice. That having been said, it is true that knowledge of a "master" identity is not a requirement for making payment arrangements.
- Spooky23 8y agoWhat’s the anticipated trust level? For most commerce, I need to be able to tell that you are the same “Spooky23” who was here last time. If you need to positively and authoritatively identify me, collecting numbers is not sufficient. End of the day, these companies are either overcollecting for convenience or doing a poor job of collecting information for compliance purposes.
- maccard 8y ago> End of the day, these companies are either overcollecting for convenience or doing a poor job of collecting information for compliance purposes. Or both. Overxollecting makes sense at a global level (all systems the same everywhere), but even if they only collect what they need they're clearly not treating it correctly
- ngneer 8y agoCapitalism is involved for sure, but "debt" seems harsh. How about "resource allocation"?
- cal5k 8y agoRight, but it's like using a private key as an identifier. As soon as it's compromised you need to get a whole new ID. I'd rather see something like Bitcoin's HD wallets used for identification - your private keys are on a hardware device, but you can generate new "personal identifiers" for use with public services that, if compromised, could be burned through a central registry without requiring a replacement of the private keys.
- solarkraft 8y agoThis is good, but it'll take a while to catch on. I can well imagine everyone receiving a hardware key generator for personal identification purposes. Some id cards already have something similar and it shouldn't be all too expensive.
- ngneer 8y agoAssuming a fair bidding process...
- njarboe 8y agoThe only real problem with most of these "identity theft" problems are that lenders are not punished/fined when they lie to credit bureaus and say you borrowed some money instead of someone who has impersonated you. Prevent the banks/loan makers from libeling you and this information leaking is not that much of a big deal. Banks might not like it, but the populous would definitely support it.
- drewmol 8y agoTo further your suggestion, start referring to "identity theft" as fraud. Banks/loan makers don't just libel you, they further the initial crime and commit fraud every time they transfer/sell/bundle the fraudulent debt.
- njarboe 8y agoThere needs to be a specific phrase to replace the phrase "identity theft". I think the phrase "bank libel" could work as it is not a phrase currently used very often. Unfortunately "bank fraud" is a common occurrence, so not a great name for this specific type of bank fraud.