3 ms·

Yeah that’s really not OK. Though in some countries that number isn’t sensitive by itself, asking for it to sign a petition is incredibly creepy. If you select

Yeah that’s really not OK. Though in some countries that number isn’t sensitive by itself, asking for it to sign a petition is incredibly creepy. If you select Netherlands they’re at least informed enough to not ask for the Dutch equivalent, the BSN. It would be against the law for them to ask, process or store it.

threatofrain 6y ago
How would you have an effective petition in the EU without verifying that petitioners are EU citizens? Then this petition would be reduced to a singular PR push.
- daenney 6y ago
  You don’t need to ask for the social security number equivalent to verify citizenship. By itself it doesn’t help in that context since residents get one too. If you try the form for different countries, in a lot of cases they don’t ask for that particular identifier, because they legally can’t, and ask for address information instead. That’s still a little creepy, but a whole lot less.
  - RobertoG 6y ago
    Personally, I have less problem with giving my ID than my address. It's the address what feels creepy to me. >>"By itself it doesn’t help in that context since residents get one too." At least in my country that's not true. The resident but not citizen number is different.
  - varjag 6y ago
    Residents in much of the EU get plenty of rights, including voting in local elections. So why not? They live there, and their biometrics are being collected too.
    - daenney 6y ago
      I didn’t say at any point that residents shouldn’t get to vote on this. But they’re looking to verify citizenship, not residency.
  - isbvhodnvemrwvn 6y ago
    In some countries, like Poland, you don't have to have your address registered with the government. PESEL and your ID number are a sort of multi-factor authentication mechanism.
- actuator 6y ago
  Can't each country have a platform where you kind of validate it in kind of this way. - Select the country, get redirected to the sovereign identity auth platform - There you can log in/provide the details in the sovereign run platform. - The sovereign run platform validates and sends out a unique anyonymized hash for the user which the platform can store to keep count. This can be used for other validation purposes as well which are not limited to just petitions and the data returned by the platform can be scoped to the requester sort of like Oauth. To make it even better for privacy, you can introduce the concept of an application identifier which will be unique for petition/form etc. The hash will be unique with the application identifier scope, so outside platforms can't correlate individual identity through multiple petitions.

threatofrain 6y ago

How would you have an effective petition in the EU without verifying that petitioners are EU citizens? Then this petition would be reduced to a singular PR push.

daenney 6y ago
You don’t need to ask for the social security number equivalent to verify citizenship. By itself it doesn’t help in that context since residents get one too. If you try the form for different countries, in a lot of cases they don’t ask for that particular identifier, because they legally can’t, and ask for address information instead. That’s still a little creepy, but a whole lot less.
- RobertoG 6y ago
  Personally, I have less problem with giving my ID than my address. It's the address what feels creepy to me. >>"By itself it doesn’t help in that context since residents get one too." At least in my country that's not true. The resident but not citizen number is different.
- varjag 6y ago
  Residents in much of the EU get plenty of rights, including voting in local elections. So why not? They live there, and their biometrics are being collected too.
  - daenney 6y ago
    I didn’t say at any point that residents shouldn’t get to vote on this. But they’re looking to verify citizenship, not residency.
- isbvhodnvemrwvn 6y ago
  In some countries, like Poland, you don't have to have your address registered with the government. PESEL and your ID number are a sort of multi-factor authentication mechanism.
actuator 6y ago
Can't each country have a platform where you kind of validate it in kind of this way. - Select the country, get redirected to the sovereign identity auth platform - There you can log in/provide the details in the sovereign run platform. - The sovereign run platform validates and sends out a unique anyonymized hash for the user which the platform can store to keep count. This can be used for other validation purposes as well which are not limited to just petitions and the data returned by the platform can be scoped to the requester sort of like Oauth. To make it even better for privacy, you can introduce the concept of an application identifier which will be unique for petition/form etc. The hash will be unique with the application identifier scope, so outside platforms can't correlate individual identity through multiple petitions.