3 ms·
Here's a novel idea: don't remove the existing email/password/secure-image combo. It works fine. You can search for something more secure, sure - but don't bre
by Klonoar 5y ago
Here's a novel idea: don't remove the existing email/password/secure-image combo. It works fine.
You can search for something more secure, sure - but don't break the damn system for the millions of people who need it and refuse to deal with ID.me.
- throwawaysea 5y agoAbsolutely. Email, password, secure image, 2FA seems more than good enough. It already is for everyone else in my online life like banks, medical services, and so on. Why wouldn’t it be for government services? Given that ID.me is located in the DC area, it seems a lot like this was forced through due to shady dealing.
- tims33 5y agoTotally agree. Makes me wonder what sort of back room dealing went on to select ID.me.
- SN76477 5y agoThis sounds good to me. So much of this sounds like another overengineered solution to a problem that shouldn't exist.
- hanniabu 5y agoSounds more like data mining and getting friendly companies nice contracts to me
- genewitch 5y agoSounds like another cut of the >$1,800,000,000 IT budget of the IRS. They couldn't store more than 500MB of emails per employee, which was ~45TB uncompressed in 2014. Because of budgetary constraints. Because they paid some dude rosemaro a half billion for an IT contract, among other things
- somenewaccount1 5y agoThis has nothing to do with securing your data. It's about denying citizens their right to privacy under the disguise of preventing fraud. I 1000% guarantee the use of ID.me cost the government more than they save in fraud. It's just the Patriot act in different sheep's clothing.
- Spooky23 5y agoHuh? The government lost tens of hundreds of billions in unemployment fraud during COVID, and tax refund fraud is huge.
- PaulDavisThe1st 5y agoHow much of that fraud would id.me prevent?
- Spooky23 5y agoid.me claims to be able to validate identities at a level equivalent to NIST identity assurance level 2. (Not sure if IRS implemented that) If you look at the fraud activity reported in the media in places like California, most of that was using breach data. Validating at IAL2 would probably eliminate 90% of that. Tax return fraud is a huge business too, especially for people with large refunds due to EIC.
- somenewaccount1 5y agoTens of hundreds of billions is called "trillions", and no, what you just said is false.
- Spooky23 5y agoIt’s a typo, and should have been “or”. If you don’t believe that, I’m afraid that you are misinformed.
- jimkleiber 5y agoWhat information do you believe the US government should be allowed to maintain on its citizens? Anything?
- deleted 5y ago[deleted]
- ourmandave 5y agoMaybe the hackers have already figured out how to compromise that at scale, so they have to go to 3fa. Like a few years back when they were stealing tax refunds by filing before you or filing for people who'd passed away that tax year.
- deleted 5y ago[deleted]