3 ms·

It's maybe necessary to point out the fairly (?) obvious, namely that there can be no 100% secure system. A key can always get stolen or be replaced with a suff

It's maybe necessary to point out the fairly (?) obvious, namely that there can be no 100% secure system. A key can always get stolen or be replaced with a sufficiently similar one, and each door and lock has failure modes. That we nowadays believe digital systems are superior to brick-and-mortar, cash, personal interactions and actual signatures on physical paper—all of which can be robbed, stolen, staged, or spoofed—is largely down to our excitement about the perceived utility of doing things the digital way. But where previously a given interaction was only open to say thousands of customers per day (visiting the location of a shop), that same firm's web shop is now readily accessibly 24/7 to billions of actors who don't even have to be humans any more. I'd also venture that a fair number of bad guys only do it the cyber way because that might increase their chances to get something while decreasing their risk of getting caught. For a transaction I had recently to install an ID app that then wanted to take photos of my face and my ID card. I had no recourse to another method nor can I know where and how these data will be stored. This data, collected in the name of increased security and trust, has now become part of the global data trove, making it a little bit more attractive to commit online crimes. Therefore, the party that forced me to undergo the procedure has, by their action, made the world at large and online transactions in particular a little less secure and trustworthy.

raxxorraxor 4y ago
Absolutely. I think the party that needed to ID your face should take full responsibility if the data ever gets compromised. Perhaps they have a workflow where this data will be completely removed, but I somehow doubt it.
- DemocracyFTW2 4y ago
  I also had the impression that they do not store some of the data verbatim but make a hopefully non-reversible fingerprint of it. But even so it's icky, and we have seen in the past that big players with all the money and IT expertise in the world got hacked and robbed. As it stands now, it's like a shootout. The party that forced me to undergo this procedure has hired the services of a third partner that I do not know and whose procedures, standards, and personnel I cannot audit. Should there arise legal issues the burden of a lawsuit or somesuch will weigh much heavier on my shoulders than on the other parties', who I assume have plenty of means to just pay for any lawyer and legal assistance they deem appropriate. Handing over very personal and valuable data in exchange for a promise, then hoping for the best and keeping fingers crossed is all of my part in this.

raxxorraxor 4y ago

Absolutely. I think the party that needed to ID your face should take full responsibility if the data ever gets compromised. Perhaps they have a workflow where this data will be completely removed, but I somehow doubt it.

DemocracyFTW2 4y ago
I also had the impression that they do not store some of the data verbatim but make a hopefully non-reversible fingerprint of it. But even so it's icky, and we have seen in the past that big players with all the money and IT expertise in the world got hacked and robbed. As it stands now, it's like a shootout. The party that forced me to undergo this procedure has hired the services of a third partner that I do not know and whose procedures, standards, and personnel I cannot audit. Should there arise legal issues the burden of a lawsuit or somesuch will weigh much heavier on my shoulders than on the other parties', who I assume have plenty of means to just pay for any lawyer and legal assistance they deem appropriate. Handing over very personal and valuable data in exchange for a promise, then hoping for the best and keeping fingers crossed is all of my part in this.