4 ms·

> Until recently, everyone's address were printed in a big book that was sent to every household for free. I lived for years in a country where the government p

> Until recently, everyone's address were printed in a big book that was sent to every household for free. I lived for years in a country where the government published everyone's address online and never experienced or heard about any issues. Back in those days you had to turn up in person to do things like open a bank account, pay a cheque into your bank account, draw money from a bank account, etc. You probably used the same bank (my first bank account only allowed me to draw money from a specific branch, during work hours, and only up to a set limit each month). The bank staff probably knew who you were on sight. I'm not saying your address should be secret - I agree with you that this is probably OK. I'm saying the attack surface for identity theft is so much larger now that we should probably be more careful than we were.

SoftTalker 4y ago
The problem is that we allow information to be a proxy for turning up in person. Information that is either public record, or very likley to be available in one of the many known or unknown data breaches that occur regularly. Knowing my mother's maiden name, the history of addresses I've lived at, any of my various ID numbers, account numbers, etc. should not be sufficient to prove identity. Yeah this is inconvenient for many things but the reality today is that all of this "identifying" information is (or should be) considered public. Stop accepting this, and most of the problems with data breaches and leaks go away.
- Turing_Machine 4y ago
  > Knowing my mother's maiden name, the history of addresses I've lived at, any of my various ID numbers, account numbers, etc. should not be sufficient to prove identity. What should be, then? I'd like to see a compartmentalized ID that doesn't have all the information there in one easily human-readable (or scannable) form. For instance, a bar only really needs to know if you're of legal drinking age. They shouldn't be able to get your exact date of birth, your address, a copy of your photo, etc.
  - SoftTalker 4y ago
    It's not an easy answer; I'm not sure I have an answer. I'd say for now, a government photo ID and supporting paper documentation. Not foolproof, and there is a chicken/egg problem there, but at the same time it's much harder to exploit remotely, and its much harder to exploit at any kind of scale.

SoftTalker 4y ago

The problem is that we allow information to be a proxy for turning up in person. Information that is either public record, or very likley to be available in one of the many known or unknown data breaches that occur regularly. Knowing my mother's maiden name, the history of addresses I've lived at, any of my various ID numbers, account numbers, etc. should not be sufficient to prove identity. Yeah this is inconvenient for many things but the reality today is that all of this "identifying" information is (or should be) considered public. Stop accepting this, and most of the problems with data breaches and leaks go away.

Turing_Machine 4y ago
> Knowing my mother's maiden name, the history of addresses I've lived at, any of my various ID numbers, account numbers, etc. should not be sufficient to prove identity. What should be, then? I'd like to see a compartmentalized ID that doesn't have all the information there in one easily human-readable (or scannable) form. For instance, a bar only really needs to know if you're of legal drinking age. They shouldn't be able to get your exact date of birth, your address, a copy of your photo, etc.
- SoftTalker 4y ago
  It's not an easy answer; I'm not sure I have an answer. I'd say for now, a government photo ID and supporting paper documentation. Not foolproof, and there is a chicken/egg problem there, but at the same time it's much harder to exploit remotely, and its much harder to exploit at any kind of scale.