37 ms·
The bar to stealing it is way different now though. You would have to steal a username + phone + PIN code for phone + PIN code for MitID app. If that happens,
by Tehnix 3y ago
The bar to stealing it is way different now though.
You would have to steal a username + phone + PIN code for phone + PIN code for MitID app.
If that happens, then it would also be trivial to unlink the app from that phone.
At no point in time would you be unaware of the theft here.
Contrast this to what happens in the US often: your personal info is leaked from the plethora of places it’s kept. Someone can now in perpetuity exploit your identity, or at the very least for a long time until you find out randomly.
Which system sounds better to you? I sure know that I’d prefer the first one.
I’d welcome any actual arguments against it, but you’ve not really presented any at all so far.
- smaudet 3y ago"You would have to steal a username + phone + PIN code for phone + PIN code for MitID app." And when your phone is hacked then all three are up for grabs? "Contrast this to what happens in the US often: your personal info is leaked from the plethora of places it’s kept." And yes, totally never is your govt info leaked from the plethora of places it is kept. /s The problem is not having govt information, the problem is having it kept on phones or entered on devices at all. "I’d welcome any actual arguments against it," See the above. I dislike the automated exfiltration of my identifying information, and then being saddled with the "responsibility" for it. The solution is not to make it even more automated, but to generally never to accept any credential except as a revokable guarantee - doing business as a large corp you should accept the risk of fraud, and presume your clientelle are not who they say they are.
- tjoff 3y ago> And when your phone is hacked then all three are up for grabs? No.