3 ms·

There is. Liveness checks prove the user submitting the info is the user in the documents.

by lijok 2y ago

lolinder 2y ago
For the uninitiated, can you elaborate on how a liveness check can be used to show that the human being who typed "John Doe" in the name field, "01/01/1970" in the birthday field, and "000-00-0000" in the SSN field is in fact John Doe who was born on 01/01/1970 and has the SSN 000-00-0000? I get that we can determine if it was a human being with some acceptable level of accuracy, but what actually matters is that it's the right human being. How does a liveness check solve the problem of these numbers that are used as passwords being de facto public information?
- j16sdiz 2y ago
  I honestly don't know what the alternative can be .. Fingerprints and iris scan in person? Government issued smart card? Accepting fraud as a cost of business? Or just no service to person you don't personally know?
  - lolinder 2y ago
    A government-issued ID card that was actually designed to be an ID card (with all the security measures that entails) would be a great start. For the first three decades of their existence social security cards expressly said they were "not for identification". All the way through 2011 the first three digits of an SSN were a geographical code and the other six were assigned in a predictable sequence, which means that for any SSN from before 2011 there's an entirely deterministic inc() and dec() function that can be used to derive new, valid social security numbers. This also means that any typo most likely ends up pointing at another valid SSN (no check digit). My credit card has better security characteristics than the card that they used to identify me in order to sign me up for the card in the first place. That's absurd.
    - nradov 2y ago
      A state government issued REAL ID card is exactly that. The majority of US persons either already have one, or will the next time they renew at the DMV. https://www.dhs.gov/real-id https://www.dhs.gov/real-id
ranger_danger 2y ago
Source:

There is. Liveness checks prove the user submitting the info is the user in the documents.

by lijok 2y ago

There is. Liveness checks prove the user submitting the info is the user in the documents.

For the uninitiated, can you elaborate on how a liveness check can be used to show that the human being who typed "John Doe" in the name field, "01/01/1970" in the birthday field, and "000-00-0000" in the SSN field is in fact John Doe who was born on 01/01/1970 and has the SSN 000-00-0000? I get that we can determine if it was a human being with some acceptable level of accuracy, but what actually matters is that it's the right human being. How does a liveness check solve the problem of these numbers that are used as passwords being de facto public information?

j16sdiz 2y ago
I honestly don't know what the alternative can be .. Fingerprints and iris scan in person? Government issued smart card? Accepting fraud as a cost of business? Or just no service to person you don't personally know?
- lolinder 2y ago
  A government-issued ID card that was actually designed to be an ID card (with all the security measures that entails) would be a great start. For the first three decades of their existence social security cards expressly said they were "not for identification". All the way through 2011 the first three digits of an SSN were a geographical code and the other six were assigned in a predictable sequence, which means that for any SSN from before 2011 there's an entirely deterministic inc() and dec() function that can be used to derive new, valid social security numbers. This also means that any typo most likely ends up pointing at another valid SSN (no check digit). My credit card has better security characteristics than the card that they used to identify me in order to sign me up for the card in the first place. That's absurd.
  - nradov 2y ago
    A state government issued REAL ID card is exactly that. The majority of US persons either already have one, or will the next time they renew at the DMV. https://www.dhs.gov/real-id https://www.dhs.gov/real-id

ranger_danger 2y ago

Source: