5 ms·

Many passports also contain digitized fingerprint scans. But those are even harder to access. You need a private key that only governments have.

aneutron 1y ago
Sounds fairly sensible to me
- heavyset_go 1y ago
  If it's truly sensitive data, encrypting with a unique private key and locking that with a PIN a la FIDO via NFC would be a bit more secure. One master key leak and everyone is walking around with IDs that give away sensitive data over RFID.
  - Nextgrid 1y ago
    > sensitive data "Sensitive" data that you already leave on everything you touch.
    - heavyset_go 1y ago
      You leave your DNA everywhere, too, but there are data security and privacy implications of digitizing that data and voluntarily/involuntarily sharing it with others.
- timewizard 1y ago
  "Many passports also contain your computer password. But those are even harder to access. You need a private key that only governments have." Still reasonable?
  - aneutron 1y ago
    If you think of your fingerprint as a "secret", you're wrong. It's more your name. That would be like saying your face is a secret. It's not.
    - timewizard 1y ago
      > If you think of your fingerprint as a "secret", I can unlock my laptop with just a fingerprint. Whether or not we believe this the implementation already exists. > It's more your name. I can change my name. Can I change my fingerprints? > That would be like saying your face is a secret. I can unlock my phone with my face. Whether or not we believe this the implementation already exists. > It's not. Let's discuss the real world and not the ideal fantasy.
jwr 1y ago
> that only governments have :-)
- muhehe 1y ago
  Do share :)
- connicpu 1y ago
  A corrupt government official selling a copy of that key to the highest bidder just sounds like the free market to me /s
  - belter 1y ago
    "Dutch journalist buys fake Syrian passport with prime minister’s photo" - https://www.dutchnews.nl/2015/09/dutch-journalist-buys-fake-syrian-passport-with-prime-ministers-photo/ https://www.dutchnews.nl/2015/09/dutch-journalist-buys-fake-...
    - victorbjorklund 1y ago
      does not say anything about it passing digital checks
  - charcircuit 1y ago
    Why would they make such an important key be copyable?
    - lxgr 1y ago
      To be useful, that key needs to be present in countless border checkpoint or even police devices, so it's inherently very hard to keep secret. That's a known trade-off, and I believe some countries accordingly restrict access to their own national authorities (which usually already have access to that data via other means, since they're issuing the document).
      - 1y ago

aneutron 1y ago

Sounds fairly sensible to me

heavyset_go 1y ago
If it's truly sensitive data, encrypting with a unique private key and locking that with a PIN a la FIDO via NFC would be a bit more secure. One master key leak and everyone is walking around with IDs that give away sensitive data over RFID.
- Nextgrid 1y ago
  > sensitive data "Sensitive" data that you already leave on everything you touch.
  - heavyset_go 1y ago
    You leave your DNA everywhere, too, but there are data security and privacy implications of digitizing that data and voluntarily/involuntarily sharing it with others.
timewizard 1y ago
"Many passports also contain your computer password. But those are even harder to access. You need a private key that only governments have." Still reasonable?
- aneutron 1y ago
  If you think of your fingerprint as a "secret", you're wrong. It's more your name. That would be like saying your face is a secret. It's not.
  - timewizard 1y ago
    > If you think of your fingerprint as a "secret", I can unlock my laptop with just a fingerprint. Whether or not we believe this the implementation already exists. > It's more your name. I can change my name. Can I change my fingerprints? > That would be like saying your face is a secret. I can unlock my phone with my face. Whether or not we believe this the implementation already exists. > It's not. Let's discuss the real world and not the ideal fantasy.

jwr 1y ago

> that only governments have :-)

muhehe 1y ago
Do share :)
connicpu 1y ago
A corrupt government official selling a copy of that key to the highest bidder just sounds like the free market to me /s
- belter 1y ago
  "Dutch journalist buys fake Syrian passport with prime minister’s photo" - https://www.dutchnews.nl/2015/09/dutch-journalist-buys-fake-syrian-passport-with-prime-ministers-photo/ https://www.dutchnews.nl/2015/09/dutch-journalist-buys-fake-...
  - victorbjorklund 1y ago
    does not say anything about it passing digital checks
- charcircuit 1y ago
  Why would they make such an important key be copyable?
  - lxgr 1y ago
    To be useful, that key needs to be present in countless border checkpoint or even police devices, so it's inherently very hard to keep secret. That's a known trade-off, and I believe some countries accordingly restrict access to their own national authorities (which usually already have access to that data via other means, since they're issuing the document).
    - 1y ago