4 ms·

> "I am a unique human you know as <uuid>", not "I am John Q Smith" That just makes <uuid> an identifier like your name. <uuid> becomes yet another piece of P

> "I am a unique human you know as <uuid>", not "I am John Q Smith" That just makes <uuid> an identifier like your name. <uuid> becomes yet another piece of PII, increasing your exposure. Further, it will even inevitably get linked to your other identifiers in various databases over time. This problem is why pseudoanonymization isn't really that useful.

deleted 1y ago
[deleted]
thomassmith65 1y ago
The idea isn't that a human gets one uuid to be used everywhere, but that each site gets one of the human's many uuids. Someone still needs to track which uuids belong to which human, but at least it's not a random, possibly insecure or disreputable website.
- baby_souffle 1y ago
  So this UUID is just as anon as crypto is. Technically, yes. Crypto is anon. Right up until there's a leak or a slip up that links your wallet address to your identity. Then just go through the entire history of the ledger to see every transaction that's ever happened with your wallet. Or will ever happen, for that matter. No thank you.
  - akimbostrawman 1y ago
    That is a bitcoin/transparent chain problem not a crypto problem. Monero has solved that issue for many years. It has also more to do with zero knowledge proof than cryptocurrency.
nullc 1y ago
The ID could be site unique. So for example, your ID card could have [Name, Pubkey, DOB] signed by the issuer, where pubkey is a pubkey for the ID card holder that supports unique signatures. The card has contains the private key and can sign with it. Then to gain access to AdultsOnly.com you sign "AdultsOnly.com" and hash the result. This value is your site-identity. You hand the site the site identity and a zero knowledge proof that you know a [Name, Pubkey, DOB] and valid issuer signature with DOB<=DATE and pubkey matching the signature that went into the hash. Now they know you have an ID by that issuer with an acceptable DOB, and they know that one ID == one account (so no leaked/cracked ID being used to let everyone in). But they cannot link IDs between different sites or with names... if the private keys are not possessed by the state (e.g. generated by you when you get your ID) not even the state could help convert ID to names or link IDs between different sites.
- deleted 1y ago
  [deleted]
- JohnFen 1y ago
  Yes, I fully understand how that works. I don't trust it (or, more properly, I think that it's unwise to to trust that it's being done properly).

deleted 1y ago

[deleted]

thomassmith65 1y ago

The idea isn't that a human gets one uuid to be used everywhere, but that each site gets one of the human's many uuids. Someone still needs to track which uuids belong to which human, but at least it's not a random, possibly insecure or disreputable website.

baby_souffle 1y ago
So this UUID is just as anon as crypto is. Technically, yes. Crypto is anon. Right up until there's a leak or a slip up that links your wallet address to your identity. Then just go through the entire history of the ledger to see every transaction that's ever happened with your wallet. Or will ever happen, for that matter. No thank you.
- akimbostrawman 1y ago
  That is a bitcoin/transparent chain problem not a crypto problem. Monero has solved that issue for many years. It has also more to do with zero knowledge proof than cryptocurrency.

nullc 1y ago

The ID could be site unique. So for example, your ID card could have [Name, Pubkey, DOB] signed by the issuer, where pubkey is a pubkey for the ID card holder that supports unique signatures. The card has contains the private key and can sign with it. Then to gain access to AdultsOnly.com you sign "AdultsOnly.com" and hash the result. This value is your site-identity. You hand the site the site identity and a zero knowledge proof that you know a [Name, Pubkey, DOB] and valid issuer signature with DOB<=DATE and pubkey matching the signature that went into the hash. Now they know you have an ID by that issuer with an acceptable DOB, and they know that one ID == one account (so no leaked/cracked ID being used to let everyone in). But they cannot link IDs between different sites or with names... if the private keys are not possessed by the state (e.g. generated by you when you get your ID) not even the state could help convert ID to names or link IDs between different sites.

deleted 1y ago
[deleted]
JohnFen 1y ago
Yes, I fully understand how that works. I don't trust it (or, more properly, I think that it's unwise to to trust that it's being done properly).