I’m looking for studies that either say that Digital ID/Age verification can be done in a truly private manner or not.

I have read a bunch of stuff, there is a lot of noise about this subject.

I want to be able to submit something to politicians as to how this system is going to be a huge target; and the dangers around it. But I also want to be able to know if is technically possible to do it properly.

  • Telorand@reddthat.comEnglish
    0·
    7 days ago

    If a database exists, it can be hacked and exfiltrated. With attacks ramping up on states and municipalities, which are often behind on security updates, they also don’t give their 70yo clerical staff proper infosec training to avoid social engineering techniques, nor do they pay them enough to care.

    I would look to recent reports of attacks on local governments, rather than studies. Politicians aren’t exactly skilled at understanding studies, but exciting news headlines might be enough to grab their attention. !cybersecurity@sh.itjust.works might be a good place to start!

    • Ulrich@feddit.orgEnglish
      0·
      7 days ago

      The govs all around the world always have had and and always will have a record of the populace. They’re the ones responsible for verifying ID. Think about it, what’s the only way to verify your ID around the world? With gov documents.

      I wish they would care more about the security of that information but they don’t, they won’t, and they’re not just going to delete it. Ever.

      That’s why the gov has to be the one implementing any sort of ID checks. Contracting this responsibility out to private third party corpos is dangerous as fuck.

      The EU digital wallet looks private and secure to me but I am not an infosec professional. It just generates a token to give to a site that verifies “yes this user is over 18” and nothing else. It’s too bad it was not included as a requirement of the existing legislation.

    • absGeekNZ@lemmy.nzOPEnglish
      0·
      7 days ago

      Cheers.

      I’ll worry about how to package the info; so that a politician can digest it. But if it is not technically possible; I want to be able to reference some studies that back me up.