68
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 22 Mar 2024
68 points (98.6% liked)
Europe
8324 readers
1 users here now
News/Interesting Stories/Beautiful Pictures from Europe ๐ช๐บ
(Current banner: Thunder mountain, Germany, ๐ฉ๐ช ) Feel free to post submissions for banner pictures
Rules
(This list is obviously incomplete, but it will get expanded when necessary)
- Be nice to each other (e.g. No direct insults against each other);
- No racism, antisemitism, dehumanisation of minorities or glorification of National Socialism allowed;
- No posts linking to mis-information funded by foreign states or billionaires.
Also check out !yurop@lemm.ee
founded 1 year ago
MODERATORS
Ultimately, there are too many databases with people's fingerprints out there, and my expectation is that they're gonna leak at some point.
So that means two things:
First, don't use biometrics to check identity unless you're in a position where a person forging them can actually be checked for forged biometrics and get in trouble if caught. Like, customs at an airport, where you could see if someone has fake caps on their fingers or something. Biometrics cannot normally be invalidated. If it leaks and you're using the fingerprints to authenticate yourself to, say, your laptop or your bank or something, you can never invalidate those credentials, and people will always be able to get into your bank account. Specifically in the case of fingerprints, it's often not even that hard to get ahold of a specific individual's biometrics -- you leave a record of them on any smooth surface that you touch.
Second, if you're in a position where you don't want to leave behind a signature, you might want to wear something that masks biometrics. If you have widely-leaked biometrics databases floating around that anyone can get access to, and you, say, put your hand on something, you've just left a signature that anyone can map to identity. Maybe bring back gloves, say. I don't think that we're at a point where there are systems that can do iris scans at a distance without someone knowing. Facial recognition is definitely doable at a distance, and that happens today. People at political protests who are worried about being identified, some military people, stuff like that, will mask their face. Maybe it makes sense to roll back anti-mask laws if facial databases are gonna be floating around. I dunno about gait recognition, whether that's sufficiently-unique to distinguish among a large number of people at a distance.
Good to mention that (in the Netherlands) when you've provided fingerprints for a new identification card, the fingerprints are wiped from any system after you've received the card, remaining only on the card itself.
I didn't know that, but that's nice.
Now how do I dispose of the card once it's expired? ๐ค
Over here you hand it over when you pick up the new one and it gets physically marked (a corner gets cut, typically) to prevent it being used as a duplicate.
Or you can shred it.
That doesn't get rid of the markings on it, which could still be used.
It doesn't. But it's a personal ID card, You can also lie about having lost it and get a replacement.
All security is mitigation. There aren't a ton of uses for a second expired ID of yourself in any case. It's not like an old timey passport where you'd see someone in the movies physically changing the photo and expiration date. This thing is printed right on the plastic with hard to reproduce security measures similar to paper money.
Probably this is an EU-wide law, because my east-leaning country says this too
Same in Germany. But I wouldn't be surpised at all if wiretapping agencies like the NSA manages to get most of the data anyway. Then again, the same can be said for phones which are supposed to only keep the data on the device.