Well, all this nonsense is just what happens when the provider of analog IDs (usually a federal, state, or local government) does not step up and provide a digital equivalent.
Online photo ID verification just does not make any sense at all: Identity documents usually have physically hard to forge features that just make no sense in a remote context, and that’s not even factoring in generative AI.
Looking at an ID document without a person standing next to it (whether online or in person) is one level of ridiculous beyond that.
But all of this is brought to you by the industry that thinks an SSN is a bearer authentication token, so I’m not too surprised.
True but there have been reported cases where even a fake ID obtained through such KYC helped catch criminals (I struggle for link, it was part of some story). It's still evidence.
Sure, but evidence after the fact is usually little consolation.
As an individual, my first concern isn't whether the bank/company/whoever got fooled by scammers is eventually made whole and/or the fraudsters are prosecuted: I just don't want my identity to be that easily forgeable in the first place!
And that would solve the larger societal problem too: Make identity theft much more difficult and there won't be as much need for zero-liability provisions, a dispute mechanism for fraudulent credit record entries, law enforcement chasing perpetrators (which is often futile if they're abroad and using unwitting accomplices/money mules) etc.
How does it mean more biometrics? Many governments already issue plastic ID cards; it's possible to embed a smart card chip in these and use the ID as a secure remote authentication method with almost any smartphone.
Such an infrastructure needs to be neither centralized nor government-run: If you prefer state/local governments to be in charge of ID, or even private notary-like entities, you totally can.
Stronger guarantee makes it a more attractive target. If some magic token is an absolute proof that it is you then lose that token and go prove to someone that you is you. Just lose your card and if I find it then I am you and you're done.
Comments
Well, all this nonsense is just what happens when the provider of analog IDs (usually a federal, state, or local government) does not step up and provide a digital equivalent.
Online photo ID verification just does not make any sense at all: Identity documents usually have physically hard to forge features that just make no sense in a remote context, and that’s not even factoring in generative AI.
Looking at an ID document without a person standing next to it (whether online or in person) is one level of ridiculous beyond that.
But all of this is brought to you by the industry that thinks an SSN is a bearer authentication token, so I’m not too surprised.
True but there have been reported cases where even a fake ID obtained through such KYC helped catch criminals (I struggle for link, it was part of some story). It's still evidence.
Sure, but evidence after the fact is usually little consolation.
As an individual, my first concern isn't whether the bank/company/whoever got fooled by scammers is eventually made whole and/or the fraudsters are prosecuted: I just don't want my identity to be that easily forgeable in the first place!
And that would solve the larger societal problem too: Make identity theft much more difficult and there won't be as much need for zero-liability provisions, a dispute mechanism for fraudulent credit record entries, law enforcement chasing perpetrators (which is often futile if they're abroad and using unwitting accomplices/money mules) etc.
I wrote the fake ID helped catch criminals, how is that evidence after the fact? Maybe I misunderstood your phrasing
That usually means biometrics and more power into the hands of the government (or whoever hacks it)
How does it mean more biometrics? Many governments already issue plastic ID cards; it's possible to embed a smart card chip in these and use the ID as a secure remote authentication method with almost any smartphone.
Such an infrastructure needs to be neither centralized nor government-run: If you prefer state/local governments to be in charge of ID, or even private notary-like entities, you totally can.
Stronger guarantee makes it a more attractive target. If some magic token is an absolute proof that it is you then lose that token and go prove to someone that you is you. Just lose your card and if I find it then I am you and you're done.