photog.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
A place for your photos and banter. Photog first is our motto Please refer to the site rules before posting.

Administered by:

Server stats:

246
active users

#id

1 post1 participant0 posts today
Continued thread
It has come to my attention that I have previously loaded my passport into my Android phone as an "ID pass" which should theoretically get me through TSA legitimately
Replied in thread

@janvlug Wow je hebt een #asn mailadres gekregen. Heb deze week de 2e #id mail gekregen en als je niet meewerkt ... Walgelijk! Telefonisch heeft de ASN medewerker aangegeven dat het een proef is, en dat in een later stadium je je ook mag komen identificeren op een kantoor. Maar de huidige werkwijze staat mij niet aan. En inderdaad ik gebruik de browsercode om gewoon via een browser te bankieren zonder #app Langleve #unappsen 💪

Edit: I think it's been identified, see the comments. Thanks for the boosts and help. What a great community!
Can someone please help me identify this tiny worm in my garden? It's like a piece of hair and it moves in a twisting motion. I think it's eating some of my plants, but I can't find out what it is. Anyone? At first I thought it was a hair, that's how thin it is.
It is in a bed where I have sown some red mustard plants which do seem to be chomped on. But maybe they're not the culprits. They look too tiny to cause much damage. If it's them, will diatomaceous earth control them?

@colinpurrington is this something you recognize?

How do you link Verifiable Credentials to a human?

shkspr.mobi/blog/2021/06/how-d

Verifiable Credentials are a brilliant standard to help... well... Verify Credentials. How do you know that someone has an MBA from Harvard? It's pretty easy to fake a degree certificate, or to change your name to George W. Bush, or simply lie. The same is true with any attestation - it's often hard to contact the issuer of a claim and check that it is genuine.

Verifiable Credentials aims to solve that. The standard describes a document which includes the claim (this person is an airline pilot), the person's identity (name, DOB, etc), the party making the claim (Name, ID, date of issuing), and a digital signature to tie it all together. (It is a lot more complicated than that, obviously.)

Let's take a look at the data inside COVID Vaccine "Passport". I've removed some of the metadata for simplicity, but you can read the full spec if you're interested.

   {   "ver": "1.0.0",   "nam": {     "fn": "Smith",     "gn": "Jo",   },   "dob": "1984-02-29",   "t": [     {       "tg": "840539006",       "tt": "LP217198-3",       "tr": "260415000",       "ma": "1232",       "sc": "2021-04-13T14:20:00+00:00",       "dr": "2021-04-13T14:40:01+00:00",       "tc": "GGD Fryslân, L-Heliconweg",       "co": "NL",       "is": "Ministry of VWS",       "ci": "urn:uvci:01:NL:GGD/81AAH16AZ"     }   ]},"YR/yMsyE3AOysWLCXuDc/Rlu507gH0/wgok+P8dxJtCwy0ydsIE2J5MeMxbynynU3n//zgOKSTB20FN0Fs1bgQ=="

It tells you the person's name, date of birth, when they had the vaccine, which vaccine it is, who administered it, some administrative codes, and then gives it a digital signature which can be verified without needing an Internet connection. Nifty!

The same is broadly true with academic qualifications. It lists your names, birthday, university, level obtained. Or your employment history can be encoded with your employment dates, salary, references.

So you can show the above - encoded as a QR code - to anyone. They can scan it and verify that it is authentic! AWESOME!

Except...

How do you prove that you're the person mentioned in the credential?

You could show your passport or driving licence at the same time. Assuming you can afford either of those documents. But that still leaves the same problem. How do you prove that the passport belongs to you? Perhaps you grabbed it at the same time you stole the certificate.

Humans are not very good at recognising faces from photos. So comparing the picture of me in my passport (young! clean shaven! well lit!) with the person in front of you (old and tired! beardy! under a street lamp!) is always going to be error prone.

This isn't a problem which can be solved by adding more digital signatures. Even if I co-signed the credential with my private key - you have no way of linking that key to a corporeal human being.

A Verifiable Credential could also contain a hash of biometric data like a fingerprint, for example. But that leads to further problems. Are people comfortable giving away their biometrics to lots of different organisations? Do verifiers want the extra expense of getting fingerprint readers? That might work for an airport, but is probably prohibitive for a café. You could use proxies - did I see this person unlock their phone to present the claim - but these are weak ties at best.

To be clear, this problem isn't limited to vaccine certificates. It applies to any Verifiable Credential. Whether it is an academic qualification, a health certificate, employment status, or any other claim.

This isn't something which can be solved by putting a claim on a blockchain (lolsob) - it is a fundamental limitation of the fact that humans don't come with built in, irrevocable, digital signatures.

Terence Eden’s Blog · How do you link Verifiable Credentials to a human?
More from Terence Eden

I believe I have managed to prove my ID in order to comply with the new laws that say I have to prove my ID to own the business I own that I'm sure already asked me to prove my ID when I registered it.

First we tried the on-web version, but that apparently relies upon the corporates having managed to profile and track me, because it told me they had no questions upon which to base identification. Good I guess? My avoid-tracking systems must be working at least a bit?

Next we tried the android app, but apparently the phone I tried that with is too old and the app won't install.

So next option is turning up at a post office with a printed letter. I don't own a printer though, so had to have them post that to me.

Took the letter and a driving licence up to the post office today and "It's not going through" they said, pointing to a stalled progress bar on an android app on a tablet.

Um. Okay. So?

Just wait longer apparently. About ten minutes and it finally proceeded and the post office man took a photograph of me after asking me to disrobe of my robe, strip down to a teeshirt and jeans.

Not sure in what sense this has proven my ID any more than it was already proven to get the driving licence or company registration in the first place?

Apparently I now have government logins for "One Login" and for "government gateway" and they are not the same thing? But sort of are the same thing?

Can't say I really understand it. Expect they'll introduce a third government login when they do these Digital ID cards they're talking about.

God knows how I'm supposed to know which to use when the company tax records need updating in a few months.