Mandatory ID cards (Brit Card) to be announced tomorrow

And non-repudabilidy, availability, data quality, MFA and a whole load of other things.
So it will need an off-line mode. Dead before it starts.
This isn't simple, there are real advantages to both the users and the government for this system as well as risks. I don't know how well it stacks up, but we've been heading this way for decades.
you haven't said what you like.
Defence in depth doesn't really apply here as digital ID doesn't preclude it nor separation of duty either. You might be thinking about compatmentalisation.
Today, you have driving license, passport, other photo ID, utility bills, etc. All providing you with separation of duty, because the ID controllers are distributed. If I want to take your ID from inside, Its harder because I need at least 50 or 60 people in the hack. If tomorrow that is replaced with one single form of ID I can target maybe 1 - 3 people. Given the DBA's will likely be outsourced contractors - easy peasy.

Its not like government departments aren't frequently hacked.
 
If I fake your driving licence, you have your passport to prove who you are. If I fake your universal single ID, you are toast.

Nonsense - You are suggesting an all encompassing ID system, replacing everything else. No one has suggested such a thing, only a universal, quick, single source of ID. Over forms of ID, could be requested, if needed.
 
Today, you have driving license, passport, other photo ID, utility bills, etc. All providing you with separation of duty, because the ID controllers are distributed. If I want to take your ID from inside, Its harder because I need at least 50 or 60 people in the hack. If tomorrow that is replaced with one single form of ID I can target maybe 1 - 3 people. Given the DBA's will likely be outsourced contractors - easy peasy.
No, that's not a separation of duty, that's a duplication of duty (at least for the ID role in it) and an increased attack surface.

Utility bills are a good example of what's wrong with current verification methods. It's basically a crappy MFA token.
 
There are real benefits. This forums is just filled with grumpy old men who hate the idea of things more modern than steam engines.
As an IT guy, have you ever worked on a high security system? That is, one that deals with very sensitive data, for which you need a high security clearance to access?
 
As an IT guy, have you ever worked on a high security system? That is, one that deals with very sensitive data, for which you need a high security clearance to access?
He asks on an anonymous board. I have passed my CISSP certification, definitely don't forget a waterbottle for the exam.
 
So answer on an anonymous board. Have you or have you not?
Not something you should be asking, or him answering.

Doubt you would get a fully honest answer any because he can't give any details if he was.
 
What is frightening is the introduction of digital.ID and then Reform getting in power.

You can't trust those guys, out Ids would be flogged to Farages mate Vlad for a few bucks.
 
What is frightening is the introduction of digital.ID and then Reform getting in power.

You can't trust those guys, out Ids would be flogged to Farages mate Vlad for a few bucks.

It could certainly be abused by an authoritarian. There are more safeguards here than in the USA, thankfully. But can you imagine what Trump would do with power over such information.
 
He’s been pushing it for years now.

I can’t believe I voted for him.
We voted for him because we had just gone through a disaster of a government headed by Thatcher (I will admit that thatcher seems to be a god send now in view of starmer). What we all thought was Labour was headed by blair so we voted for him. What we didn't know at the time, or at least I didn't, was that blair's lot were not labour they were NEW LABOUR. They were more tory than the tories. Now we have starmer in the chair, who I didn't vote for and the actual labour party is headed by corbyn. We are doomed.
 
Back
Top