Keir Starmer’s plan for digital IDs risks creating “an enormous hacking target”, a cybersecurity expert has warned, as technology companies prepared to bid for contracts that could run into billions of pounds.
Every script kiddie on the planet will be trying to get in. Odds on more than one of them will too…..
I imagine Ecotricity ID’s will be at the front of the queue – if it hasn’t already been quietly given the contract.
Of course it will be a target.
Even if all the criminals in the world decide not to hack because of civic virtue or some bollocks, can you imagine how good of a target it is for hostile nations?
After the inevitable mission creep means that you need your id to do banking or go online, with a system that checks against a central database (touted as being likely to help prevent forgeries) bring down those central servers and the whole thing grinds to a halt.
It’s just introducing another weakness into the system.
God these people are fuckwits.
Taxi for Kier Starmer! Wait, better make that two taxis as there seems to be a lot of young men hanging around as well.
Really depends on what you actually construct and how you segregate it. If in effect you create a meta index – at the minimum that’s a bunch of hashed pair of numbers allowing two factors , one a number created from a biometric (non specific biometric being one of the complicating issues many models miss). Everything else is basically an application that uses the index when and only when the subject presents both.
You can use it as a lock and key combination and use to allow identity based authorisation without revealing the identity. So eg i can use it to access an application that confirms I am over 18 and nothing more. Each application still has security issues but that can be context sensitive.
You can add such revocable publish and subscribe style transactions for all sorts of purposes. Most transactions are ultimately connecting two index entries and transferring data. from one to the other.
It also allows multiple ‘identities’ which is often missed in some of the techno utopia models – rank or official status can allow authorisation etc or witness protection or similar. Either a separate entry in the index or connected via the index depending on context. Hell even married and maiden name needs to handled.
You can set it up that it gives the individual the power to connect data and there is very little issue with the ‘index’ indeed you can set it up that its intended to be distributed but you could also keep the index as an access application itself but that reduces the benefit.
Of course no one is terribly interested in a cheap lightweight model that puts power in the hands of the citizen and can be rolled out incrementally.
On the regulatory side there are some interesting models around the world that don’t do that technically but they make the public service subject to the identity driven authorisation – they can only run the identity process once and once authorised they may never do it again nor refuse the service. Never seen an analysis to see if it worked but the idea was to prevent bureaucratic hurdles multiplying and empower the citizen.
So it won’t work like that.
Indeed! Just saying some decent brains have worked out some interesting ideas – as with so many things its the idea per se but the details.
If they were seriously intending it to be used for their stated purposes and they were competent, then it would be designed such that there aren’t central servers to attack.
But it’s not intended for that, and they’re not competent.
So it will be a big database containing everything, and there will be lots of holes. Because the intended purpose is spying on citizens to ensure they’re doing, saying and thinking the right things. Keeping the data safe is against the purpose.
This is the problem with all socialists. They’re all would-be Stasi.
Cool! It will be technically advanced, intricate, and unhackable.
They could call it the Gordian Knot.
(Security is an illusion.)
I wonder which of his WEF pals he’s crawling to will get the billions? Gates, I suppose, in which case it will have all the unhackability of Windows and be on sale at any flea shop world wide…
Rumour has it, allegedly, that Euan Blair’s company is a front-runner. Remember Euan? His dad is quite well-known.
I am thinking I don’t need a job, and if a couple of million petition-signers do not comply with the mandate it will be stuffed. Heaven forbid, of course.
Paging Grikath!
How is this any different to our DigID?
Not that I expect the British digital ID to be more robust and only used for access to government websites.
Much different, by the sound of what they’re planning.
DigID is nothing more than a glorified Unified Login Server.
The organisation you log into with it is supposed to use that verification to prove “You are You” and then proceed to show You , and *only* You.
The core of DigID is your BSN, which is the actual “you can tie anything together number” on your passport. Which then gets hashed and…
Thing is…. organisations using DigID are *never* allowed to ask for, or use your BSN in any way as an identifier.
Only exceptions, with special terminals should be ummmm the Central Citizens Database, Customs/Police ( limited, display only to check the actual paper) , and of course the intelligence services.
Everything else is *supposed* to be decentralised with some hoops to jump through.if you want to tie NAW with BSN and all the other data.
Is it watertight? Nothing ever is, but “It’ll do.”
Can it be hijacked? yeeeeesss…. But you had better case your target pretty well first..
Can it be used to Spai/get dirt on you? Nothing is impossible, but…..honestly… Just trawling social media utterings ( “friend lists are a Thing…) is easier… And admissible in court….
Most importantly…
Banks + DigID…. Nope… not even allowed…
ISP + DigID….. Nope… EU Privacy regs.
Employer + DigID….. They’d wish….
(employer needs your BSN because Tax… But they cannot ever require your DigID.. ) .
And that’s just the major ones…
The UK “proposal” seeks to include all that…
Piano wire and lampposts are in order….
Presumably this is Starmer’s “I’m screwed, so I’d better come up with a quick way of raising personal cash before I’m turfed out” moment. Not expecting much on the post-PM private lecture and interviews circuit, unless it’s the coppers finally getting their act together over his corrupt dealings up to this point.
ID cards are never going to work and as we all understood from the last turn on this merry-go-round, they are abhorrent to the vast majority of the (non-Communist) population. That’s why they were repudiated in 2010 and that’s why this will be stopped in its tracks this time round or repealed by Reform UK when they get to carry the can.
Not happening.
The cunt’ll be getting plenty of personal cash, one way or another, from Chagos. This on the top is Mandelsonian.
If ID Cards were a solution to the Islamic invasion, then they’d work in countries with ID cards like France.
Clearly they don’t because France is full of them.
Starmer is a clueless idiot Commie mouthbreather.
ID cards are of limited use as they are too easy to fake. Digital ids however are based on public key cryptography which is not something you can fake.
OK Tony.
Anything created by a computer programme can be faked – sometimes you need insider knowledge to fake it (e.g. end-to-end cryptography is an example).
And once it is faked is virtually impossible to unfake, as ‘computer says no’ and ‘we don’t make mistakes’. You can guarantee that some granny from Taunton who has never so much as left Somerset let alone the UK will be deported as an illegal alien because the computer says she’s actually a 6’3″ Nigerian.
And, judging by a photo in this morning’s Telegraph, is piling on weight. He may need to be treated to new suits soon.
Come to think of it, does this mean he knows more about the potential adverse side effects of Ozempic than the rest of us?
Thing is, his wife’s fit. Looks excellent in jeans. Unfathomable.
Well, the woman being paid to impersonate his wife…
I am surprised Starmer isn’t proposing compulsory DNA testing at birth and a mega DNA database
Of course only accessible by completely honest and trustworthy public servants for keeping us all safe
Mind you link digital id to NHS records and you will have something close
The Rolls Royce brains running the country:
https://www.facebook.com/100007835495315/posts/4282700695334405/?rdid=marE7PuXgD4l5GNc
Sorry it’s on Faceache……
Andrew Orlowski writing in the Mail:
What could possibly go wrong?
When the government catches an illegal immigrant, does it expel him?
No?
Then even if digital ID helps them identify more illegal immigrants, how is that going to help them remove them?
Doesn’t the government have enough data bases of the inhabitants; one of which could be enhanced for this purpose without a thousand additional personnel and 50 million a year on contractors?