My elderly father recently fell for a Facebook imposter that pretended to be a family member and asked if their friend could contact him. The friend asked him to take a photo of his driver’s license and text it to them, fortunately he doesn’t know how. I’ve been wondering ever since what can they do if they had it? It doesn’t have his social security number on it. His credit has since been locked and banks notified
They can open bank or crypto accounts in his name, and then either overdraw the account or use it to move money from other scams in and out of this account, so the real scammers name is not attached to this account.
Just rented a car. Fuck.
I’m literally picking one up in an hour 😬
Annnd this is why a refuse to verify with IDs online and use services like Plaid. And the web of T&C’s from multiple 3rd party services like this will mean all of them get shielded from blame.
Did you read the article? They were renting a car. A car rental place isn’t going to let you just not show your ID.
Yeah, it was from renting cars, but they are digital copies of your ID, so any online service is just as “at-risk”, if not more.
So how they did it once upon a time was you showed them your license, they punched the # into the system that would check it. The person at the desk would confirm it was you from the picture. No need to scan the actual ID card, which is where this problem comes from.
That is true, but now they rather have a digital proof for insurance reasons.
The IRS made me since I used a different service to file my takes this year. It was a pain in the ass. Apparently my existing id.me login wasn’t enough, they wanted a video call or a scan of my face. There was no other option. It was a pain.
Most of this seems very serious and concerning, but…
Nexus also claimed to provide scans of marijuana dispensary cards
What could anyone possibly do with that? It costs like $50 to get one in California, not sure about other states.
Legal weed in CA now dawg. No dispensary card needed
Under 21 still requires a medical card
Less taxes in most places if you have a med card. Financially sensible if you buy a certain amount per year.
But then there’s a record of you being a cannabis user, which could lead to your second amendment rights being curtailed.
There is a record, but there’s no central database unless you get an MMIC card which is different than what probably 99.9% of people do (but also larger tax benenfits)
Huh, I just assumed they got rid of them when legalization happened. TIL
The data gets sold in blocks usually. Could be for identity theft, or SIM swap attacks or any number of things. A lot of things online want an ID scan now, so this is a huge benefit to scammers.
I still have to see the online service or site asking for my ID. Maybe because I’m mostly off of the bullshit-net for the most part. But the moment any service I use asks for ID, it’s getting cancelled and blocked in my house at the network level. I’m expecting my digital life to be dramatically downsized moving forward.
Car rentals, well, not many options there when traveling, since I absolutely refuse to use ride-share apps like Uber and such.
My first thought was “so this is how they got my fake from back in the day to scan”
But don’t forget guys, uploading your government IDs to any old fucking website to prove your age is very safe and protects children. There’s no way this could go wrong and everyone in the supply chain is very trustworthy
The QR/one time code way makes a lot more sense and avoids this issue
That…doesn’t work. Just because you saw one dumb YouTuber say something doesn’t make it true.
I’m not sure if there’s some popular video you’re talking about but I’m talking about the EU ID proposal. Haven’t seen any videos about it
No. Fuck off
They’re already doing the verification and it’s not going away. I definitely prefer a better way to do it
That “it’s not going away” attitude is the fucking problem…
We should fucking fight it, either by good or by bad, because that defeatism is what they want, they want us to think that TINA, then, little by little, force ourselves to do things that at first would seem unacceptable to us.
Yeah, it’s evil. We have to fight back
But in this case there’s already a lot worse system in place. Why not get a better system while also fighting the verification thing?
Aren’t you tired begging for crumbs?
I want a ten course dinner with hookers and blow. Nothing less will do.
No, get rid of the bad system and be done with it. No compromise. This isn’t something that needs to exist at all.
The better system is no system
How about we just don’t suck the dicks of authoritarian wannabe dipshits that have proven they can’t secure any information properly and can’t run any institution properly?
I don’t know exactly what you mean, I just think for age gating there’s ways that are a lot better
Age gating is bad itself.
Eh I don’t mind. Not all stuff is for kids.
Yeah, that’s why you monitor what the kids you’re responsible for are doing on the internet. It’s trivial to setup parental controls on a network.
Hell naw, that’s an arbitrary take. There’s no “child things” or “adult things”, nor “male things” or “female things”, just things, and the “male”/“female”/“child”/“adult” is an arbitary tag we put on them.
And even if there are some things that aren’t so good for the child to see, the only correct way to address that is educating them, guiding them, listening to them and, over all, treating them as humans, the “we need to block this to children” is totally adultist.
And even if there are some things that aren’t so good for the child to see
That’s what people mean by “not all stuff is for kids”
Like parents actually parenting and activating the built in restrictions for their children’s devices?
It’s probably more effective done at the other end. It’s not like you can make parents parent
You actually can, it’s called regulations, policies and enforcement. Don’t vaccinate your crotch fruit? Cool, they can’t go to public school, and you just won a visit from child welfare
It’s not like we don’t have regulations, policies and (some) enforcement. But there’s still dogshit parents. And for this kind of thing, how would you even enforce it?
That’s the issue. We don’t need nanny’s to age gate us on the internet. All it does is create a very short path to removing anonymity on the internet
Don’t mind some age gating tbh. It would have to be pretty convenient and anonymous though.
How do you imagine it will be anonymous? Or convenient, for that matter.
Well the implementation is going to be that you prove your age to the id app that only saves the info that you’re over 18. Then the id app just tells that info to the website (or app or whatever I guess). So the site doesn’t know who is trying to prove their age or even what their age is, just that they’re over 18.
It would be nice to have that sort of quick and easy app for verifying your personal information too. I don’t think we have one where I live. We always use a bank for that and that’s more hassle than I’d like
Easy. You set the age in the os (or age range) per system account.
Apps can then request this and allow/ deny based on it. Requires admin / sudo to update age range.
No need for 3rd parties, id or anything else.
If parents are concerned about it they can implement it easily. If not, they can ignore it.
I think no ASL covers it for the Internet. Going against the most basic rule is kind of ridiculous.
If it’s going to be implemented imo it’s better to do with a privacy respecting centralized fashion than sending your id pics all over the place
You can’t violate and protect privacy at the same time.
You can protect the identity and all other info of the person than if they’re over 18 or not. I think that’s a lot better than the other ways sites are now using.
Unless you think it of just as bad because a site knowing if you’re 18+ is a violation of privacy, so might as well give them everything haha
Have the app you use to verify scan it so it can sanitize it
Surely the company must be liable, right guys? Right…?
The company MUST be Held accountable and liable for this
Also it doesn’t help that, for example, at U-Haul, employees just use their personal phone to scan a QR code and take pictures of your ID.
My local hospital apparently requires their employees to use a “secure” app on their personal phone to transmit data on the patients.
Seems like irresponsible handling of PHI (by the administration, not the staff) to me.
this idea that employees can expect you own and use a personal smartphone as part of the job irks the heck out of me.
Totally secure system!
Luckily archive.org saved the idscan.net press release announcing their partnership with Planet13 dispensaries. They have since deleted the post on their site. Nothing shady about that. 😂
I don’t like it when a store scans my driver’s license to buy alcohol. I stick to small convenience stores without that tech.
Had a fun time visiting the US, clerk didn’t understand why she couldn’t scan my ID and find it in the database. All that for trying to buy some cigarettes as I was a smoker at the time and didn’t bring much with me (stupid mistake, they’re way more expensive in the US)
UNSCANNABLE! https://youtu.be/Gg--VIL2I6Y
Why would they do that? What’s the use of scanning it?
The stated justification is that it somehow catches forgeries that altered the front of an ID but didn’t make the barcode information match. That might have been justifiable in like 1980 or something, but it’s reaaaaaaally not hard to generate the correct barcode these days if you’re forging an ID.
The real reason is to track and sell more data about you.
It keeps liquor prices down because you get the extra revenue from selling the scans. Try to keep up smh
You’re the product. The alcohol is just the lure.
It validates against the states license database to confirm it’s a legitimate ID and not a fake.
It’s hooked up to a database to make sure it’s not a fake ID.
At best they are keeping an audit trail to be sure the clerk didn’t sell alcohol to an underage person. But even if they aren’t already I figure it will get retained and used in some manner. Marketing, insurance, who knows? Lots of data brokers would buy information on who buys alcohol.
Is that really what’s going on? I always thought the barcode just contained the ID number and your information. Can probably be validated that the format is correct very easily, but you can use the correct format with incorrect data easily.
I assumed the scan was still offline validation. Because if the database isn’t networkable from their store, I imagine they aren’t causing any issues in the sales process. So you would only need to precompile and print a valid barcode with correct-looking data.
Probably won’t work for a police dispatch, who I’m sure are going to use online validation when they run the ID. But I’d swear that level of sophistication isn’t in gas stations yet.
I don’t know what kind of cards you have over there, but couldn’t it just contain all required information including photo, digitally signed by the government?
Wouldn’t need the internet.Yeah, it could be digitally signed for offline verification. But I’m doubtful there’s enough standardization going on that corporations are integrating signature verification right there in the POS system. They’d need the public keys from the government, presumably. That doesn’t sound too difficult but also, setting up a process to get that info for all 50 states would probably be a mess. Do the states even sign the info to start — that’s another question.
I think the infrastructure can be deployed. Though, I get the impression it would take more coordination than we actually see here in the wild.
I highly doubt that
I think some states might literally require it
It’s for the children’s safety, like age verification
Prevents fake IDs. Or, makes them much harder really.
I got arrested this past Saturday… They called my mom to try and scam her.
what did you do?! oh wait I guess it probably wouldnt be a good idea to admit guilt on the internet so quickly after being arrested
“i got arrested” is not an admission of guilt
Feed people 🤷♂️
I am proud of you, sorry the state is arresting you for that. hopefully you do not get prosecuted.
Yeah. You gotta ask “what did you allegedly do?”
Jeez, Daniel Gooooooch must be pretty pissed about this article revealing his name as an example pic.
wait. the gooch!
