Hacker News new | ask | show | jobs
by EnKopVand 1477 days ago
> As governments move more and more towards digitization, and embrace machine learning

I spent a decade in the public sector digitalisation of Denmark, a country that competes with Estonia about having the most digitalisation in the world.

I fully believe we should legislate against automated processes taking decisive actions.

It’s inefficient, but what I experienced in regards to laws is that they are way more messy than anyone working in digitalisation seem to realise. We build a system that let employees report their business-related driving, in Denmark you get a tax-reduction when you drive in your own car for work purposes, and the laws covering it is basically an A4 page of tax-law that seems sort of clear. You have 3 set of taxation rates that you get to deduct from, they are meant to be used for different types of work related driving. Simple, right?

Well, it turned out that in 9 different municipalities there was 9 different ways to interpret that A4 page of law text, and, more than a 100 different union agreements on how to extend or alter the tax law for certain groups of workers.

As hilarious as it was to sit through meetings with different sets of tax people from different municipalities getting into heated arguments about who was break the law, it was also sort of eye opening for me at the time. Because we made this as an OSS project where we bought the development that we project managed. My role was part of the project management team as a code-reviewer/specifier of sorts, and all our estimates simply went out the window when we realised we really had to build all those different ways of interpreting the law, as well as making room for future alterations. In the end, it didn’t extend the project that much, I think we still delivered it on schedule but it was a very different product with lots and lots of setup required, because the different municipalities needed to be capable of deciding which rules were turned on for which groups of workers, as well as control over how the approval system was handled by everything from tax lawyers going through every submission to secretaries to RPA robots simply clicking accept on everything.

The system wasn’t related to decision making automation that couldn’t be easily undone by humans, because it was still a relatively simple system. But if that sort of complexity is what you get from some of the simplest legislation we have, then imagine what it would look like for laws covering thousands of A4 pages of text.

3 comments

Dehumanisation of essential civic processes is a step towards "cybernetic governance", and is a topic I explore in some detail in Digital Vegan [1]. This is distinct from what most of us still call "e-governance" in subtle ways. I am concerned that people do not yet understand the nuances between processes that can be automated to really improve life and where we cross the line into technofascist dystopias that will tear societies apart.

I share an attitude with Frank Zappa here. Zappa was rather oddly against "Love song lyrics". He said they led to poor mental health by propagating unrealistic expectations of intimate relations.

Similarly, I think that Science Fiction has a lot to answer for. I personally love most SciFi, but like Orwell the Cyberpunk genre was misinterpreted as a blueprint instead of a warning, and many people carry around disported, unrealistic and quite mentally damaged ideas of what a "good" technological society should look like.

[1] https://digitalvegan.net

>I fully believe we should legislate against automated processes taking decisive actions.

There are certainly decisions that should not be fully automated. But this has very little to do with the account recovery issue we're talking about.

I believe that account recovery, and more generally proving your identity, can be done automatically with greater accuracy and far more securely than any process involving humans.

We have secure, electronic, government issued identity documents that are perfectly suitable for automation. Let's just use them! If we must legislate then let's introduce a right to prove our identity using our government issued ID.

There are other issues related to oligopoly accounts that are hard to solve. But proof of identity is not one of them.

> We have secure, electronic, government issued identity documents that are perfectly suitable for automation.

And what do you propose as a solution if your government-provided identity gets lost or stolen or hacked?

Or for people who have a hard time getting such a doc? (note: Sweden currently has a crisis because it can take over 1 year to get a passport).

Or for people who live in countries which don't have these systems?

Are you really ok with uploading a video of you holding your passport every time you want to log onto a service (see "id.me" controversy)?

Now, what might be nice is if the government used a highly secure crypotgraphic system to allow identity verification, but drivers licenses and passports aren't that.

>And what do you propose as a solution if your government-provided identity gets lost or stolen or hacked?

Report the old one stolen/compromised, get a new one, use it in the account recovery process.

>Or for people who have a hard time getting such a doc? Or for people who live in countries which don't have these systems?

This is a core responsibility of any government. It works well enough in many countries and we should not wait for the last government on earth to get its act together before using it. It can be gradually introduced country by country.

>Are you really ok with uploading a video of you holding your passport every time you want to log onto a service (see "id.me" controversy)?

Having a right to prove your identity using an official ID is not the same as having an obligation to do so. I would only use it with a few key accounts that I trust (and with financial institutions where ID checks are mandatory).

Also, I wouldn't have to hold up my passport at all, nor would I have to do it every time I log in. The platform would read the passport chip once upon registration or during account recovery and check if the picture on the chip matches my face.

>Now, what might be nice is if the government used a highly secure crypotgraphic system to allow identity verification, but drivers licenses and passports aren't that.

https://www.icao.int/Security/FAL/PKD/Pages/ePassport-Basics...

> Having a right to prove your identity using an official ID is not the same as having an obligation to do so.

I'm sceptical as to whether you can avoid it becoming an obligation.

You sign up for $SOCIALNETWORK. Some opaque 'bot detection' process deems your account 'suspicious' and locks it. They offer to unlock your account if you prove your identity using an official ID.

That makes it obligatory in practice, if not in theory.

I share your scepticism, but that's a political decision. Nothing protects us from bad political decisions besides participating in the democratic process.

What's happening right now is that we are sacrificing a lot for the financial benefit of corporations and for politicians' control obsession while we can't use some of the same technologies and capabilities for our own benefit.

We often have an obligation to prove our identity using a government issued ID, but we have no right to do so when we want to.

In my view, that's a bad deal.

You can also read this story another way: Non-scaled manual processes have accumulated decades or generations of accidental complexities. I've seen this in the example of a central software my university was ordering to manage the records of all grades, achieved credits, registered exams and so forth. Most of this was already managed by a centralized agency (Zentrales Prüfungsamt) but every faculty had slightly different examination regulations and processes. It's not that most of these differences really provide any benefit to the students or the institution – electrical and mechanical engineering are so close to each other that there is no rational way to explain why they can't have the same length of time the registration window for practical courses is open – except that everybody is used to the way it is now and each faculty makes a stand for their right for the status quo.

And in my opinion the reason for most of the conflicts that arose is a failure of expectation management what the digitization effort can accomplish (in a reasonable budget): Software systems are cost efficient only with mostly homogeneous processes. Their development is such an expensive undertaking that it can only compete with individually trained humans when you can amortize the costs over large amount of use cases (c.f. https://xkcd.com/1319/ ).

Thus the first step should always be to get everybody on-board to give up some of their non-essential individuality. There is no need for car taxation to change from municipality to municipality. (Be aware of the reverse phenomenon as well, though: Individual needs getting thrown under the rug by systems that are too rigid or simplistic in the wrong places. See all the falsehoods programmers believe about {names, time, gender, ...} articles. TFA in my opinion is not an example of that phenomenon btw.: Facebook, like Google, is justifying cost cutting at places which obviously need trained human support, with a fetish for technological solutions.)

Of course this homogenization is not something that my parent poster would be in any position to accomplish, so this is not meant as a critique. Also I agree with EnKopVand that automated processes (or even overly rigid bureaucracies) should not take decisive actions on their own.

You should absolutely read it that way, and, you should go even further and point fingers at the legislation itself. In my decade of public service we had five different ministers of “digitalisation” (they had other titles because IT doesn’t win votes) that all put effort into making our laws better suited for digitalisation. I think we even had a prime minister get into it, and every prime minister throughout my entire life has had an ambition of making laws less complicated.

Well, let’s just say that while you’re completely correct, I don’t think we should wait for our countries to become less Kafkan, which is why I’m a fan of simply banning the automated decision making. Maybe if you hurt the bureaucracy where it matters (cost) we might actually get some officials who deal with the root cause of the issues.