|
|
|
|
|
by roblabla
1457 days ago
|
|
> your ID gets scanned, the scan hits a government server for verification. I mean, you're already assuming things work a certain way that is not necessarily true. The ID card could just have all the information stored and signed by the govt. Then a scanner would only have to check that the signature is valid, no need to actually ping the govt server. I haven't checked the technical details, so I've got no clue. But this is how the EU COVID-19 vaccine verification works IIRC. No pinging of a central server is ever done - the mobile app just checks that the message in the QR code is properly signed with the expected root of trust. |
|
Until the next time there is a terrorist attack or other scary event, and the opportunistic politicians say "We could have stopped this if only we had been keeping these pings in a database, just like we keep logs of everyone's internet metadata[0]. Don't worry, the database would only be looked at by AI, so it's not even a breach of your privacy."
Then everyone is just a single firmware update away from a completely different regime, and it's too late to boycott the app because everyone assumes you have it and requires you to run the latest version. Of course, you could always try protesting, but you might not get very far.[1]
[0] https://aboutintel.eu/european-metadata-retention/
[1] https://www.reuters.com/world/china/china-bank-protest-stopp...