Hacker News new | ask | show | jobs
by neodypsis 941 days ago
In my own country, for digital signature purposes, the official Windows installer provided by the government adds the country's Central Bank's CA for any purposes, even for software signatures. If you have a company, they also force you to use their own application for making some annual declarations. That software asks for your OS user password using a home-brew dialog so that it can update itself. If you don't provide the password then it blocks and you can't make the obligatory declaration. If you don't send said declaration, you are liable for big fines...
3 comments

I’m curious what country this is, if you’re willing to share.

I’m surprised any business filing is using a desktop app rather than on the web these days.

Costa Rica. And before you can download some of the installers, they ask for your unique digital signature card number.
> I’m surprised any business filing is using a desktop app rather than on the web these days.

It's a complete nightmare. If you want to use some other digital services you are restricted to specific browser versions, some only allow you to use Windows, and in some cases the unsigned installer is only available via HTTP.

Well that's dystopian.
The same central bank is asking banks (and other entities) for unanonymized information about costaricans, including bank deposits, to publish an "information package" indexed by geographical location. This under the pretext of being required by the IMF. I found it curious that nobody in the legislative commission (akin to a "congressional hearing") tasked with looking into the matter has mentioned the importance of differential privacy.
Sounds like the perfect candidate to run in a VM.