Hacker News new | ask | show | jobs
by jiggawatts 785 days ago
This article avoids the elephant in the room: nobody except cryptocurrency nuts asked for this.

The “Decentralised” part of DID should give a hint that this is yet another attempt to make crypto relevant to the real world outside of bypassing sanctions, paying for drugs, or extorting hacking victims.

Web 3.0 failed because cryptocurrencies can’t support the high bandwidth and low latency required. So the same people came up with DID, which can tolerate multi-hour transaction delays and storage capacities measured in single-digit kilobytes.

Most of the criticisms against Web 3.0 still apply to DID. It can be impossible to revoke, as the article stated. Which means if grandma’s wallet is hacked, she can be impersonated forever by the hacker, and not even the government can help her with this.

“Yay, censorship resistant!” many will proclaim. (Loudly)

Okay, name me one instance (1) where a citizen of a western country had their identity censored in any sense by their government.

5 comments

> Okay, name me one instance (1) where a citizen of a western country had their identity censored in any sense by their government.

Eugene Shvidler‘s sanctioning by the UK poisoned his identity. A UK-US dual citizen living in Britain who had Russian business dealings.

The sanctions are devastating to personal freedom. Beyond the direct financial impact, they make it very difficult to travel, engage in charity or use digital goods.

You might argue he deserved it for making money in Russia, but the lack of due process is astounding.

His commercial behaviour predates any legal prohibition and he didn’t get to argue his case in front of a judge/jury before a punishment was installed.

https://www.theguardian.com/law/2023/jul/19/sanctions-regime...

Sanctions are an important component of our society, in the broadest sense. They are net good, not bad.
Sanctions are effective tools at undermining the economic & industrial base of an adversary.

They’re poor tools as substitutes for criminal penalties for local residents.

Less "adversary" as evaluated by a specific entity, more "bad actor" as evaluated by the collective. Which is the intent. Of course nobody issuing sanctions specifically intends them to be criminal penalties for local (target) residents, it's nonsensical anyway as the issuer(s) generally don't have any kind of criminal authority in the relevant jurisdictions.
Suffragettes, civil rights activists and Vietnam war protesters would’ve all been considered “bad actors” by their democratic governments at stages of their journey.
Yeah, but we course-corrected on those mistakes. That's how civil society works. We (necessarily) delegate trust and authority to higher-order abstract entities (i.e. the state) and make sure we have ways to influence how they behave (i.e. elections).
They're only a net good if you think the government of the biggest economy is always morally right. Because only sanctions by the biggest economies have any impact. Most of the people in the world who aren't Americans view America's foreign policy as overwhelmingly a net negative, so for most of the world those sanctions are a net bad.
[ citation needed ]
(waves hands around generally) everything?
Nowhere in the linked article does it say that his identity was censored or revoked by any government.

He's a dual-citizen and presumably has his identifying papers on hand.

To quote Wikipedia: https://en.wikipedia.org/wiki/Eugene_Shvidler#Sanctions

     Shvidler's sanctions take the form of a worldwide asset freeze, 
     and transport sanctions; they do not affect his British citizenship.
Painting a free billionaire oligarch living the high life abroad from Russia as a victim is not a very convincing example.
The challenge wasn’t precisely about revocation of citizenship, although you could take the example of Shamina Begum for that.

The problem with these rulings isn’t so much that no punishment is deserved, but that a government minister / civil service employee can declare somebody guilty. The only recourse is pursuing legal action to prove your own innocence.

You seem to be conflating two wildly unrelated concepts here.

This discourse is (very specifically!) about identity papers, not sanctions or any other form of government use and abuse of power.

The thread has drifted from government identity to censorship, then to sanctions and abuse of power.

It’s faithful to the original topic because strong government identity assists state actors who pursue those outcomes.

The crypto people are very concerned about what happens to them when they believe they will inevitably become an oligarch.

It's all a bit "temporarily embarrassed billionaire"

The crypto phase ended up accidentally showing us why centralized authority is important. It sounds great on paper: If we can simply enforce a protocol, then we don't need authority, right?

But we still have to trust who enforces the protocol. If we rely on trusts and exchanges to any degree, for example, to enable faster, more convenient transactions, or for user experience, then those trusts (banks) cannot be running off with the customer deposits like BitConnect and FTX did. The trust should be insured and should have to follow normal bank and currency exchange regulations. When you add in all the banking infrastructure that would be needed to bring cryptocurrencies up to speed we'd end up with a clunkier version of what we have (we already have fast digital banking, and cash is already anonymous and instant).

Regarding crypto for content chains: Basically the same ideas, if certain peers are trusted to host, serve, and/or broker content in some way, how do you trust those parties, or if there are content "vaults" off-chain to enable faster access to data, how do we know it wasn't tampered with off-chain? Can't store it on chain feasibly either, especially if the content is say full-length films.

I think blockchain for both cryptocurrencies and content chains is better suited for smaller peer networks where you know you can trust the node hosts and the cryptography is used more for keeping nodes in sync, and for lower-level security, not as a replacement for trust. Or if you don't trust the node hosts, then the trusted party is whoever maintains the "peer list" - but that's just a road toward what our Federal Reserve, or our Wikipedia, can already do much better with consumer banking and open-source contributions (respectively).

> Most of the criticisms against Web 3.0 still apply to DID. It can be impossible to revoke, as the article stated. Which means if grandma’s wallet is hacked, she can be impersonated forever by the hacker, and not even the government can help her with this.

VCs have credentialStatus, the id property of which is supposed to be a URI resolving to an RDF defined object dictating the status.

This means the issuer can just update the entity living behind that URI to revoke bad credentials.

https://www.w3.org/TR/vc-data-model-2.0/#status

If there's a central revocation list, then it's a centralised identity with a centralised authority.

That's the opposite if the "distributed" in DID, at least in the sense that the pro-Web-3.0 crypto fans are claiming.

Again, you're conflating DID with VC improperly.

VC is an extension built on top of DID. It's not decentralized Verifiable Credentials, it's just Verifiable Credentials.

The entire article is about VC, and refers to VC as DID (which is also what you're wrongly doing).

It's like criticizing the collective web standard based on REST. REST is not the web.

Also, the part that makes VC decentralized is the alternative (OIDC authorization code flow). VC doesn't require the issuer for verification. (So basically the user has control over attestation of information about their identity, not some third party)

That means even though the Gov issued you an ID they can't track every time you have your credentials verified.. it works exactly like a physical ID. It's issued by the government, but the government isn't there every time you need to show ID. Some might consider that an invasion of privacy if they were.

> Web 3.0 failed because cryptocurrencies can’t support the high bandwidth and low latency required.

Er, no.[1]

[1] https://www.web3isgoinggreat.com/

> Okay, name me one instance (1) where a citizen of a western country had their identity censored in any sense by their government.

I don't think this is the problem DID is trying to solve, but the article mentions illegal immigrants and stateless people.

Also, the entire witness protection program, whistleblower protection, certain government 'contractors'

Agreed this isn't the problem DID is trying to solve from what I can tell though.

As an aside, it's hard for me to read DID as anything other than disassociative identity disorder

https://en.m.wikipedia.org/wiki/Dissociative_identity_disord...