Hacker News new | ask | show | jobs
by majormajor 256 days ago
Seems like a red-herring. Does a government need a digital ID to do that? Many do that with the "free market" of publicly-tradable information + pre-existing government IDs already used for certain things. I don't know for sure how much the UK government is purchasing all that, but there's a lot of cameras and tech tracking in the country already, like those of us across the pond also are watched with.

It won't reverse surveillance states but fraud is also a huge problem that deserves addressing.

2 comments

Yes, governments do need a centralized common identity if they intend to build something like a social credit system. Those without adequate experience dealing with the US system, for instance, may assume that the government already has your info and thus such a system is redundant. However, this is simply not the case. US government systems are a hodgepodge of different systems built by different vendors, over different computing eras, many of which lack a primary key relationship with something like your social security number (the current “default” identifier). Many are plagued with duplicate records, data problems, and other issues that prevent easy correlation of records without human verification. Talk to some people in the IRS or Social Security and you’ll quickly get a sense of how many problems this can create! Maybe it’s improved since I last talked to people about it, but I doubt it.

A central ID enforced on all systems by statute would significantly reduce the barrier to creating “airtight” oppressive systems. While the inefficiencies in the US system have a cost, certainly preventing the implementation of more efficient social benefit programs, they also provide a barrier against more efficient social repression. Given the political animosity present in the country right now, it’s probably good that we don’t have the ability to create a turnkey totalitarian system. Things are bad enough as is!

More generally, in nations where the population feels suspicion towards their politicians and bureaucrats, the people may prefer to leave inefficiencies baked into the system in order to hamper potential oppression. Those social tensions and trust deficits should be resolved before proceeding with any ambitious central ID schemes.

US government systems are a hodgepodge of different systems built by different vendors, over different computing eras, many of which lack a primary key relationship with something like your social security number (the current “default” identifier).

This is a feature, not a bug.

Even though we're only at the very beginning of the various U.S. systems being merged, we're already seeing it being abused.

(One example: States using license plate reader data to prosecute women for getting abortions in other jurisdictions.)

Honestly with things like abortion, where there are sincerely held beliefs with good points on both sides of it, I think it would be less work for literally everyone to truly leave it to the states and everybody just moves to the nearest or most convenient state that aligns with their values. I’m so sick of this one issue being a perennial divisive force. Both sides have a point. Go live wherever you agree with the policies. And if the blue states want to operate abortion clinics for runaway teens from red states that’s fine, then they can also build dorms for them and pay for them to stay there. Red states can do the opposite and build state-sponsored birthing centers and pay for childcare for the runaway teens from blue states whose parents want to force them to terminate.
> Yes, governments do need a centralized common identity if they intend to build something like a social credit system.

Which the US already has to a very large extent with the Social Security system.

Please read comments in full before replying to them:

> US government systems are a hodgepodge of different systems built by different vendors, over different computing eras, many of which lack a primary key relationship with something like your social security number (the current “default” identifier). Many are plagued with duplicate records, data problems, and other issues that prevent easy correlation of records without human verification.

Please understand that supposedly poor data quality is not a defence against an authoritarian country wanting to implement a social credit system.

Some national ID system won't make such ambitions significantly easier, but lack of such a system causes exactly the issues you quoted.

So is this hypothetical social credit system in the hands of an incompetent government worth it all? Over identity theft and the multi-billion industry around it?

And yet authoritarian countries without such central ID have historically had to use other less targeted methods of oppression, which creates pushback and dissent within the population, leading to either the downfall of the government or intensive reforms. The threat of a “clean” system of oppression is that it will only catch actual dissidents, without sweeping in innocents. This could freeze out any chance of effective opposition.

The most effective 20th century totalitarian states, such as the East German DDR, issued ID numbers to its citizens, along with ID cards that citizens were required to carry at all times. This greatly helped the security services coordinate the oppression of suspected radicals, but without modern computer systems it relied too heavily on human efforts. It eventually faced its limits against rising dissent and it could not prevent the downfall of the government. A computerized Stasi would be much more terrifying.

One can look around the US today to see why this lack of ID may be a good thing. Immigration officials are facing serious roadblocks in rounding up and processing suspected undocumented immigrants, and mistakes in this process are creating widespread pushback. Protestors who take steps to mask their identity are not easily identified, apprehended, and prosecuted, which has led the administration to overreach in their reaction to dissent. And the lack of a unified system of oppression means that even targets of the state can often find ways to continue living in between the cracks, and they are not totally frozen out. In many ways it’s not a great system, certainly far from perfect, but the many flaws serve an important purpose in the face of systemic oppression. Inefficiency is an escape hatch.

If you live in a high trust society, you may not get it. The mutual animosity in the US is such that we have government officials talking about “national divorce” and otherwise average people joking about political murder. I know the UK is not quite as bad off, but I understand that it is quickly moving in that direction. That’s no time to introduce new potential mechanisms of oppression.

> One can look around the US today to see why this lack of ID may be a good thing.

You have an identity though. You use other things as an ID in the end. Often shoehorned into fulfilling that task and mostly very cumbersome.

That's why it can be stolen, that's why "identity theft" is a multi-billion dollar thing. Thats why you keep your SSNs and I guess also CC#s rather tightly guarded.

> Protestors who take steps to mask their identity are not easily identified, apprehended, and prosecuted, which has led the administration to overreach in their reaction to dissent.

There's nothing about an electronic ID that would make this different from now. It makes no practical difference for oppression. If you don't have an SSN then other things about you are unique enough for identifying you. I'd say that's why it's even vaguely tolerated anyways.

> Inefficiency is an escape hatch.

I rather think it lulls you into a false sense of safety. Inefficiency in existing "numbering systems" can be overcome with resources. You truly do not lack an ID system, a number, computerization nor identity that could protect you.

A lack of one number is not really protection against any of that.

> Yes, governments do need a centralized common identity if they intend to build something like a social credit system. Those without adequate experience dealing with the US system, for instance, may assume that the government already has your info and thus such a system is redundant. However, this is simply not the case. US government systems are a hodgepodge of different systems built by different vendors, over different computing eras, many of which lack a primary key relationship with something like your social security number (the current “default” identifier). Many are plagued with duplicate records, data problems, and other issues that prevent easy correlation of records without human verification. Talk to some people in the IRS or Social Security and you’ll quickly get a sense of how many problems this can create! Maybe it’s improved since I last talked to people about it, but I doubt it.

IMO this is another non-sequitor.

Let's say you had a digital ID in the form of a smart card for your SSN with a USB connection that was required to be plugged in when you auth'd to a government website to file your taxes. No new number would be required for a digital ID card in the US. Tax return fraud to get people's refund sent to someone else, though? Probably down! Does everyone have an SSN? Who cares, let's improve things for the vast-majority case where we have an extremely insecure little piece of paper.

That smart card doesn't magically reconcile and rationalize the sprawling hodgepodge of government systems.

Or, let's go the other way: not having a digital ID card does not prevent the government from rationalizing and tying all those systems together.

You might look back to the recent past when the executive branch sending employees to all those disparate agencies to grab that data and make changes to those systems! They didn't need a new digital ID to do that, and they wouldn't need a new digital ID to improve the use of SSN-as-PK-for-cross-system-joins.

Being more rigorous about tracking the existing numbers already assigned to you does not require smarter, cryptographically-sound, identification tokens. And those tokens do not require the government improve their processes for connecting things *after the "give us your SSN for identification" of their various separate web-based services (or the non-government entities that also use those SSNs) that people love to abuse for fraud.

Nor does any of this make it easier or harder for the government to take "absence of evidence of identity or citizenship" as "evidence of absence of identity or citizenship" - if you fit the non-citizen profile, the burden's already on you to prove it, and what makes you so sure that the courts wouldn't happily let this or a future administration expand the boundaries for "we picked you up because we were suspicious, now YOU have to prove who you are if you ever want to get out" regardless of if a digital ID card exists?

if they want private information, they should buy it on the open market like every other company!