In Scandinavia every citizen has a registration number and the government has deployed state-enforced online digital identity system.
It’s not a privacy nightmare if you can trust the government. And in Scandinavia you generally can.
Comment on Norwegian government to set 15-year age limit for using social media
01189998819991197253@infosec.pub 2 months agoSo you need a BankID to open an account on the covered platforms? That seems like a privacy nightmare.
sunbeam60@lemmy.one 2 months ago
01189998819991197253@infosec.pub 2 months ago
I mean… the government already has all your information. If you distrust them with your information, you have an odd problem to overcome. The corpos, however, shouldn’t have all this data on you.
sunbeam60@lemmy.one 2 months ago
Depends on where you live. Many places you can’t trust the government and they almost nothing about you.
01189998819991197253@infosec.pub 2 months ago
That’s a fair point.
MoonlightFox@lemmy.world 2 months ago
Everyone in Norway has one, well like 99,99% or something. It is a requirement for banking.
It is used for all banking services in Norway. When you get your own bank account at 13 or something you also get BankID.
sibachian@lemmy.ml 2 months ago
it’s a privacy nightmare as it relies on google and apple servers to authenticate verification. neither of which are private. it also makes it impossible for european alternative operative systems to enter the market - giving a foreign state, the US, full control over what we can and can’t do.
MoonlightFox@lemmy.world 2 months ago
Can you elaborate a bit on the google and apple servers for authentication? My impression was that this system uses its own platform.
virku@lemmy.world 2 months ago
BankID is it’s own trusted platform. It is not connected to any of them. I am not sure if I understand what the other person is trying to say. Maybe they are afraid that Google and Apple can use BankID verified sessions to better identify the user?
boonhet@lemm.ee 2 months ago
We have SmartID and MobiilID in Estonia too, but you don’t need it to log onto social media. You only need it
01189998819991197253@infosec.pub 2 months ago
Right. But Facebook shouldn’t have that number.
Leavingoldhabits@lemmy.world 2 months ago
As far as I understand, BankID actually abstracts away those numbers. FB have to use an API, and more or less receive a true or false on their query.
They recently opened up for using BankID to prove your age at bars and such, and I think they only get to know if person is old enough or not. Not even a number, just old enough.
Hacksaw@lemmy.ca 2 months ago
This is the right way to protect privacy. Auditable government departments have your data anyways. They don’t provide the data to companies, but they answer questions like “old enough to drink?” With yes no answers.
01189998819991197253@infosec.pub 2 months ago
If truly masked, it might be fine. But the site has to gather that data in order to append it to the API call and it, therefore, mean that they could keep it (even of they actually may not). There are ways around it, such as with session tokens passed between the social media’s page and the bank’s official API page. But, knowing fb, they won’t use the latter.