I’ve gotten to the point I don’t care anymore. All of my data and info is already out there. Been leaked and sold by so many times and waya. Not like I can do anything about it. Just hope that of the millions of other id’s out there mine isn’t the one someone uses.
this post was submitted on 16 May 2026
128 points (100.0% liked)
Technology
84662 readers
3861 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 2 years ago
MODERATORS
What!? One of the thousands of separate and individually "secured" systems that you have to give your information to on a daily basis failed? But how could this be? Everyone knows having 1747627994 points of possible failure is the only way to ensure digital security!
Sovereign identity and Solid are the way. But governments will have to play a role in large scale implementation.
For some reason people seem to trust commercial organizations with misaligned incentives over governmental bodies.
Eu is working on a digital wallet that would (among other things) help with this.
Afaik It has a tiered information/identity structure, where the lowest level is: "is this a human being" (as an alternative to captcha)
Then you could have age. (Just "is this person above %age") Response would be just yes/no
Then spesific age, nationality etc etc.
You get the prompt, where it says what data they are asking for and you can concent or decline.
The hotel check-in system, called Tabiq, is maintained by the Japan-based tech startup Reqrea. According to its website, Tabiq is used in several hotels across Japan and relies on facial recognition and document scanning to check guests in.
They left an S3 bucket open.
this is why other s3 compatible servers like garage intentionally ignore admin commands to leave a bucket open, it's simply not possible as there's no valid reason except developer laziness
So is this legally different than making a photocopy of your passport? Since that is supposedly not allowed but in the moment you are asked you are obviously going to comply as you really need a place to stay. If it is not I hope this company gets into the legal drama they deserve.
Not allowed where?
My Nigerian scammer has a copy of my passport. Nbd
His is why digital ID is bad.
No. A properly managed eid system like the EU digital wallet would be better.
You would not hand over any document to the hotel. They would ask the central authority server if you are who you claim. You would get a prompt to confirm that you allow the hotel to confirm your identity. The server would respond, yes you are indeed that person. End of transaction.
No data would be left to whatever security standard (or lack there of) that the hotel has. No critical documents stored on their end.
Whatever happened to just here is my money I will stay here and be done? Why does the hotel need to give a shit who i am that I am staying?
Laws requiring Hotels identify their guests.
Been awhile since I have been to the EU, that sounds like something stupid they would do. I imagine it would be France and Germany mostly.
Several countries I have been to recently I haven't even talked to anyone at the hotel, which is nice. I don't have to see the front desk at all, and the bell hop doesn't care.
Again, why can't I just pay and stay? It may be laws, but I am sick of this bullshit. People should be able to travel without state violence used against them.
And as we can see here, gathering information by the hotel is a horrible idea.
What happens if someone steals your phone?
Even if that was a vulnerability, they're never going to steal a million phones at once
Lastly if you are asking how you would deal with getting new credentials. There would be a mechanism similar to when you first get the electronic id where your previous device gets deauthorized and you authorize a new one.
All of these are allready solved problems at this point. We do this all the time with other credentials like online banking etc.
This varies by country, but in Norway for instance all of these things are already solved and online/phone banking is both safe and the most common way of doing things.
Loss/theft of phone is at worse a few phone calls and security questions to get it deauthorized (a properly secured phone would not be any significant hazard as mentioned in other responses) and authorizing a new device can be done with mail/SMS combo identification pr by showing up to a local office if you wanna do it that way.
It of course requires on device lock, like a pin or biometrics.
Also anyone with a nibble of security awareness will have their phone properly secured so it cannot be opened by anyone else.
If you run your phone without security pin or fingerprintint lock, this would be the least of your worries if your phone got stolen.
How are your banking apps secured?
Are you asking how you would confirm without your phone or asking about someone stealing your credentials or impersonating you?
To the first I'd ask how do you confirm identity if someone steals your wallet? But also, I'd probably be able to confirm with my watch as well.
To the second, my phone would be a brick before they ever got it unlocked.