this post was submitted on 03 Sep 2026
800 points (99.1% liked)

Technology

87833 readers
2742 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 3 years ago
MODERATORS
top 50 comments
sorted by: hot top controversial new old
[–] sunbytes@lemmy.world 37 points 1 day ago (2 children)

The only way to fix this is to have us upload our IDs online constantly, perhaps to prove we are adults.

It is the only way we can we safe.

[–] onionsinmypores@sh.itjust.works 5 points 21 hours ago

Woaha. Why didn't anyone think of this before you?

[–] MadBits@europe.pub 8 points 1 day ago

But, just think about the children! ~While everyone plastered their children allover social media and they are easily identified with AI~

[–] Horsey@lemmy.world 10 points 20 hours ago* (last edited 20 hours ago) (2 children)

Wait until non Americans hear that our national social security ID number is only 4/9 digits worth of “random” numbers. (Fun fact, the entire number was procedurally generated based on where you were born and in what order at the hospital for generations until they changed it recently)

[–] hildegarde@lemmy.blahaj.zone 3 points 17 hours ago

The numbers aren't random. They are sequential. The early digits are assigned geographically, but the rest are in sequence. If you know a valid social security number, adding or subtracting 1 will be another valid social security number, most likely someone born in the same hospital on the same day.

They did change it somewhat recently, but they don't re-assign the numbers when making that change, so most of the numbers are completely insecure.

[–] Blackmist@feddit.uk 1 points 16 hours ago (1 children)

Yeah, we know. We just can't believe that you actually use it for anything important.

[–] Horsey@lemmy.world 2 points 15 hours ago

That stupid ass number is used as one of the identifying factors when financing anything. Yes, a house is bought and mortgaged with that number next to 2 other forms of ID lmao.

[–] nanometer1625@thelemmy.club 10 points 22 hours ago* (last edited 22 hours ago) (1 children)

This is yet another reason why virtual ID cards are superior: In the event that the card data is compromised, the old virtual ID can be revoked and a new virtual ID can be issued. Virtual ID cards can also have a much shorter duration, because the cost of rotating it is minimal. For example, California's virtual driver licenses rotate each 30 days.

[–] Funkt4st1c@lemmy.world 1 points 9 hours ago

We honestly should be using virtual vouchers for everything. The question then becomes "whats one level up from the voucher i can steal" and we're very frustratingly (for my mental exercise) back at square 1

[–] 0x0@lemmy.zip 24 points 1 day ago (2 children)

I bought a domain, configured the webserver in the next 5m.

As soon as it started taking requests (on a domain that i haven't even announced yet) it got flooded by bots.

[–] dreadbeef@lemmy.dbzer0.com 3 points 16 hours ago* (last edited 16 hours ago)

Registering SSL is a centralized process with root CAs logging new ones as they come in. Cert transparency logs are a thing, and Google is very involved: https://certificate.transparency.dev/

Once a bad actor hooks up to that, they just get a realtime stream of places to start port scanning and running WHOIS queries for people who didn't get WHOIS protection. If you used letsencrypt your domains you registered certs for got sent there and anyone who wanted to know about it knew about it before you could tell anyone.

You can use something like crt.sh to look up domains

[–] ddplf@szmer.info 9 points 1 day ago (1 children)

If your browser is based on chromium, you're employing an army of bots yourself that gets enabled each time you enter any domain.

[–] horsesaysweird@feddit.org 10 points 1 day ago

Can you explain what you mean exactly?

[–] ArmchairAce1944@discuss.online 3 points 18 hours ago

I have had to rent cars since 2015. My license has probably been seen by 5000 breach sites by now.

[–] Bluedragon012@lemmy.world 4 points 22 hours ago* (last edited 22 hours ago) (1 children)

At this rate, a new ID type will have to be used. I dont have a clue what, but a new one..

[–] Blackmist@feddit.uk 3 points 16 hours ago

Welcome to Rent-a-car. Please sign into your vehicle with Facebook, Google or AppleID.

[–] Darkard@lemmy.world 510 points 2 days ago (31 children)

But don't forget guys, uploading your government IDs to any old fucking website to prove your age is very safe and protects children. There's no way this could go wrong and everyone in the supply chain is very trustworthy

load more comments (31 replies)
[–] Yaky@slrpnk.net 125 points 1 day ago (3 children)

Also it doesn't help that, for example, at U-Haul, employees just use their personal phone to scan a QR code and take pictures of your ID.

[–] HubertManne@piefed.social 62 points 1 day ago (1 children)

this idea that employees can expect you own and use a personal smartphone as part of the job irks the heck out of me.

[–] ChexMax@lemmy.world 5 points 22 hours ago (1 children)

I read that if you use a personal device for anything work related in the US, it means your entire personal device (everything on it) can be considered discovery in a lawsuit against that company. Big risk to take.

[–] HubertManne@piefed.social 3 points 22 hours ago

most companies want you to put on this software than can wipe your device. its nuts.

[–] toynbee@piefed.social 39 points 1 day ago (3 children)

My local hospital apparently requires their employees to use a "secure" app on their personal phone to transmit data on the patients.

Seems like irresponsible handling of PHI (by the administration, not the staff) to me.

load more comments (3 replies)
load more comments (1 replies)
[–] Hikermick@lemmy.world 43 points 1 day ago (2 children)

My elderly father recently fell for a Facebook imposter that pretended to be a family member and asked if their friend could contact him. The friend asked him to take a photo of his driver's license and text it to them, fortunately he doesn't know how. I've been wondering ever since what can they do if they had it? It doesn't have his social security number on it. His credit has since been locked and banks notified

I’ve been wondering ever since what can they do if they had it?

Ask for pictures of all his other paperwork so they can finish onboarding him at his new job.

[–] GenosseFlosse@feddit.org 27 points 1 day ago* (last edited 1 day ago) (1 children)

They can open bank or crypto accounts in his name, and then either overdraw the account or use it to move money from other scams in and out of this account, so the real scammers name is not attached to this account.

[–] aceshigh@lemmy.world 4 points 1 day ago

Is there a way to block that? Ie: freezing your credit means no one can take a loan, but that doesn’t remove the scenario you described.

[–] dan1101@lemmy.world 96 points 1 day ago (18 children)

I don't like it when a store scans my driver's license to buy alcohol. I stick to small convenience stores without that tech.

load more comments (18 replies)
[–] Bell@lemmy.world 49 points 1 day ago (4 children)

Annnd this is why a refuse to verify with IDs online and use services like Plaid. And the web of T&C's from multiple 3rd party services like this will mean all of them get shielded from blame.

[–] 7101334@lemmy.world 30 points 1 day ago (3 children)

Did you read the article? They were renting a car. A car rental place isn't going to let you just not show your ID.

[–] ikidd@lemmy.dbzer0.com 22 points 1 day ago (1 children)

So how they did it once upon a time was you showed them your license, they punched the # into the system that would check it. The person at the desk would confirm it was you from the picture. No need to scan the actual ID card, which is where this problem comes from.

load more comments (1 replies)
load more comments (2 replies)
load more comments (3 replies)
[–] ftbd@feddit.org 49 points 1 day ago (2 children)

Surely the company must be liable, right guys? Right...?

load more comments (2 replies)
[–] ilillilillilillililli@lemmy.world 56 points 1 day ago (1 children)

Luckily archive.org saved the idscan.net press release announcing their partnership with Planet13 dispensaries. They have since deleted the post on their site. Nothing shady about that. 😂

[–] Zitronenlolli@thelemmy.club 2 points 22 hours ago

In addition to scanning and verification, VeriScan performs ID parsing to collect, separate, and classify information from the various fields on IDs. This allows Planet 13 to seamlessly harvest the names and demographic/geographic information of its guests. This data is providing insights into customer profiles, which is especially valuable as Planet 13 expands its footprint into other states, including supplementing its SuperStores with smaller, neighborhood retail shops.

I have no words.

load more comments
view more: next ›