this post was submitted on 20 Jan 2025
875 points (98.2% liked)

Technology

60659 readers
5041 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 2 years ago
MODERATORS
top 50 comments
sorted by: hot top controversial new old
[–] [email protected] 1 points 32 minutes ago

Emails can be simple - mine is $firstName@$lastName.me Tbh phone numbers are quite long and if people can't remember 4 digital pin... Still you can generate qr code mailto: links

[–] [email protected] 15 points 15 hours ago (3 children)

I don't want to treat phone numbers as an ID, but for some reason my customers will give their phone number to me online far more willingly than they'll cough up their email address, which is baffling only until you realize:

  • Most people are technologically incompetent and are intimidated by the avalanche of crap they get in their email, and
  • They never answer their phones anyway, so who cares?

I actually offer the option, because I don't give a rat's ass how people ignore me when I try to contact them. But when they place an order I at least need to be able to prove that I tried.

[–] [email protected] 2 points 52 minutes ago

When I give out my email, I always get spam, regardless of how many boxes I uncheck.

When I give out my phone number, sometimes I don’t

Of course that no longer makes sense since I have one phone number I can’t easily change, but give out uniquely generated emails that I can individually turn off

[–] [email protected] 6 points 12 hours ago (1 children)

which is baffling only until you realize

I stopped being baffled when I realized most people are dumb as shit.

It's just a fact of life, and we either see it or we don't.

[–] [email protected] 2 points 1 hour ago

TBF many people are more intimidated by emails. My mum, for example, is in her 70s - she's okay with using a smartphone but she doesn't trust 'internet stuff'. Won't put her card details in, doesn't trust emails - which is fair, because a lot of emails are bullshit or scams. She grew up with telephones though and feels safer using them. Possibly why so many phone scams target older people. I've tried to educate her.

This attitude doesn't make people dumb. A bit ignorant, maybe, but I feel like 'dumb as shit' is a bit harsh.

[–] [email protected] 3 points 14 hours ago

Yo sign me up 867-5309

[–] [email protected] 14 points 22 hours ago

Internet security and internet privacy are only incompatible goals when combined with incompetency and shit user-exerience design.

[–] [email protected] 10 points 21 hours ago (2 children)

On this question of verification, I don’t have a particularly foolproof solution, but maybe there just isn’t one.

I can criticize the modern web for a lot of things, but as long as we have situations where we want to check whether an account is a real person, as opposed to FarmingBot #295038, they need something. I'm not a fan of phone verification, but I'd only criticize it when we have alternatives.

I'd even be in favor of some kind of one-way algorithm by which a trusted real-person-identifying entity could tell a random third party site: Yes, this is a genuine human.

[–] [email protected] 7 points 13 hours ago (1 children)
[–] [email protected] -1 points 11 hours ago (1 children)

Cool, now provide solutions that exist today for every other country

[–] [email protected] 5 points 10 hours ago

That is not my responsibility ;) I just shared that something like that exists.

[–] [email protected] 9 points 18 hours ago* (last edited 16 hours ago) (1 children)

The technology has existed since the 80s.

X509 certificates would allow a government agency to sign a digital identity indicating that it's legitimate, would allow for remote revocation in the event of loss or theft, and can be easily integrated with every existing computer and browser.

An issued physical card would resemble a credit card, with a chip in it. Other physical form factors can take the shape of USB-devices which bundle the card and the reader into a single device.

[–] [email protected] 4 points 13 hours ago (1 children)
[–] [email protected] 3 points 6 hours ago* (last edited 6 hours ago)

Also https://www.cac.mil/Common-Access-Card/, if the Americans are skeptical.

I don't like the Austrian one being phone-integrated, but I understand why people would want that.

[–] [email protected] 34 points 1 day ago (1 children)

Please. It is the most annoying part of trying to use some sites and I rather not give out my number to people who store important info in plain text files.

[–] [email protected] 3 points 12 hours ago

Yes. Don't forget your phone number will be exposed to the public when the business gets hacked.

Not if. When.

[–] [email protected] 55 points 1 day ago

Bane of my life as about a year ago my dad switched his sim and immediately started pestering me about not being able to log into his accounts.

Yes he got rid of the old number completly and expected me to somehow make his logins work. This is still going on to this day when he complains to me something doesn't work it's because he's tied it to his old phone number.

[–] [email protected] 304 points 2 days ago* (last edited 1 day ago) (24 children)

To the same audience: quit selling my fucking phone number!

I ditched a phone number I had for 10+ years because it was leaked everywhere. Only a few short months after updating my number with the DMV and a handful of other government agencies I started receiving scam calls/messages again.

At some point we need to adopt some fucking privacy laws. This is absolutely bonkers—is no one else fed up??

Edit: I already know how to silence unknown callers. What I want is to not have the problem in the first place, ideally by 1) having companies not sell personal data to third parties and 2) being able to block spoofed (non-encrypted) caller ID.

[–] [email protected] 4 points 12 hours ago (1 children)

At some point we need to adopt some fucking privacy laws. This is absolutely bonkers—is no one else fed up??

Look at you, trying to use the government to solve every day problems that face pretty much all of us.

Don't you know we only focus on gridlock issues to distract us from real issues now?

[–] [email protected] 3 points 12 hours ago

I do, unfortunately.

[–] [email protected] 5 points 1 day ago (1 children)

At some point we need to adopt some fucking privacy laws.

Yeah we absolutely had to ban TilTok because of privacy concerns but the idea of creating a law to protect our privacy is ridiculous beyond all reasoning. The stupidity of the United States government is absolute.

load more comments (1 replies)
[–] [email protected] 122 points 2 days ago (11 children)

Oh everyone is fed up but we just elected a guy and government who is sure to make it all way way way worse.

He just helped put the nail in the coffin of the lie that crypto is for anything but scams, don't worry, it's gonna get real bad before it gets any better.

[–] [email protected] 3 points 1 day ago* (last edited 1 day ago)

"Bitcoin, it just seems like a scam," Mr Trump said. "I don't like it because it's another currency competing against the dollar."

— Donald Trump

Of course, Trump Coin made just for him is fine. And any security who bribes him. Oh wait now none of them are securities; Gary Gensler was our last line of defense.

[Edit: got it backwards]

load more comments (10 replies)
load more comments (21 replies)
[–] [email protected] 124 points 1 day ago* (last edited 1 day ago) (3 children)
  • Phone numbers
  • social security numbers

Stop making personal information into digital ids because when it inevitably ends up in some kind of data breach. These companies all throw their hands up saying sucks to be you.

[–] [email protected] 7 points 1 day ago (3 children)

What I hate is when they want you to store "secret" information like your mother's maiden name/ first pet name for later verifications. You know these are stored in plain text of course. My own damn government does this stupid shit, and they've had several hacks of PII including gun registrations because as far as I can tell, nobody competent works in government IT.

[–] [email protected] 8 points 19 hours ago

I choose random questions and store the random passwords that I use as answers in my password manager. It's also more secure because people can't just Facebook stalk you for answers.

[–] [email protected] 3 points 19 hours ago

Security questions don't care what you put in there. It's not an exam. It's basically just an alt password.

I just generate a string of alphanumeric text from my password generator and stuff those in there. If I lose my password vault somehow I'm cooked anyway, so.

[–] [email protected] 2 points 17 hours ago

I use bullshit answers for these, and save them in the notes section of my password manager.

[–] [email protected] 19 points 1 day ago

Nah, man. Gotta get my $2.97 check.

load more comments (1 replies)
[–] [email protected] 134 points 2 days ago (28 children)

This should be what digital ID looks like:

-----BEGIN PGP PUBLIC KEY BLOCK-----

mDMEZ26+ARYJKwYBBAHaRw8BAQdAsUGMjbGNUyyz9PHsHKP4xj/tIfYIuHb4miPH 0iCPpu60K0VSUk9SOiBFYXJ0aC5leGUgaGFzIGNyYXNoZWQgPG5vQGVtYWlsLmV4 ZT6IcgQTFggAGgQLCQgHAhUIAhYBAhkBBYJnbr4BAp4BApsDAAoJEI6E3uMn31Z3 028BAM5o8ER0dqTsxFlZSgZOvvgFHGuy2eFgF3rULkGKl1KrAP9fdE7WwnYbBer/ AVmw5jr0P5m/XsEQQrSueuk/FLYBBbg4BGduvgESCisGAQQBl1UBBQEBB0BDR0Bv pf4jxbwp9rVowFTnL59NGqnnh6XyF/LjAoYDGgMBCAeIYQQYFggACQWCZ26+AQKb DAAKCRCOhN7jJ99Wd1dMAP45xmN03SodkWHi7PYOORqNXJUBdMzzfsRXdqE8ZXaW vAD+PqNqPcbwJYCOEAXkg7DlZ0SX3o9MViZLdzHFQ3TpUA8= =krDh -----END PGP PUBLIC KEY BLOCK-----

PGP Key Fingerprint: 857957d40f06cc816fd3d29a8e84dee327df5677

Should be good until quantum computers come around

[–] [email protected] 1 points 1 hour ago (1 children)
-----BEGIN PGP MESSAGE-----

hF4D7cLqolaUp8cSAQdAOCdAgwhjdDgwk6TsYbey9XLZrKT7ny+KRAORyTPJsmUw
Fl1llKK3dYtwrPDUts8CA71uU8D2SOWwrk/mrQxlrP/btjNNj6j1vXehQJ0+FIuc
0sBPAU3onDQoAiPLDU7qky1cgtbgitMp4nGEnZ48Xh8OhWS03d9YfU4iIIuf/AWA
MTzzbMLZCLqZrIiJGyE2EgJOLIMAOToxidQ6Z/blrT6W9effeu4GwEB622O0eIv5
ct0jm/e2A6j1Gf/7UsnzeC21ME55/JkDIFQQ5ZrYqRGp9+M0yNHXIhJXQvO+QmHz
1CclNIdwbnupIIy0+eiy+Wn41An/IUV2NJy+bmCxRmqTXZyNrfnPMrelY5imknd9
1oZGuHc6tWqNq0ntjV1sBBsxHtAXtFIBWcqEmUgnpxEBglRxx20thoWvQINisCB4
9ptHAUM9Qjr3tWFdvL5MqOHZ14XQ65bbKXhx5MJmr5yijA==
=JKT0
-----END PGP MESSAGE-----

No one except this guy will be able to read this. Die out of curiosity muhahahaha

[–] [email protected] 1 points 1 hour ago

That.... very thoughful... 😅

I'll make sure to remember your kinds words and never give you up, and never let you down 😎

[–] [email protected] 68 points 1 day ago (8 children)

I'm sad PGP didn't become a popular way to log into websites. A challenge-response protocol could have even been built into web browsers. Big tech is reinventing that idea as Passkey, but with a very big tech flavor.

load more comments (8 replies)
load more comments (26 replies)
[–] [email protected] 15 points 1 day ago (5 children)

I've been considering getting a pager or a burner phone just for this

[–] [email protected] 4 points 1 day ago (1 children)

Just get a virtual DID number from something like Voip.ms or virtualphone. There may be other providers out there that use crypto for payment for added privacy, but if all you want to do is be able to keep your real phone # off the grid, these work.

[–] [email protected] 6 points 1 day ago (1 children)

usually they check for VOIP numbers and give you an error. Has to be legit.

[–] [email protected] 3 points 1 day ago (2 children)

Never had that problem with the Google voice service

Yeah yeah it's google, but it gives numbers that work

[–] [email protected] 2 points 17 hours ago

Google voice is hit or miss. It's worked for a lot of smaller sites for me, but the bigger / more corporate it is, the less likely it seems to work.

load more comments (1 replies)
load more comments (4 replies)
load more comments
view more: next ›