BBO Discussion Forums: Personal ID infrastructure - a proposal - BBO Discussion Forums

Jump to content

  • 2 Pages +
  • 1
  • 2
  • You cannot start a new topic
  • You cannot reply to this topic

Personal ID infrastructure - a proposal Let's clean up the mess once and for all

#21 User is offline   mike777 

  • PipPipPipPipPipPipPipPipPipPipPip
  • Group: Advanced Members
  • Posts: 17,779
  • Joined: 2003-October-07
  • Gender:Male

Posted 2007-April-27, 16:23

Winstonm, on Apr 27 2007, 04:24 PM, said:

Quote

I may be wrong, but it seems that some conservatives may have nothing against the wiretapping act, but would run around on the street screaming if anything resembling a federal ID came up. This is so hypocrite that it seems almost ridiculous to me.


I can only speak for myself, but I have some conservative views, some liberal views, and a touch of libertarian thrown in for good measure - a real mishmash and not easily idetifiable with any one group.

I am against wiretapping unless under strict judicial control and oversight.

this makes more sense if you think you are not at war.

If you are at war I see nothing wrong with tapping incoming overseas/calls into the usa without "strict judicial oversight and control".... a matter of "excessive" control of the war being fought IMHO.

I understand many think this is "losing our freedom and liberty" even in the case of war.
0

#22 User is offline   Winstonm 

  • PipPipPipPipPipPipPipPipPipPipPip
  • Group: Advanced Members
  • Posts: 17,289
  • Joined: 2005-January-08
  • Gender:Male
  • Location:Tulsa, Oklahoma
  • Interests:Art, music

Posted 2007-April-27, 19:11

Seeing that pre-NSA wiretapping the same thing could have been done legally and just as quickly it makes at least this part of your statement correct:

Quote

this make more sense


:)
"Injustice anywhere is a threat to justice everywhere."
0

#23 User is offline   mike777 

  • PipPipPipPipPipPipPipPipPipPipPip
  • Group: Advanced Members
  • Posts: 17,779
  • Joined: 2003-October-07
  • Gender:Male

Posted 2007-April-27, 19:29

Winstonm, on Apr 27 2007, 08:11 PM, said:

Seeing that pre-NSA wiretapping the same thing could have been done legally and just as quickly it makes at least this part of your statement correct:

Quote

this make more sense


:)

Winston your facts are simply wrong, it cannot be down legally and quickly. I am not sure why people think so. See WWII.

If you just want to tap one or two phone calls or 100 or a 1000 maybe....but they tap...10,000 or 100.000 or more a day. Again if you just want to listen in on a tiny, tiny amount, maybe maybe ok I could buy your point.

If you want to listen to 100,000 day after day and run it through some high tech software for key words or whatever, how do you it? You don't. If you want to fight a real war this way, we just agree to disagree.

Can we agree that you want to at least listen into Russian phones, in Russia or Chinese phones in China, today even if we are not at war with them in anyway, shape or form without the courts having a say?

But if we are at war with Russia or China and they call the USA you want strict Court oversight to wiretap?
0

#24 User is offline   Winstonm 

  • PipPipPipPipPipPipPipPipPipPipPip
  • Group: Advanced Members
  • Posts: 17,289
  • Joined: 2005-January-08
  • Gender:Male
  • Location:Tulsa, Oklahoma
  • Interests:Art, music

Posted 2007-April-27, 19:55

Quote

Winston your facts are simply wrong, it cannot be down legally and quickly. I am not sure why people think so.


Perhaps we think so because of this:

Quote

WASHINGTON, Jan. 17 — The Bush administration, in a surprise reversal, said on Wednesday that it had agreed to give a secret court jurisdiction over the National Security Agency’s wiretapping program and would end its practice of eavesdropping without warrants on Americans suspected of ties to terrorists.

The Justice Department said it had worked out an “innovative” arrangement with the Foreign Intelligence Surveillance Court that provided the “necessary speed and agility” to provide court approval to monitor international communications of people inside the United States without jeopardizing national sec


If it can be done now, it could have been done then. The only reason the Bush regime backed down is because it knew it had no case and would lose in the Supreme Court.

Quote

But if we are at war with Russia or China and they call the USA you want strict Court oversight to wiretap?


Mike, I think you are missing my entire point. I do not want anyone, no person, group, or single branch of government to have sole and exclusive authority to do anything that violates civil rights and personal liberties, even in times of war.

Roosevelt went to Congress to ask for an Act of War. OK. Fine. That is the what consitution provides - that is two branches of government at work. That is not Roosevelt secretly ordering wiretaps without oversight on anyone he deemed a potential enemy (of what we can't know- it's classified - a Nixon "Enemies List?") simply because he deemed them a possible supporter of the Japanese cause with whom the U.S. had not even declared war.

The isolated instance is not greater than the overall good. Could it be right to allow one of a group of triplets to die at birth in order to save the other two?
Whether it is Japan, Korea, Germany, or radical Islam, the battle against any one enemy is not greater than the principles for which we fight. We are a nation of laws - to sacrifice law and democratic processes for the siren's song of security and safety by simply turning over rights to an ulitmate "Decider" is to lose without the enemy having to fire a single shot.

We supposedly are fighting to keep our freedoms, not to abandon them.
"Injustice anywhere is a threat to justice everywhere."
0

#25 User is offline   mike777 

  • PipPipPipPipPipPipPipPipPipPipPip
  • Group: Advanced Members
  • Posts: 17,779
  • Joined: 2003-October-07
  • Gender:Male

Posted 2007-April-27, 19:58

This is the same Justice Dept that you say day after day is lead by incompetents? :o

What did the NSA, Defense or CIA say and how many Generals does the Justice Dept have?

I guess we take our lead from the Justice Dept next time we declarer war. :)
0

#26 User is offline   Winstonm 

  • PipPipPipPipPipPipPipPipPipPipPip
  • Group: Advanced Members
  • Posts: 17,289
  • Joined: 2005-January-08
  • Gender:Male
  • Location:Tulsa, Oklahoma
  • Interests:Art, music

Posted 2007-April-27, 20:36

Quote

I guess we take our lead from the Justice Dept next time we declarer war.


I am not holding my breath until Congress does its Constitutional duty and actually declares war. That vote is so final and terribly difficult to spin. It's so much easier to "approve military action" and turn it over to the commander-in-chief to either win it and look good or screw it up and drop to 28% in the polls.

Naw, we can't turn it over to the DOJ and the FBI - they are still trying to figure out who sent the anthrax letters to Sen. Leahy and Sen. Dachsle. I guess the "follow us home' concept was reversed by invading Iraq and we must have "sent them home" since there has been no follow up anthrax attack.

Concerning "follow us home", I do think it awfully "sporting" of al-Qaeda to wait until they can "follow us home" instead of attacking on mulitiple fronts at once - must be that British-influence carrying over, fair play all that, good man.

Quote

This is the same Justice Dept that you say day after day is lead by incompetents?


If you wish to paraphrase me, please try to be more accurate. I never said the DOJ leadership was incompetent - disinginuous, politically motivated, underhanded, any of these would be a more apt description of my implications.

Quote

What did the NSA, Defense or CIA say and how many Generals does the Justice Dept have?



Your faith in the honesty, integrity, and total righteousness of the executive branch is counterintuitive with someone who lived through two Kennedy assasinations, LBJ, Martin Luther King, Nixon, Vietnan and Watergate.

The NSA, DoD, and CIA are subject to checks and balances so what they say is not the end all of debate. Do you really think it mattered in Germany what the SS or Generals had to say? There is a word for placing all of the state's power into the hands of a single person or a single group: totalitarianism.
The DoJ may have one general counsel, but I'm not sure about that. :o

Let me take one wild guess here - you were a student of Strauss? :)
"Injustice anywhere is a threat to justice everywhere."
0

#27 User is offline   paulg 

  • PipPipPipPipPipPipPipPip
  • Group: Advanced Members
  • Posts: 5,207
  • Joined: 2003-April-26
  • Gender:Male
  • Location:Edinburgh

Posted 2007-April-28, 01:49

FrancesHinden, on Apr 27 2007, 06:30 PM, said:

helene_t, on Apr 26 2007, 10:38 PM, said:

Anyone who has been involved in the engineering of information systems in a country with widespread use of CPR numbers (Denmark, in my case) and also in a country without such use (Netherlands in my case) knows how an enormous difference it makes.

I thought the Dutch sofi number had much the same meaning.

Similarly, in England everyone has an NI number (although it's got letters in it), but the only people who actually use it are the NHS and HM revenue & customs.

I think "use" is a little strong for HMRC as that implies efficiency. Abuse would be more appropriate given that this single government department maintains multiple systems that are inconsistent despite a unique identifier.

p
The Beer Card

I don't work for BBO and any advice is based on my BBO experience over the decades
0

#28 User is offline   helene_t 

  • The Abbess
  • PipPipPipPipPipPipPipPipPipPipPip
  • Group: Advanced Members
  • Posts: 17,397
  • Joined: 2004-April-22
  • Gender:Female
  • Location:Odense, Denmark
  • Interests:History, languages

Posted 2007-April-28, 01:55

hotShot, on Apr 27 2007, 01:04 PM, said:

Helene the problems I have with your proposal is not what computers do with the data they have, but what people do with the data they get or can access.

Having nothing to hide is not the same as a live broadcast from your bedroom.

You would be much more transparent, that the state.

And just imagine that someone who knows your CPR, can almost do anything with it, that you can.

I've probably been very unclear. Maybe I should not have included that I personaly have no problems with Big Brother. My whole point is that I want to protect those who do have problems with Big Brother, even if I personally question the rationality of such sentiments.

Also, maybe my use the word "transparent" may be unfortunate. I certainly don't want every citizens psychiatric record, consumption pa tern and sex life to be transparent: what I want to be transparent is the extent of government (and private) access to personal data. How far that access should go is a very important issue, but it's not the issue I raise. What I don't want is
- The letter of the law says that certain information is private while in fact it's not
- Everybody thinks their data are private while in fact they're not.
- People refuse to share their data with responsible and legitimate users because they have a fuzzy feeling (sometimes correctly, sometimes not) that it's impossible to prevent the data from leaking.
- The spirit of the law says that certain data should be private while the letter of the law says they are not because an inflexible infrastructure makes privacy infeasible
- People cannot control access to their own data, not so much because the government wants to control it, but because a clumsy infrastructure dictates one-size-fit-all solutions.

My first point is that use of CPR numbers instead of names etc. is not only more convenient but also makes privacy protection more effective and make the government's access to private data more transparent.

My second point is that I would like to go further by replacing CPR numbers by surrogate keys.
The world would be such a happy place, if only everyone played Acol :) --- TramTicket
0

#29 User is offline   Winstonm 

  • PipPipPipPipPipPipPipPipPipPipPip
  • Group: Advanced Members
  • Posts: 17,289
  • Joined: 2005-January-08
  • Gender:Male
  • Location:Tulsa, Oklahoma
  • Interests:Art, music

Posted 2007-April-28, 10:17

Quote

My first point is that use of CPR numbers instead of names etc. is not only more convenient but also makes privacy protection more effective and make the government's access to private data more transparent.

My second point is that I would like to go further by replacing CPR numbers by surrogate keys.


I have no real issues with this idea except in the practical sense. If one were born into such a system there would be no problem; however, to convert from a different system would create, IMO, a clash over what information the government feels it has rightful need to know versus what the populace believes is adequate, with the resolution being made by the elected representatives (hence, the government as sole judge as to what information is vital.)

Then there is the problem of the creation and storage of these surrrogate keys, meaing it seems to me that someone, somewhere would have access to what is in essence a "master" key that unlocks everything.

While the U.S. dispersion of information storage and retrieval into non-centralized areas is clumsy and slows productivity, it is much like the concept of the government itself, being a slow and clumsy organization created purposefully that way in order to diminish its power while increasing public freedoms.

However, I'm just talking from the top of my head because I really don't know much of anything about this type of sophistication of information storage and retrieval - I'm lucky if I can log onto BBonline the first time I try. :blink:
"Injustice anywhere is a threat to justice everywhere."
0

#30 User is offline   helene_t 

  • The Abbess
  • PipPipPipPipPipPipPipPipPipPipPip
  • Group: Advanced Members
  • Posts: 17,397
  • Joined: 2004-April-22
  • Gender:Female
  • Location:Odense, Denmark
  • Interests:History, languages

Posted 2007-April-29, 02:55

Winstonm, on Apr 28 2007, 06:17 PM, said:

Then there is the problem of the creation and storage of these surrrogate keys, meaing it seems to me that someone, somewhere would have access to what is in essence a "master" key that unlocks everything.

That is a real risk. Basically, I'd like to let everybody decide on this issue for themselves:

helene_t said:

Of course it will be my personal choice to rely so heavily on my trust in cpr.dk. Others may use their church, or their trade union, or their employer, or their own garage-shop Linux server shared with some friends, as administrator of their main identity. Or they may have no main identity at all but just granting multiple links, for example a direct link from bbo to the phone company and another direct link to the bank.

It could be that I suddenly realize that my trusted cpr.dk has been leaking confidential information to all kind of evil forces within and outside the government. I could move my master ID from cpr.dk to some other institution, but it may be too late. For example, I could prevent the talent scouts that I rely on for career development from obtaining updates of my psychiatric record, but they already have all information about me for the first 40 years of my life, and they have linked it to all kind of difficult-to-change keys like my earlier employers, my photo, my fingerprint, my DNA profile, my BBO nickname etc.

A story from real life: A few years ago I had some personal reasons to get a new identity. After obtaining the permission from the ministry of justice, I went to the church where I was baptized and let them change my name, place of birth, and mother's surname. The church forwarded the request to cpr.dk, who changed my cpr number on the church's request. It is the decision of the Danish government to let the churches serve as interfaces between citizens and cpr.dk. For right or wrong, they have more confidence in clerical servants than in the security of direct phone, snail-mail or email communication between citizens and cpr.dk.

In theory, this means that no information about me from the first 32 years of my life can be linked to information from the latter 9 years of my life:
- My university diplomas did not belong to me anymore because the cpr number printed on them was not mine anymore. But I recreated the link by showing the certificate of cpr number change to the university clerk, asking her to change my cpr number in the university IS. Now the university clerk could in theory post the old and the new cpr number on her blog so that everybody can re-establish the link. AFAIK that has not happened. A more serious question is if I could have stolen the diplomas from someone else by showing a fake certificate.
- My money, however, still belonged to me. cpr.dk told my bank to transfer all my money (including stocks, retirement funds etc) to my new cpr number. Unlike the university, the bank handles this fully electronically and (supposedly) destroys my old cpr number afterwards so no bank employee could leak the link. Of course, there could be a spyware infection in the bank IS.

Sounds cool, doesn't it? Considering how exotic the case is (I think each year a handful of Danes get a new cpr number) I was amazed by the smoothness of the procedure.

Then I went back to the Netherlands. They had a lot of information about me linked to my old data. This name etc. change had to be dealed with seperatly at different offices. Generally, the clerks had no clue about how to deal with it. For example, one anoying clerk at the municipality insisted on keeping my old data unless the ministry of foreign afairs told him otherwise. Since it would cost me a lot of work and legal expences to let the procedure go through Foreign Affairs, I decided to let the case rest until he was on holyday. The clerk on duty during his holidays was more flexible and just changed everything herself.
The world would be such a happy place, if only everyone played Acol :) --- TramTicket
0

  • 2 Pages +
  • 1
  • 2
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users