There are a lot of GOP-controller legislatures in the USA pushing through so-called “child protection” laws, but there’s a toll in the form of impacting people’s rights and data privacy. Most of these bills involve requiring adults to upload a copy of their photo ID.

    • jet@hackertalks.com
      link
      fedilink
      English
      arrow-up
      3
      ·
      1 year ago

      Please explain it to me like I’m five. How can the authentication service not know what your authenticating against? How can it provide you a token that you can’t use over and over again, or past other people?

      OAuth specifically wants to know what you’re using your tokens for.

      In principle if you insert a middleman into a transaction the middleman knows about the transaction. Thus it’s violates privacy

      • Rikudou_Sage@lemmings.world
        link
        fedilink
        arrow-up
        1
        ·
        1 year ago

        What good is it for the system to know, if the system disregards that information right after auth? Effectively it’s like no one ever knew.

    • buckykat@lemmy.blahaj.zone
      link
      fedilink
      arrow-up
      1
      ·
      1 year ago

      It is a basic tautological fact that you cannot verify an identity while keeping that identity private from the verifier.

      • Rikudou_Sage@lemmings.world
        link
        fedilink
        arrow-up
        1
        ·
        1 year ago

        Then you don’t know much about IT. Sure, the verifier must know your identity at the point of identification. Doesn’t mean it has to store any information about what you did. Unless of course you’re worried that the PC itself will magically come to life and do something with the information. In that case you need an entirely different kind of help. Source for my claims: Designing system architecture is literally my job.