Fact : what's really behind the Swiss E-ID
End of September, Switzerland will vote for E-ID.
A big threat for our privacy as it will widely used for tons of new use cases.
Behind the government pitch of an "open source project, completely optional" hides big tech industry... Which will make it mandatory to access their services.
What are your thoughts on that ?
like this
Filter Your Files Directly in Zsh, Without Long Pipelines | Bread on Penguins
0:00 zsh opts
1:31 wildcards
2:46 when to glob!
4:08 special patterns
4:50 filtering, sorting
7:10 $f example
8:25 when not to glob!- YouTube
Profitez des vidéos et de la musique que vous aimez, mettez en ligne des contenus originaux, et partagez-les avec vos amis, vos proches et le monde entier.www.youtube.com
i use zsh on my work macs and now i'm thinking of doing so too on my linux machines because of this lady's videos.
i've been using bash for 20+ years and my work macs keep reminding me that the transition is going to have hiccups because bash has become muscle memory for me.
Bloody Day For Israel With Six Soldiers Killed In Gaza And West Bank (Videos, Photos)
Bloody Day For Israel With Six Soldiers Killed In Gaza And West Bank (Videos, Photos)
Six Israeli soldiers were killed on September 18 in two separate attacks that took place in the occupied West Bank...Anonymous1199 (South Front)
Russia challenges ICAO’s findings on MH17 crash in UN Court of Justice — ministry
Russia challenges ICAO’s findings on MH17 crash in UN Court of Justice — ministry
Russian diplomats also noted that although the tragedy occurred over 11 years ago, "there is still a long way to go in the quest for truth"TASS
Texas Man Is Charged With Making Threats Against Mamdani
https://www.nytimes.com/2025/09/18/nyregion/zohran-mamdani-threat-nyc-mayor.html
Beijing Prefers Peaceful Reunification with Taiwan But Warns Conventional Arms Are Sufficient
Beijing Prefers Peaceful Reunification with Taiwan But Warns Conventional Arms Are Sufficient
Retired PLA Lieutenant General He Lei said China has enough conventional weapons to resolve the Taiwan issue if necessary, though peaceful reunification remains Beijing’s preferred pathPavel Morozov (Pravda English)
A Reforma Administrativa avança para destruir o Estado brasileiro
A Reforma Administrativa avança para destruir o Estado brasileiro
Em meio a entrevistas concedidas à grande mídia, o relator do GT da Reforma Administrativa divulga a conta gotas possíveis ataques a direitos e ao próprio Estado.jornalofuturo.com.br
'Kill zone' around crucial Ukrainian city as Russian forces try to squeeze defenders out
'Kill zone' around crucial Ukrainian city as Russian forces try to squeeze defenders out
Pokrovsk has withstood Russian assault for more than a year, but Sky News hears from an expert that the defence could be coming to an end - here's why.Michael Drummond (Sky News)
EU to force Ukrainians to return home
EU to encourage Ukrainians to return home
Member states are facing financial strain providing benefits to millions escaping the conflictRT
Is the Kyiv Independent good enough for you, buddy?
kyivindependent.com/eu-to-phas…
EU to phase out temporary protection program for Ukrainians, prepares transition other residence statuses
In a recommendation adopted by member states, the Council agreed on a framework to ensure a "sustainable return and reintegration into Ukraine, when conditions allow," as well as a coordinated transition to other residence statuses for those eligible…The Kyiv Independent news desk (The Kyiv Independent)
Well aren't you a peach
How about you try a news source instead of... Whatever the hell this site is pretending to be, and then maybe make an attempt to be nuanced and truthful?
Edit: lol, the domain doesn't even resolve anymore
Is the Kyiv Independent good enough for you, buddy?
kyivindependent.com/eu-to-phas…
EU to phase out temporary protection program for Ukrainians, prepares transition other residence statuses
In a recommendation adopted by member states, the Council agreed on a framework to ensure a "sustainable return and reintegration into Ukraine, when conditions allow," as well as a coordinated transition to other residence statuses for those eligible…The Kyiv Independent news desk (The Kyiv Independent)
Works fine for me.
Well now it's gone but the other link is even better lol
Drone from Yemen strikes hotel in Israeli resort city Eilat
Drone from Yemen strikes hotel in Israeli resort city Eilat
Drone from Yemen strikes hotel in Israeli resort city Eilat-english.news.cn
On one hand USA bombed my country, poisoned the waterways with depleted uranium, and helped war criminals rip a chunk of it off and continue ethnically cleansing people to this day.
On the other, for over a decade China has been helping criminals running the country embezell billions in return for putting us in so much debt who knows how many generations will be paying it off.
Both can go fuck themselves.
Workers across France strike over budget cut plans
Workers across France strike over budget cut plans
The widespread walkouts come less than a fortnight after the government collapsed over a proposed budget.Laura Gozzi (BBC News)
Samsung brings ads to US fridges
Samsung brings ads to US fridges
Samsung’s ‘screens everywhere’ initiative is morphing into ads everywhere.Thomas Ricker (The Verge)
How do I turn my Anki deck into multiple choice quiz automatically?
I am trying to study for my Network+, I have an Anki deck I downloaded from the internet that's very helpful, but I have to basically mark down myself which things I'm struggling with. I was wondering if there is a tool available that would automatically turn my deck into a quiz? I do not want to spend a lot of time turning it into a quiz myself, because there is a lot of material. I am okay with using Duck.ai (ChatGPT) for helping me with this, if needed. Just not aware of an easy way to do this.
I'm trying to avoid using non-free sites like Quizlet.
Any help is appreciated!
like this
Why do you have to mark cards manually? Anki's algorithm already reschedules cards based on what you're struggling with. Additionally the card browser has an ease filter that you can sort by.
How is the quiz you want different than what Anki already provides? Is it that instead of providing the answer from memory, you want to be provided a list of choices? I'd argue if you're studying, it is better to do it the "hard" way by just knowing the answer, and then acing the test since its the easier multiple choice format.
When I did Net+ and then Sec+, most of my questions were formatted this way, but I also manually added the multiple choice questions that were in my study book. For that I listed all the choices in the question field, then just the question and answer in the answer field.
Lastly, this isn't really a Linux question though, as Anki is cross-platform. You may get more response on Anki's forums.
As the other comment says, Anki already changes dynamically so that you study the hard stuff more. Just make sure to mark whether you got the answer and how hard it was to get it.
Now, here’s something that could help you, perhaps more than any multiple choice exam could ever help you with: when studying, make sure to not only blurt the answer but also use elaborative recall. In other words, make an effort to think and do so mindfully (rather than mindlessly).
Why? You learn through effort and through mindfully (and not mindlessly) connecting the new knowledge with what you already know.
You could even structure your elaborative recall through Visible Thinking Routines.
How does that look like?
- You start your study session.
- You get an Anki card.
- You remember this card clearly, and so you say it out loud and then check.
- You get it right. No need for elaborative recall. Better to focus your energy elsewhere.
- You get another Anki card.
- This one’s tough. You’re unsure.
- You say out loud why it could be any of the two answers you think could be right.
- You get the answer and sure enough it was one of the two you thought.
- You decide to do elaborative recall so that you learn this well. To guide your elaborative recall, you decide to use the thinking routine “Connect-Extend-Challenge”.
- So you do elaborative recall through a thinking routine. You do it by talking out loud or writing it out.
- This step may sound silly but make sure to celebrate so that you feel pride and satisfaction for doing something that takes effort (especially if you’re struggling with the habit of studying).
- Then you move on to the next Anki card.
A missile, not a drone, hit a residential building in Poland – Rzeczpospolita
A missile, not a drone, hit a residential building in Poland – Rzeczpospolita
The Polish Air Force mistakenly hit a residential building in the village of Wyrzyki-Wola with a missile, according to the Rzeczpospolita newspaper.newsmaker newsmaker (English News front)
‘They will destroy the city, but not the people’: Gaza braces for Israel’s largest assault of the war
‘They will destroy the city, but not the people’: Gaza braces for Israel’s largest assault of the war
As Israeli troops push into the enclave’s heart, civilians face an impossible choice: Flee into uncertainty or stay and risk annihilationRT
Bank of Russia governor dismisses talk of recession
Bank of Russia governor dismisses talk of recession
Cooling growth should not be confused with a contraction, Bank of Russia Governor Elvira Nabiullina has saidRT
U.S. sees 5.7 million more childless women than expected, fueling a "demographic cliff"
U.S. sees 5.7 million more childless women than expected, fueling a “demographic cliff”
New research shows a sharp, accelerating rise in childlessness, with 5.7 million more women aged 20-39 without children than expected in 2024. This trend has contributed to 11.8 million fewer U.S. births since 2007.Karina Petrova (PsyPost Psychology News)
Their vision is based on movement, stay perfectly still.
You're thinking of a different kind of predator. I don't think that would work against sexual predators.
Arab and Islamic airspace blockade would damage Israel, finds UAE think tank
The report estimated that it would cause Israel’s GDP to contract between 4.8 and 5.7 percent, which would trigger a recession.
A wide-scale blockade including OIC members such as Turkey, Pakistan and Indonesia would sever direct flights to Israel’s east and south, creating a significant barrier to high growth markets in Asia and Africa.
It estimated that detours which added four to six hours to flights could cost between $30,000 to $60,000 per flight. Israeli airline El-Al would likely suffer a reduction of revenue of between 60 to 75 percent, according to a “conservative estimate”.
Such a move, according to the paper, would disrupt tourism to Israel, and high-value time-sensitive exports like diamonds and medical equipment.
It would likely cause contract cancellations, as well as a potential exodus of research and development initiatives based in Israel.
Such a coordinated action taking place may well be unlikely, given that it would draw the ire of the US, and would create economic costs for the blockading countries themselves.
The UAE, as well as Bahrain, Morocco and Sudan, established full relations with Israel as part of the Donald Trump-brokered Abraham Accords in 2020.
Israel's genocide in Gaza has brought about condemnation from these countries, but not a suspension or withdrawal of the accords.
Arab and Islamic airspace blockade would damage Israel, finds UAE think tank
An Emirati-owned think tank has published a paper assessing the economic, political and security impact of a potential coordinated airspace blockade against Israel by Arab and Muslim-majority countries.Rayhan Uddin (Middle East Eye)
‘Liberal’ has become a term of derision in US politics – the historical reasons are complicated
‘Liberal’ has become a term of derision in US politics – the historical reasons are complicated
Why are so many Americans unwilling to identify as liberals, white or otherwise, even while supporting traditionally ‘liberal’ government programs?The Conversation
Democratic PR Firm to Run Bot Army for Israel
SKDKnickerbocker LLC, a top Democratic Party-aligned public relations firm, has agreed to run a “bot-based program” to amplify pro-Israel narratives on Instagram, TikTok, LinkedIn, YouTube, and other platforms, according to a filing under the Foreign Agents Registration Act submitted on Aug. 29. The contract, signed on April 28, 2025, describes a strategy to “flood the zone” with content promoting the Israel Ministry of Foreign Affairs’ pro-Israel messages, using automated tools to increase the reach and visibility of specific posts.
The contract, worth $600,000 from April 2025 through March 2026, also tasks SKDK with coaching Israeli civil society spokespeople for on-camera appearances, testing the effectiveness of social media influencers, and arranging tailored outreach to journalists at outlets including BBC, CNN, Fox, and the Associated Press to secure favorable coverage. While it is not confirmed whether the bot program is already active, the contract date suggests it could be underway.
Democratic PR Firm to Run Bot Army for Israel
A new FARA document reveals SKDK's plan to "flood the zone" with social media bots as part of its $600,000 contract with Israel.Donald Shaw (Sludge)
Looking for software that will allow keyboard/mouse to output to tablet via usb
Hey all,
I have a tablet that I’ve been working on and in order to setup OS I need to plugin a usb hub to the usb port, using an adapter to microUSB, ok, and then plugin either a keyboard and mouse or a combo unit (in my case, the wireless receiver device of a mini keyboard/touchpad device), and finally, the flash drive with the OS install on it.
To put it simply, it’s really a pain in the ass anytime I want to do some testing. It works, but it is a clutter and nuisance.
Is there any software that will allow me to plug in a USB cord from my laptop (Linux) and the other end into the USB port of the tablet, and use the laptop to control the tablet?
Thanks.
Hah, no worries. I think it's just an unusual use case and... well, I recognized it because I'm obsessed with PiKVM lately and those things!
I'm not superknowledgeable on USB, but Linux has features to do this; they are called "gadgets" in this list:
docs.kernel.org/usb/index.html
I have used this to turn a RPI Zero into a virtual USB drive with these scripts: github.com/alexpdp7/rpi-zero-u…
Likely by searching the Internet for USB gadgets you might find good explanations about requirements. I know there are unexpected difficulties- I'm using a Pi Zero instead of a nicer Pi because... nicer Pis can draw too much power over USB and bork what they're connected to. So be careful.
GitHub - alexpdp7/rpi-zero-usb-iso: Converts a Raspberry Pi Zero 2W into a virtual USB drive for ISO
Converts a Raspberry Pi Zero 2W into a virtual USB drive for ISO - alexpdp7/rpi-zero-usb-isoGitHub
How L.A.'s Playbook Can Guide Chicago's Fight Against ICE
How L.A.'s Playbook Can Guide Chicago's Fight Against ICE ~ L.A. TACO
With ICE terrorizing Chicago, independent media outlets The Triibe, Unraveled Press and The Chicago Reader joined forces to report on ICE’s activities in the city and suburbs.lataco.com
like this
Sincere questions I find myself asking.
Sometimes I think, I have learned a lot about this issue and I'm well aware of the fact the whole world is going towards a state of surveillance that no one can escape, I have done everything I could to ensure my personal privacy, but what about others?
the majority of the world population does not even care about this matter, and they might even see it as a normality, the people might even know that they are being watched/listened to/surveilled, and they don't do anything to prevent it neither individually or collectively.
I also believe that protecting the individual privacy automatically contributes to the collective privacy and vice-versa, but seeing how the world is heading towards extreme surveillance that is practically impossible to resist (eg.. face recognition, chat control law),
I ask, what is the point of all of this? how can i live peacfully knowing that i can be suspected of anything just because i made a joke here or said something there?
and I'm not talking 100% privacy or anonymity, i'm just talking peace of mind and well-being.
Of course, Bernie couldn't have it any other way
It Is Genocide » Senator Bernie Sanders
Hamas, a terrorist organization, began this war with its brutal attack on October 7, 2023, which killed 1,200 innocent people and took 250 hostages. Israel, as any other country, had a right to defend itself from Hamas.Senator Bernie Sanders
Hegseth Leads Push to Punish Military Service Members Over Charlie Kirk Comments
The Pentagon has ramped up a political correctness crusade in the wake of the killing of conservative influencer Charlie Kirk.
The military is taking disciplinary action against both enlisted troops and officers over social media posts regarding Kirk, who was shot last week at an event at Utah Valley University.
In the wake of Kirk’s death, a number of X accounts began calling for their followers to find social media posts made by troops that they saw as being critical of — or even not sufficiently deferential to — Kirk or mocking or celebrating his death. The accounts began posting screenshots, tagging Secretary of War Pete Hegseth and other senior Pentagon officials and calling for the troops to be fired.v
Hegseth Leads Push to Punish Military Service Members Over Charlie Kirk Comments
The Pentagon’s political correctness campaign could affect dozens of enlisted troops and officers, according to one insider.Nick Turse (The Intercept)
Hegseth Leads Push to Punish Military Service Members Over Charlie Kirk Comments
The Pentagon has ramped up a political correctness crusade in the wake of the killing of conservative influencer Charlie Kirk.
The military is taking disciplinary action against both enlisted troops and officers over social media posts regarding Kirk, who was shot last week at an event at Utah Valley University.
In the wake of Kirk’s death, a number of X accounts began calling for their followers to find social media posts made by troops that they saw as being critical of — or even not sufficiently deferential to — Kirk or mocking or celebrating his death. The accounts began posting screenshots, tagging Secretary of War Pete Hegseth and other senior Pentagon officials and calling for the troops to be fired.
Hegseth Leads Push to Punish Military Service Members Over Charlie Kirk Comments
The Pentagon’s political correctness campaign could affect dozens of enlisted troops and officers, according to one insider.Nick Turse (The Intercept)
South Korean woman who bit off attacker’s tongue acquitted after 61 years
A court in South Korea has acquitted a woman convicted six decades ago for biting off part of a man’s tongue during an alleged sexual assault, after she challenged the ruling, inspired by the country’s #MeToo movement.
Choi Mal-ja was 19 in 1964 when she was attacked by a 21-year-old man in the southern town of Gimhae. He pinned her to the ground and repeatedly forced his tongue into her mouth, at one point blocking her nose to stop her from breathing, according to court records.
Choi managed to break free by biting off 1.5cm of his tongue.
In one of South Korea’s most contentious rulings on sexual violence, the aggressor received only six months in prison, suspended for two years, for trespassing and intimidation – but not attempted rape.
Choi, now 79, was convicted of causing grievous bodily harm and handed a 10-month prison sentence, suspended for two years. That decision was overturned on Wednesday by the Busan district court which ruled her actions constituted “justifiable self-defence” under South Korean law.
South Korean woman who bit off attacker’s tongue acquitted after 61 years
Choi Mal-ja’s appeal gained momentum after #MeToo movement inspired her to seek justiceGuardian staff reporter (The Guardian)
Ok but what does inceldom got to do with it ? That was my question.
Also a country that conscripts men, is misogynistic ? Wow that's new
These misogynistic movements are filled with incels. Just casting them as misunderstood and cast-off from society is horribly inaccurate. This political division is large and climbing:
Rampant femicide and violence against women is huge and growing to epidemic levels. The fact that there is forced conscription for men is another avenue of misogyny in a way men are also harmed, forced conscription serves as a way for men to collectively have a shared millitarized experience and separate them from the rest of society. It also harms men, yes, but is ultimately a part of the way society is increasingly divided, and is used as justification for violence against women.
500 femicides: The epidemic of violence against women in Korea
An in-depth look at court judgments spanning from January 2016 to November 2021Hankyoreh
Iran and nuclear watchdog sign agreement seeking path to restart cooperation
CAIRO (AP) — Iran and the International Atomic Energy Agency signed an agreement Tuesday in Cairo to pave the way for resuming cooperation, including on ways of relaunching inspections of Iran’s nuclear facilities.
The announcement followed a meeting among Egyptian Foreign Minister Badr Abdelatty, his Iranian counterpart Abbas Araghchi and International Atomic Energy Agency Director General Rafael Grossi.
No further details were provided about the agreement, but Grossi said at a joint news conference after the signing that it was technical in nature and highlighted the “indispensable” inspection work that needs to resume in Iran under the treaty of non-proliferation of nuclear weapons.
https://apnews.com/article/iran-nuclear-capabilities-iaea-egypt-df623c26f9ee1e5b37431f00fa1d3a70
I'm all in on linux. [Damien Wilde]
windows is ass. i use only linux now.
- YouTube
Profitez des vidéos et de la musique que vous aimez, mettez en ligne des contenus originaux, et partagez-les avec vos amis, vos proches et le monde entier.www.youtube.com
like this
Have you got hardware acceleration working? I'll often take half a TB of 360 footage on a trip, and stitching it on Linux via Bottles isn't viable due to me not having hardware acceleration working. It takes days on my current Linux setup, as compared to less than a day with HW acceleration on Windows.
I have been just considering getting a Mac Mini M4 for 450 bucks next time it's on sale and using that as a DaVinci/Insta360 render server.
Technically Spain was fascist at the time so if you made a map of countries under fascism generally at the time and updated the EU map for Brexit, you'd be much closer to a 1:1.
Strange how Europe just does that.
exu
in reply to harfang • • •I'm in favour of it.
Contrary to the last time this was proposed, the government is in control of it instead of private corporations.
This will also be an alternative to any of the current online ID verification, which involve sending photos of your ID, videos of it and videos of yourself to some random third party for verification.
harfang
in reply to exu • • •Petter1
in reply to harfang • • •There is an article in the proposed law that e-ID is only allowed to be required for actions, where the law explicitly requires authentication.
In this proposed law there is no article that explicitly forces services to require a ID
So it only applies to services that used to require identification since a long time, lime buying alcohol, money laundering protection, some government stuff you had to do physically prior etc.
But there is a new law coming which sadly did mot get a referendum, that requires age verification for 18+ media like video and games. But this law will take effect no matter if e-ID is accepted or not. So if e-ID was declined, you would have to scan the compete ID, do a liveness selfie and send it to private companies like Netflix to watch 18+ stuff there.
With e-ID, you can proof you’re old enough without revealing name, gender, body hight etc.
Please inform yourself correctly before spreading nonsense
harfang
in reply to Petter1 • • •As you mentioned. There's a new law coming without referendum.
Today you'll need it to guy alcohol.
Tomorrow streaming
After tomorrow access to public transport
The open web forum in my picture exists. You can have a look. They dictate the rules. Its public information 😀
hubobes
in reply to harfang • • •harfang
in reply to hubobes • • •SoulKaribou
in reply to harfang • • •harfang
in reply to SoulKaribou • • •Matt
in reply to harfang • • •You're just spoiled.
Switzerland is the only country that I know has direct democracy. The others have indirect democracies where you vote politicians (or parties here in Slovakia) and they decide on your behalf what they want.
harfang
in reply to Matt • • •Agee there's kinda direct democracy.
But check out, its public. How many top level politics are paid by insurances ? 50-80 people ?^^
For me a democracy is a government not funded by private companies.
Matt
in reply to harfang • • •JustTesting
in reply to harfang • • •Volksinitiative No-Lobbying | Schweiz
No-Lobbyingharfang
in reply to JustTesting • • •nazgul666
in reply to harfang • • •You are not required to vote. You will not be punished if you abstain from your vote. You are completely free to chose "yes" or "no" based on your own judgings.
Isn't that exactly what democracy is about?
harfang
in reply to nazgul666 • • •Those people influence most of the voters which makes it unbalanced
nazgul666
in reply to harfang • • •Indeed, the lobbying is nasty and the party financing is not as transparent as it could be.
But discrediting the whole system as undemocratic because of those "minor flaws" is just not fair IMO.
harfang
in reply to nazgul666 • • •hubobes
in reply to harfang • • •harfang
in reply to hubobes • • •hubobes
in reply to harfang • • •harfang
in reply to hubobes • • •JustTesting
in reply to nazgul666 • • •Volksinitiative No-Lobbying | Schweiz
No-LobbyingPowerCrazy
in reply to nazgul666 • • •nazgul666
in reply to PowerCrazy • • •1. The legislative authority is drafting a new law. This law can be challenged and will then be voted on (this is the case for the E-ID law)
2. A suggestion for a new law can be raised by citizens. This law will then be voted on.
Petter1
in reply to harfang • • •harfang
in reply to Petter1 • • •Schlemmy
in reply to harfang • • •I think avoiding functioneren creep will be a certain issue.
Belgium has such an e-id for nearly 10 years now. It works pretty good and acces to your personalia data is granular.
If only age verification is needed, the request will only grant you birth date.
Comanies that want to use it need to be vetted and their acces to your data is centrally regulated.
itsme-id.com/en-BE
itsme®, your digital ID
itsme®Kazumara
in reply to Schlemmy • • •I always wonder why they don't minimize data further. "Age of Majority reached: Yes" seems like it should be good enough.
uniquethrowagay
in reply to Kazumara • • •The German one supports that. It will also tell you exactly what data is transferred to the service in question.
But because Germany is Germany, the eID is rarely even implemented.
Schlemmy
in reply to Kazumara • • •That's exactly how it works with the Belgian system.
Same for reductionis at the local swimming pool. They can only check if I'm a local but don't get to see my adress.
utopiah
in reply to Schlemmy • • •Any privacy freak who did a review on ItsMe? I just shared minutes ago lemmy.ml/post/36346569/2117413… that I don't trust them but maybe I'm just paranoid. The fact that they are regulated means little, Meta and Google also are and they legally siphon everything we let them.
Schlemmy
in reply to utopiah • • •We have a local privacy podcast (Dasprivé). The CISO was featured on the podcast. I can't transcribe everything but the community consents on the fact that they run a tight ship.
The use case is very local so apart from Flemish and French speaking sources i sadly can't get further than 'trust me bro' at the moment.
Every authentication uses your SIM, your civil service number and your password (PIN, fingerprint, face id).
Before authenticating you'll see all the info that'll be shared like your, date of birth, adress, phone number,...
Acces is granular. If age verification is needed, the request will only state that you're 18 or above for example. They don't get my date of birth.
As a resident, I get a reduction at our local swimming pool. The can use my id but the only info they see is whether I live in the city or whether I'm from outside.
Everytime my data is accessed, the acces is logged. The log contains information about the organisation and, if it applies, the person that made the manual lookup. The legality is checked by logging the legal ground for acces.
Are they trustworthy? I don't know. We use our eID for online verification for over 20 years now and ItsMe has certainly made the whole process a breeze.
utopiah
in reply to Schlemmy • • •Works for me, URL please and thanks already for the clarifications.
Schlemmy
in reply to utopiah • • •I can't find the blog post that I was referring to but this might help:
From their own site:
itsme-id.com/en-NL/why-itsme/s…
ISO cert:
itsme-id.com/en-BE/business/bl…
It's good to point out that the system was developed by a consortium of banks to simplify identity verification en prevent fraud. Banks are held to ''Know Your Customer''. KYC entails that they need to check your identity every now and then and up until ItsMe that meant that you had to verify with your eID and a card reader. Those card readers have issues. Outdated firmware and whatnot make the proces a terible experience. I have several government websites that I use from day to day and the all need my eID for authentication.
Some figures.
Nearly 1.700.000 authentications every day for 11.700.000 Belgians. 80% Of the Belgians use the app.
Digital security of the highest level
itsmeutopiah
in reply to Schlemmy • • •Schlemmy
in reply to utopiah • • •Ah, you can see clearly who gets which data with every authentication. It's logged and I can look it up on my portal.
Actually'', apart from ItsMe, I can see every time someone did any lookup on my online data with the federal government for the last 10 years. I even get to see their names.
There's no third party watching with ItsMe because the traffic is encrypted. The data is owned by the Federal government and the party that requests authentication gets to see what the are legally allowed to see and what you clear. With every authentication you get to see what info they request.
utopiah
in reply to Schlemmy • • •Schlemmy
in reply to utopiah • • •utopiah
in reply to Schlemmy • • •Maybe I misunderstand what you are covering but I don't think so, e.g. card reader and Ente Auth do not require connectivity.
Schlemmy
in reply to utopiah • • •It's used for official authentication. The certificates are handled by the federal government. That's only possible with a call to the federal governments servers.
Any eID or other card wil have outdated data on it at some point. Like, when you move or, when you die.
hubobes
in reply to harfang • • •harfang
in reply to hubobes • • •hubobes
in reply to harfang • • •harfang
in reply to hubobes • • •There's too much lack in this law from my point of view.
Instead, to prove our age for example, we could get TOKENS with age verification that are completely anonymous.
hubobes
in reply to harfang • • •harfang
in reply to hubobes • • •utopiah
in reply to harfang • • •In Belgium we do have e-ID and we had it for years.
If in any of the circles there is only BigTech then indeed you are right it is a threat.
In Belgium though I can access my official document with some of these (honestly I don't remember which, but AFAIR It'sMe is one option) but more importantly there are some options with some decoupling, e.g. SMS (arguable as one must have a phone number usually via BigTelco) but, last and not least :
which means as long as at least one of these alternative is available then IMHO we can get some of the benefits without the centralization risk.
Ente Auth - Open source 2FA authenticator, with E2EE backups
enteprzmk
in reply to utopiah • • •utopiah
in reply to przmk • • •I'm talking about public services. For private services I have no idea what they all do and, as importantly, what they are legally bound to do. I would hope that obviously they would have to provide at least 1 solution that doesn't rely on any third party, e.g at least provide the card reader with legal Belgian ID option (which seems to be what they offer you, so IMHO that's good enough), but I don't know.
ItsMe not running is pretty good in terms of privacy because their entire business model is, and correct me if I am wrong, to be an intermediary. I didn't check what data they share but I'd be pleasantly shocked if it was none.
The card reader might seem slightly inconvenient or outdated but there is no intermediary and it is, AFAICT, secure because it's based on well established cryptography.
PS: it's also fun because you can play with PAM and thus, I didn't try that, login or get
suandsudowith your ID card.przmk
in reply to utopiah • • •It doesn't matter whether it's a private or public service if they both use the same auth provider (beId). I wouldn't be surprised if the SMS/TOTP options went away completely at some point for our "security".
A different issue is that itsme is often the only option when doing things on mobile. Sure, you can avoid it for now, but it's getting increasingly inconvenient to do so, unfortunately. I try to express my disappointment to itsme every now and then about the fact that they require Google's SafetyNet and that the Connective Plugin needed to activate itsme in the first place doesn't even work on Linux, but to no avail. They sent me a detailed email about setting up a Windows VM to get it working so credit where it's due for the effort, but the situation is still bad...
utopiah
in reply to przmk • • •Indeed that's why TOTP, via e.g. Ente Auth, was a good surprise. I didn't see it until now and I believe that's the mobile alternative to ItsMe.
przmk
in reply to utopiah • • •utopiah
in reply to przmk • • •Schlemmy
in reply to utopiah • • •InFerNo
in reply to przmk • • •That's actually a choice made by the service. The onboarding document has the options listed and they get to choose, which is imho stupid. Just offer all options.
Service A has email enabled, service B doesn't. Since ACM/IDM is SSO you can first authenticate with service A with your email code and then go to service B already authenticated.
InFerNo
in reply to utopiah • • •Those aren't eID. They are a way to authenticate using CSAM.
There are different weights tied an authentication method, card reader scores highest.
From the top of my head there's email, sms, totp, card reader, eiDAS and itsme® (which I avoid because it's proprietary and controlled by a 3rd party).
There's a list of properties a service can request when accessing data via ACM/IDM, for example your ssn, name, etc.
You can read your eID with local software too, with the aptly named eid viewer. Click on the picture in the overview and drag it into a text editor to see the entire exportable xml.
Wurzelfurz
in reply to harfang • • •I have not yet looked into it.
I will vote in favour if:
- The E-ID platform is controlled by the government and is fully open source
- Platforms only get a single binary information for age verification if the person is old enough or not and does not get any identifiable information.
- The government platform does not get any info about what service is doing the request. So the government controlled ID platform cant log what service the person uses.
If any of these points are not fulfilled with the planned implementation I will have to weigh the risks.
harfang
in reply to Wurzelfurz • • •hubobes
in reply to harfang • • •swiyu - the Swiss Trust Infrastructure ecosystem
GitHubsleen
in reply to harfang • • •private ids where always the scope of the privacy movement. However, it may as such present other challenges which can include age based discrimination. It as such must be implemented wisely.
Age is already being weaponised against us (child protection, etc), this shouldn't be like that - We can already see what kind of power governments hold. Ageism is what will ultimately destroy us.
harfang
in reply to sleen • • •