Anil John 🇺🇸 · @aniltj
-1 followers · 502 posts · Server infosec.exchange

FACT SHEET: President Biden’s Sweeping Pandemic Anti-Fraud Proposal: Going After Systemic Fraud, Taking on Identity Theft, Helping Victims

⟨ " Provide at least $300 million to prevent identity theft in public benefits:

To further prevent systemic identity theft and organized criminal syndicates from exploiting government benefits programs, this proposal would include funding to support the modernization of agency identity verification systems and support enhancements to lessen the impact on victims of identity theft.

As recommended by the PRAC and outlined in their recent report, this funding would facilitate improved data sharing and enhancement of “yes” / “no” attribute validation services." ⟩

More details @ whitehouse.gov/briefing-room/s

The way that this will be implemented matters, and I continue to believe that match/no-match ("yes" / "no") attribute validation services SHOULD NOT be how this is implemented.

Here is why ...

cyberforge.com/not-better-iden

#digitalidentity #identityfraud #identityvalidation #identitytheft #verifiablecredentials

Last updated 2 years ago

Anil John 🇺🇸 · @aniltj
-1 followers · 481 posts · Server infosec.exchange

⟨ " … a broader problem — our nation’s overall failure to address concerns over the huge amount of personal data collected in our digital lives […]

In fact, China’s 2017 National Intelligence Law requires Chinese companies to furnish any customer information relevant to China’s national security. […]

Moreover, if it wanted to collect information on Americans, China could sidestep a ban and legally, though with a little more effort, purchase almost limitless amounts of information from data brokers who stockpile information about our online activities.

If we had comprehensive laws that limit the collection and misuse (including the potential export to China) of Americans’ online personal data, then fears about the Chinese authorities using the app for surveillance and data collection would be greatly reduced. The freewheeling data broker business would also be restricted, so all that data would no longer be readily available. " ⟩

by Glenn S. Gerstell, former general counsel of the National Security Agency and Central Security Service from 2015 to 2020

nytimes.com/2023/02/01/opinion

I continue to believe that the use of data brokers by both the public and the private sector for remote identity proofing entrenches them in people's day to day life.

This is also why I no longer believe that match/no-match data validation services are the way to implement a public sector identity validation capability for use by the private sector.

cyberforge.com/not-better-iden

#digitalidentity #identityvalidation #omb #m1917 #sharedservices #govtech #civictech #databroker #privacy #dataprotection #identityproofing

Last updated 3 years ago

Anil John 🇺🇸 · @aniltj
-1 followers · 303 posts · Server infosec.exchange

I no longer believe that match/no-match data validation services are the way to implement a public sector capability for use by the private sector, so wrote up some thoughts on what changed my mind.

Also tried to capture the variety of conversations that are going on regarding @signalapp particularly after that NYT op-ed, including pointers to multiple interviews with @Mer__edith

Finally, as someone who spent part of my holidays turning on and configuring , , and on my personal domains, wanted to provide some pointers to the fine work and resources provided by @seanthegeek

Enjoy ...

cyberforge.com/not-better-iden

#identityvalidation #dnssec #spf #dkim #dmarc #digitalidentity #privacy #omb #government #verifiablecredentials #surveillancecapitalism #FICAM

Last updated 3 years ago