541 reputation
414
bio website
location Cambridge, United Kingdom
age 94
visits member for 2 years, 7 months
seen 5 hours ago

Interested in web standards, semantics, communication, history of science, and the - uh - universe...

Increasingly disillusioned by Stack Overflow and the rest of the Stack Exchange system, for reasons overlapping those articulated here by Michael Richter and here* by Benjamin Mako Hill.

*Stack Exchange sites are worse than GitHub in this respect.


Dec
21
comment How to avoid identity theft at key signing parties?
@BobBrown, at some KSPs, at least some participants are mutual strangers, hence the need for ID. In these cases, your a) is false; but you may choose to trust that the ID documents shown by a stranger are accurate & that the stranger is genuinely in control of a given PGP key. That is very different from trusting the stranger not to engage in identity theft against you.
Dec
21
comment How to avoid identity theft at key signing parties?
@BobBrown I'm sorry you've reached that conclusion, because it's mistaken. My question and comments were in earnest. I felt it was better to give constructive feedback on the answers that I found unhelpful than to simply downvote them or to say/do nothing. If you think I was wrong to do this, please explain how I could have conducted myself better.
Dec
21
accepted How to avoid identity theft at key signing parties?
Dec
21
comment How to avoid identity theft at key signing parties?
Thank you! It had not occurred to me that a notary public might be useful for reducing conventional identity theft risks at KSPs.
Dec
21
comment How to avoid identity theft at key signing parties?
@cremefraiche, I've re-read it several times and no, really, it doesn't. Hint: just because something is not required doesn't imply it is never permitted.
Dec
21
comment How to avoid identity theft at key signing parties?
@cremefraiche, you are mistaken to say I trust no-one enough to let them verify I am who I say I am. I would be grateful for answers to my original question, rather than speculation or hyperbole.
Dec
21
comment How to avoid identity theft at key signing parties?
@cremefraiche fair enough, but it is still odd that this does not seem to be much of a concern to other people, especially to people sufficiently concerned about security that they are taking active steps (i.e. participating in a KSP) to counter cryptographic identity theft, which I believe is much rarer than conventional identity theft and which might in many people's cases have less severe consequences. I don't know why this isn't more remarked upon. I feel like there's a cognitive bias at play.
Dec
20
comment How to avoid identity theft at key signing parties?
Thanks, but a requirement to show an ID to certain people in order to travel says nothing about the risk in showing it to anyone else, esp. to a stranger at a KSP who might have a hidden camera. RMS's approach to credit/debit cards probably is sensible from a privacy and identity theft perspective. You appear to have some experience of KSPs so I'd like to think you could offer more helpful advice, but I'm afraid your answer as it stands seems to take an all-or-nothing approach rather than a risk mitigation approach.
Dec
20
comment How to avoid identity theft at key signing parties?
Thanks. I am aware that the documents are typically only shown, and not handed over. I am not convinced that this means there is no opportunity to copy them (or at least, parts of them), e.g. using memorisation, handwritten notes, hidden cameras, hidden RFID passport readers, etc.
Dec
20
revised How to avoid identity theft at key signing parties?
added 71 characters in body
Dec
20
asked How to avoid identity theft at key signing parties?
Oct
13
awarded  Popular Question
Oct
10
awarded  Nice Question
Oct
8
awarded  Citizen Patrol
Aug
7
awarded  Necromancer
Jul
2
awarded  Curious
Jul
1
accepted Voicemail PIN reset - what is a DDN?
Jun
30
revised Voicemail PIN reset - what is a DDN?
deleted 35 characters in body; edited title
Jun
30
comment Voicemail PIN reset - what is a DDN?
Indeed, you are correct. Evidently my Google-fu failed me first time around. Feel free to make this into an answer so that I can mark it as correct.
Jun
30
asked Voicemail PIN reset - what is a DDN?