Scan your passport to join our social network.

[daliarezk@mastodon.social]

@aral @lain I don't have a passport

[goog@gabboman.xyz]

@crv@akkoma.kruhlovo.xyz @aral@mastodon.ar.al @mynameistillian@plush.city

tylko na fedi takie kwiatki

[crv@akkoma.kruhlovo.xyz]

@goog @aral @mynameistillian tumuLec fedi meta

[freci@piaille.fr]

@aral on a somewhat related note LinkedIn wants me to upload my ID to be able to close my account because I do not agree with uploading my ID to continue to use it… and you need an unblocked account to contact the DPO to exercise your rights which implies… uploading the ID. Kind of a catch-22

[eregloch@mastodon.coffee]

@CauseOfBSOD

@aral
You are missing rule 2: the server is untrustworthy. In networking any system can be malignant or hacked and become malignant. Assuming otherwise is failure in the waiting.

(Rule 3: use open source and invite the world to find vulnerabilities)

[loremipsum@fedia.social]

@aral @lain Lsocial lol

[hannes99@mastodon.social]

@aral thank you for speaking up! Also see @_elena's post: https://mastodon.social/@_elena/116537351402947996

@lain

[causeofbsod@wetdry.world]

@EregLoch @aral seems i need to make my argument explicit as youve clearly misunderstood

We know that the client is not guaranteed to be trustworthy from the perspective of the server. We assume that the identity verification is done on the client only as stated. Per this assumption that means that the result of the verification is sent back as some form of yes/no (coupled with a name to be matched on the server, in case of success) or similar, without any other data that would allow the verification to be repeated on the server being sent back. As the client may be untrustworthy, it may manipulate the verification process or just send back modified data from a recorded successful verification with the attackers preferred values. Therefore, we can conclude that it is trivially possible to create fake accounts unless the assumption is false.

Whether or not the server is trustworthy is irrelevant to this attack.

[causeofbsod@wetdry.world]

@EregLoch If you have an actual counterargument (i.e. not another non sequitur) then now is the time to present it

[shadowdancer@mstdn.social]

@aral
Look. No matter who's running it, or where it's hosted, if it's run for profit, you're the product. It's as simple as that.
Just stay the fuck away from it.
@lain

[timwardcam@c.im]

@freci @aral Same with Twitter. So my account there still exists but has been abandoned for some years.

[blogdiva@mastodon.social]

@freci @aral class action lawsuit. they do it on purpose because they know individuals won't sue them.

[aral@mastodon.ar.al]

@TimWardCam @freci Oh, I reported Twitter to the Irish DPO as they don’t actually delete accounts regardless.

Went nowhere.

CC @noybeu

[aral@mastodon.ar.al]

@Zeb@merovingian.club @lain You and your antisemitic account can fuck right off. Go! Shoo!

[mohamadsohiel@mastodon.social]

@aral @lain
I might not be able to get my passport because of the positive test results. Can I get European passports while I'm here in #Gaza?

[kranzkrone@quasselkopf.de]

@aral
Look, this is what a modern scam for the good of the people should look like. 🤯
@lain @wraith

#EU #europe #W #socialNetwork #identityVerification #surveillance #privacy #humanRights #democracy #data

[holdenweb@freeradical.zone]

@freci @aral That’s the problem with systems designed by lazy idiots. Nothing but the happy paths appear to have received much (sometimes any) thought.

[holdenweb@freeradical.zone]

@aral @TimWardCam @freci @noybeu They don’t?
The bastards won’t let me see it! And they certainly don’t include it in search results!

[khaleer@mastodon.gamedev.place]

@hsza @lain @aral @vonKordke why are you arguing with a troll lol

[vonkordke@social.vivaldi.net]

@khaleer @hsza @lain @aral yea, it's waste of time