Hacker Read top | best | new | newcomments | leaders | about | bookmarklet login

barrier of entry too high and ease of use too low. it’s like saying we should write letters to avoid the telephone being tapped.


sort by: page size:

It makes it impossible for most organizations to use, not for most people to use.

The biggest reason not to use them is they are slow. It is a waste of our time, not to mention the cost to run them. And then, at least on the US they don't have the right to search me.

>automated

I mean, it's better than nothing, and I suppose you can see whether it's open or closed. But having it automated is an odd choice--it's more expensive and less effective from a privacy standpoint.


The inconvenience of existing services boils down mainly to issues such as ensuring that fraud and terrorism and such are prevented. Society intentionally added those hurdles.

A new technology that has ignored the regulatory structure is not apples to apples. Someone could ignore regulations with current tech and be just as "convenient."


Right, it's just another hurdle in a system that was intentionally designed to not give you the power/access you need to take action.

The problem is that people blindly grant the access needed.

Because they're slow as shit, difficult to configure correctly, and make you more conspicuous to most three-letter agencies.

Collectively "because they're too easy to misuse (and even if used correctly, complicate audits)."

Too many details to communicate and it’s poorly structured (if at all). If you miss something important you’re paying the roundtrip which takes hours/days, if you try to communicate everything it’s too much overhead

Right, “just don’t use that service” rapidly becomes unreasonable when the service is your bank, the DMV, your university’s web portal, etc.

Certainly it's ridiculous. Just offering an alternative to entering with a blank slate device, or a device with all your information on it.

Plus I’ve heard that these make this difficult to use by “legitimate” entities too since they’re non-standard and hence require more legal scrutiny.

1. Trivial to bypass: Check

2. Further degrades the privacy of the general public: Check

Just another day in internet legislation.


I don't like this idea because it sacrifices ease of use in order to make small savings during the development phase. You shouldn't subject your users to extra grate where possible, and I think this is especially true for a government site.

Agreed. It always seemed to me as analogous to the situation whereby one enters some identifying information in a phone prompt, only to have to spell it out again for a CSR. Both are just plain bad design.

Luckily most of the world isn't in the US. I can't even remember a single business that use it around here so easy to avoid.

Right; it's somewhat silly to suggest standard compliance to a service obviously not meant for any sort of serious use, but this irked me too.

I've been very tempted to apply for PreCheck -- it seems like a great deal -- but I find it deeply problematic that the government would create a security screening mechanism so onerous that people gladly hand over their fingerprints to avoid it. The fact that that's even legal incentivizes them to make the normal system as onerous as possible.

I’m really confused by your objection. Can you be specific about what kind of user control you think is missing?

People know they are voluntarily filling out a form and for whom. It just doesn’t go to a server immediately due to lack of signal.

How is this any worse than voluntarily filling out a printed form on paper and putting it into a mailbox to get picked up later? A practice that has been socially accepted for decades?

next

Legal | privacy