devnull
|
|
response 183 of 184:
| 
Oct 2 17:19 UTC 2002 |
While you might tell the police that you haven't verified an ID, and thus
you can't be certain of its accuracy, can the police necessarily be trusted
to treat it as if it might be inaccurate? I've certainly heard enough
claims of police fabricating evidence that this bothers me.
And the stolen school ID case that Marcus mentions is an interesting one;
what would have happened if that ID had actually been copied, rather than
the original sent?
I think a check provides a reasonable level of verification, in that if
someone writes a forged check against my account, I will probably notice
and say something to my bank. Knowing where an ID has traveled might be
a bit harder.
I do find myself wondering if providing a phone number and having the treasurer
call that number might be more effective verification. Yes, it would cost
something, but it would cost less than $1 to verify each member, at least
in the US, I would expect. Or, perhaps do both phoning and getting ID.
As for storing the data: I don't have any problem with trusting aruba to not
do anything dishonest, but it's a little bit harder to feel confident that
his computer hasn't been compromised by some sort of malicous software.
And encryption doesn't provide any protection against keystroke recording
software, really. (Well, it might raise the bar far enough to make some
attacks fail.)
|
aruba
|
|
response 184 of 184:
|
Oct 2 19:06 UTC 2002 |
If I had received a copy of a school id instead of an actual id, I probably
wouldn't have worried about it. It turned out that the person in question
was a vandal,though, and in response to that incident I have started
notifying staff by mail whenever I add a new member, in case the new member
is a known vandal. In that case I might get suspicious enough to do
something else toward verifying that the ID came from the person it
identifies.
|