FlyerTalk Forums - Apple's new Digital ID

FlyerTalk Forums (https://www.flyertalk.com/forum/index.php)

- Travel Technology (https://www.flyertalk.com/forum/travel-technology-169/)

- - Apple's new Digital ID (https://www.flyertalk.com/forum/travel-technology/2207175-apples-new-digital-id.html)

Quote:

Originally Posted by KRSW (Post 37448614)

Am I the only one who does not want this?

You mean you don't want your identity stolen?

Quote:

Originally Posted by StuckInYYZ (Post 37448658)

You mean you don't want your identity stolen?

I suggest you read about how it works before jumping to conclusions.

https://learn.wallet.apple/id
https://support.apple.com/en-us/118260

I'll probably do it before my next trip.

However, I don't use digital boarding passes so I probably will keep showing my passport.

This would only be tapped at US airports anyways, right?

Quote:

Originally Posted by gfunkdave (Post 37450045)

I suggest you read about how it works before jumping to conclusions.

If it can be made by man, it can be broken by man. ...And Apple certainly has had their issues with (lack of) privacy, employee snooping, and data retention over the years.

From Apple's own website:

For 90 days after you add your ID to Apple Wallet, Apple will collect from your device the attributes that you've agreed to share and retain the information as part of this process.
Before your information leaves your device, it's protected by differential privacy — a privacy-preserving mechanism that allows Apple to gather insights from patterns of groups of data.

Quote:

Originally Posted by gfunkdave (Post 37450045)

I suggest you read about how it works before jumping to conclusions.

https://learn.wallet.apple/id
https://support.apple.com/en-us/118260

I actually have read the second page before... and I still see potential gaps in the process ("host-side"). May just be the wording and my own paranoia, but leaves some questions The first page doesn't really address that for me. It provides a high-level description (which is fine), but doesn't really address some of my concerns.

Quote:

Originally Posted by KRSW (Post 37450406)

If it can be made by man, it can be broken by man. ...And Apple certainly has had their issues with (lack of) privacy, employee snooping, and data retention over the years.

From Apple's own website:

For 90 days after you add your ID to Apple Wallet, Apple will collect from your device the attributes that you've agreed to share and retain the information as part of this process.
Before your information leaves your device, it's protected by differential privacy — a privacy-preserving mechanism that allows Apple to gather insights from patterns of groups of data.

I had to choose whether to share that data with Apple. I chose not to.

But, if someone wants to steal your identity, or identities in general, there are far easier ways to do it that we are all likely exposed to daily.

As for man made = vulnerable to man breaking, you should read up on encryption. We can make equations for encryptions that are essentially unbreakable with current technology. If we ever get to functional quantum computing, that may change. But, that potentially could require a complete reset of digital security and our passport data will likely be low on our concern levels for life. Digital security companies are already engineering in anticipation of that though.

Broadly, you would need:
1. Encrypted data stolen.
2. Encryption broken.
3. That data used for some nefarious activity.

So many easier ways to do this rather than going that direction. Breaking into your home and copying your passport. Anyone handling your passport with Meta glasses recording. Anyone who touches your passport with other technology. A thousand more. Anyway, this doesn’t worry me at all considering our digital fingerprints are all over the place, including right here.

Quote:

Originally Posted by cssmd27 (Post 37641615)

…As for man made = vulnerable to man breaking, you should read up on encryption. We can make equations for encryptions that are essentially unbreakable with current technology. If we ever get to functional quantum computing, that may change. But, that potentially could require a complete reset of digital security and our passport data will likely be low on our concern levels for life. Digital security companies are already engineering in anticipation of that though.

Broadly, you would need:
1. Encrypted data stolen.
2. Encryption broken.
3. That data used for some nefarious activity.

While I agree with your main point (easier ways than breaking the encryption itself, and a relevant xkcd ;)), it isn’t normally the direct encryption/cypher itself which is vulnerable (unless you are using something considered non-secure currently) but rather something in the security stack around it or in the OS / another app which has access to the secured data, or just the password or locking mechanism.
(Remember when Samsung phones could be unlocked with a photograph?)

OTOH, while I don’t have a digital passport loaded on my phone, I do have scans of the physical one in my locally saved files, email inboxes, and who knows where else my phone can access… :o