<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: More on Public SSNs</title>
	<atom:link href="http://spiresecurity.com/?feed=rss2&#038;p=633" rel="self" type="application/rss+xml" />
	<link>http://spiresecurity.com/?p=633</link>
	<description>Risk and Cybersecurity Analysis</description>
	<lastBuildDate>Wed, 21 Aug 2013 23:28:51 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.5.1</generator>
	<item>
		<title>By: Axel</title>
		<link>http://spiresecurity.com/?p=633&#038;cpage=1#comment-891</link>
		<dc:creator>Axel</dc:creator>
		<pubDate>Thu, 03 Mar 2005 06:57:37 +0000</pubDate>
		<guid isPermaLink="false">http://spiresecurity.com/blog/?p=633#comment-891</guid>
		<description><![CDATA[Actually, there are ways to make identifiers reasonably secure. However, they are not in any way compatible with US culture.
Let me explain: over here we have both mandatory ID cards and mandatory registration with the town administration (so they can always, at least theoretically, know where any given citizen lives). The government issued ID cards and passports are the identificators and since they are reasonably hard to come by and/or fake they can be used pretty effectively. It works - actually, it works very well.

However, I know that this situation gives most US citizens the creeps because they fear Big Brother (and, given the current situation, probably rightfully so). I agree that with the current terrorist craze all across the world any system freshly put in place will probably be used for much more surveillance than is being done over here. We are lucky that the system was put in place long enough ago that it&#039;s established and not over-used or abused.

As usual, YMMV.
]]></description>
		<content:encoded><![CDATA[<p>Actually, there are ways to make identifiers reasonably secure. However, they are not in any way compatible with US culture.<br />
Let me explain: over here we have both mandatory ID cards and mandatory registration with the town administration (so they can always, at least theoretically, know where any given citizen lives). The government issued ID cards and passports are the identificators and since they are reasonably hard to come by and/or fake they can be used pretty effectively. It works &#8211; actually, it works very well.</p>
<p>However, I know that this situation gives most US citizens the creeps because they fear Big Brother (and, given the current situation, probably rightfully so). I agree that with the current terrorist craze all across the world any system freshly put in place will probably be used for much more surveillance than is being done over here. We are lucky that the system was put in place long enough ago that it&#8217;s established and not over-used or abused.</p>
<p>As usual, YMMV.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Stuart Berman</title>
		<link>http://spiresecurity.com/?p=633&#038;cpage=1#comment-890</link>
		<dc:creator>Stuart Berman</dc:creator>
		<pubDate>Tue, 01 Mar 2005 03:34:42 +0000</pubDate>
		<guid isPermaLink="false">http://spiresecurity.com/blog/?p=633#comment-890</guid>
		<description><![CDATA[Seems that I was onto something with Adam (see the post you reference at http://www.emergentchaos.com/archives/000957.html

Adam is against the idea of a definitive identifier that is capable irrefutable evidence.

This leads me to wonder whether his taking issue with your proposal is &#039;on the up and up&#039;.

But I also have to wonder if the only effective way to protect privacy is to promulgate ineffective indentity mechanisms. An alternative to me seems to design into the system checks and balances the keep any one party from abusing the systems (including the government as a party) perhaps through the use of independent and varied international certificate authorities.


]]></description>
		<content:encoded><![CDATA[<p>Seems that I was onto something with Adam (see the post you reference at <a href="http://www.emergentchaos.com/archives/000957.html" rel="nofollow">http://www.emergentchaos.com/archives/000957.html</a></p>
<p>Adam is against the idea of a definitive identifier that is capable irrefutable evidence.</p>
<p>This leads me to wonder whether his taking issue with your proposal is &#8216;on the up and up&#8217;.</p>
<p>But I also have to wonder if the only effective way to protect privacy is to promulgate ineffective indentity mechanisms. An alternative to me seems to design into the system checks and balances the keep any one party from abusing the systems (including the government as a party) perhaps through the use of independent and varied international certificate authorities.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Stuart Berman</title>
		<link>http://spiresecurity.com/?p=633&#038;cpage=1#comment-889</link>
		<dc:creator>Stuart Berman</dc:creator>
		<pubDate>Mon, 28 Feb 2005 17:32:18 +0000</pubDate>
		<guid isPermaLink="false">http://spiresecurity.com/blog/?p=633#comment-889</guid>
		<description><![CDATA[I posted along similar lines on Adam&#039;s blog but using DNA. Would you care to comment?

http://www.emergentchaos.com/archives/000950.html

Sometimes it seems that there is an underlying resistance to have an absolute identifier (which I agree doesn&#039;t need to be secret) and which is somehow equated with a fear of privacy abuse.
]]></description>
		<content:encoded><![CDATA[<p>I posted along similar lines on Adam&#8217;s blog but using DNA. Would you care to comment?</p>
<p><a href="http://www.emergentchaos.com/archives/000950.html" rel="nofollow">http://www.emergentchaos.com/archives/000950.html</a></p>
<p>Sometimes it seems that there is an underlying resistance to have an absolute identifier (which I agree doesn&#8217;t need to be secret) and which is somehow equated with a fear of privacy abuse.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
