back to article The EU wants you to log into YouTube using your state-issued ID card

The EU’s enquiry into online plantations platforms will recommend a hands-off approach that will delight Silicon Valley. A draft of the enquiry was leaked this week. The study, part of the EU's Digital Single Market wheeze, also sneaks in one of the EU bureaucrats' top favourite obsessions: national ID cards. You shouldn't be …

Page:

  1. Andy Non Silver badge

    “for every consumer to have a multitude of username and password combinations is not only inconvenient but becomes a security risk.”

    Risk to who?

    1. Anonymous Coward
      Anonymous Coward

      So when the single-point-of-failure ID gets compromised (and it probably will) you are fucked on every internet service you've ever been to.

      I've heard better ideas from people who said "hold my tequila and watch this..."

      1. PNGuinn
        FAIL

        "(and it probably will)"

        "and it inevitably, horribly, certainly will. BIG time"

        There - fixed it for you

    2. Anonymous Coward
      Big Brother

      Re: Risk to who?

      Risk to the Government that one of it's citizens might be doing something on the Internet which can't be tracked?

      If every website in the world has to verify your ID with the database in Big Brother central whenever you visit it, then that is far better than just tracking IP addresses, and even makes Tor useless.

      1. Number6

        Re: Risk to who?

        You'll just create a market for stolen credentials - access the site and it'll show you for free the ID details for a well-known politician, so you can enter those to go further into the site 'legally', where you can go buy a bunch of other ID credentials. Then you can go surf happily.

        If all the websites are required to verify with a central database, then that's one hell of a scalability problem, not least a security one. If it doesn't have to verify then there's no onus on the individual to provide anything identifiable. Also, you can only verify the details provided, or are we all supposed to fit cryptographically-protected fingerprint or iris readers to our PCs, phones and tablets?

      2. John Hughes

        Re: Risk to who?

        Both wrong and right.

        Yes, it's a horrible idea.

        But no, it doesn't need websites to verify your id with a central dabase -- the just check that your certificate has been signed by the Estonian government.

    3. VinceH
      Facepalm

      They're assuming lowest common denominators. If people have multiple log-ins, less sensible ones will adopt the same details across multiple sites.

      Therefore, the obvious solution is to make everyone use the same details across multiple sites.

    4. Efros

      Risk

      That the intelligence services can't easily access your stuff.

    5. Lars Silver badge
      Coat

      "Why? Apparently, “for every consumer to have a multitude of username and password combinations is not only inconvenient but becomes a security risk.”

      I must admit I would like to see the source to that sentence.

      1. Anonymous Coward
        Anonymous Coward

        "I must admit I would like to see the source to that sentence.

        I'd love to see him explain the reasoning on live TV. My guess would be something like "HURRR. DERP. More than one password is difficult to remember, innit?"

        On the subject of the near-inevitable compromise; just imagine that we all went over to this system and your account was compromised. You'd be effectively barred from the internet until it was sorted...which could be years.

  2. Chika
    Big Brother

    Suur Vend jälgib sind

    That is all.

  3. Anonymous Coward
    Anonymous Coward

    To be fair

    Estonia kept it's own culture and language during a long occupation. On the other hand the UK is increasingly happy to take a poor man's copy of what passes for culture in the US without even having to be asked!

    1. asdf

      Re: To be fair

      >Estonia kept it's own culture and language

      Good for them but exactly how did that make a bit of difference to western civilization? Yes perhaps American culture isn't Louis the Sun King but an awful lot of Brit posters on here have told me in the past they loved Family Guy, Bill Hicks etc. Yes the English speaking world culture has largely merged into a giant mass media blob but don't entirely blame us Americans. We did a lot to make your language the Lingua franca the world over (mostly because we can't learn other languages worth a damn lol).

      1. Rich 11

        Re: To be fair

        We did a lot to make your language the Lingua franca the world over

        After World War II, yes, but the groundwork was laid globally over the previous century, with English replacing French as the language of diplomacy and replacing German as the language of science and technology.

        So, late to the fray again... ;-)

      2. cbars Bronze badge
        Meh

        Re: To be fair

        "We did a lot to make your language the Lingua franca the world over"

        Nothing to do with that empire thing then? Well, thank you America!

        ....

        1. asdf

          Re: To be fair

          >Nothing to do with that empire thing then? Well, thank you America!

          Hollywood and mass media did at least as much as the UK Navy. Point granted though.

        2. DropBear

          Re: To be fair

          "We did a lot to make your language the Lingua franca the world over"

          To be fair, he's right. They _did_ invent the internet - and then suddenly there was only _one_ international language everyone speaks for better or worse...

    2. FuzzyWuzzys
      Unhappy

      Re: To be fair

      Sadly generations have been brought up with it and don't know their own culture or haven't been given a chance to know their own culture, thus they will latch on to another. We have thousands of years of culture and heritage yet we latch on to one that barely 250 years old.

      1. Anonymous Coward
        Anonymous Coward

        Re: To be fair

        2500+ years. We're the latest incarnation of the Roman Empire... in spirit, anyway ;)

      2. allthecoolshortnamesweretaken

        Re: To be fair

        By now it is already a part of "our"* culture**. At least for the current generation and the one before that. And certainly the next.

        * and **: Whatever that means anyway... I understand definitionsdmay vary.

  4. Bronek Kozicki

    “for every consumer to have a multitude of username and password combinations is not only inconvenient but becomes a security risk.”

    That's a good one. Presumably using single set of credentials for many unrelated purposes is not a security risk?

  5. Cynical Observer
    Mushroom

    Oh give me strength!

    Actually no - not strength for I might hurt some one! Give me patience!

    “for every consumer to have a multitude of username and password combinations is not only inconvenient but becomes a security risk.”

    He can take my PseudoIdentity when he pries it from my cold dea...

    Actually fuck it - he can have that one I'll have a new one now - and perhaps another tomorrow. It would appear that big bruv does not like the fact that we still crave anonymity and privacy.

    In one breath the EU bashes the US about privacy shields and in the next they try to throw everything wide open.

    Is there any chance that we could possibly have EU bureaucrats who know a little about their allocated area of responsibility - or failing that some who know to keep their mouths shut when burdened with a desire to spout such utter shite.

    1. John Brown (no body) Silver badge
      Joke

      Re: Oh give me strength!

      In one breath the EU bashes the US about privacy shields and in the next they try to throw everything wide open."

      Use a state ID for everything? Including voting records?

      How many Mexicans does it take to change a state ID?

  6. Paul 164

    This is getting a bit too much like China's "Real Name" internet policy. If we continue to exist within the EU, we'll have this sort of crap forced upon us in the future without being able to object to it.

    The reach of Big Brother might just be about to take a huge step too far.

    “For every consumer to have a multitude of username and password combinations is not only inconvenient but becomes a security risk.” The irony here being that instead of having multitudes of logins that the government might not possibly be able to get hold of, your ID details will probably be all accessible to them, so any data in any account linked to the ID is easily snooped on, with a high chance of it being automated!

    The other thing about it is that once a criminal has your ID details, they have ALL of your online accounts!

    1. werdsmith Silver badge

      Faecebook have been demanding ID such as passports and driving license / ID cards. They have started with obvious pseudonyms but will eventually get round to everyone. Having verified IDs on their users increases the value of their snoop haul.

      Nobody with any intelligence has succumbed to their demands as far as I know.

      It is ridiculous that a website that deals in fatuous crap is taking itself so seriously that it thinks it can do this.

      1. PNGuinn
        Mushroom

        Faecebook have been demanding ....

        Not having any desire to lurk within the lower bowels of t'interwebs I wasn't aware of that.

        Once again, farcebook can go farce itself.

        1. Tom 7

          Re: Faecebook have been demanding ....

          I lurk in the bowels of t'interwebs as this is quite an easy way of keeping in touch with friends however should they ask for any useful id data from me I shall be buying a lot of raspberrypi zeros and configuring diaspora on them and handing them out to people I wish to communicate with.

      2. Doctor Syntax Silver badge

        "Faecebook have been demanding ID such as passports and driving license / ID cards."

        Do they?

        I wouldn't know & don't care. If you imagine you need it then you I wouldn't be surprised if you fall for that sort of stuff.

    2. Anonymous Coward
      Anonymous Coward

      @Paul (already a number) 164

      "If we continue to exist within the EU, we'll have this sort of crap forced upon us in the future without being able to object to it." And if we leave wel will get the same thing only faster and politician's will ignore our objections.

      Brextremist's offer us a utopia that doesn't exist.

    3. Tommy Pock

      You might have it forced on you, but how are websites going to prove I'm accessing from Europe?

      1. Mark 85

        If you're in Europe, I would guess that you'll need the ID just to get Internet Access. Sort of like logging in at work just to get network access. Once you've done they, they own your ass since even VPN won't protect you.

      2. Anonymous Coward
        Anonymous Coward

        VPN's/proxy servers will be black listed at ISP's sooner or later.

    4. John Brown (no body) Silver badge

      "This is getting a bit too much like China's "Real Name" internet policy. If we continue to exist within the EU, we'll have this sort of crap forced upon us in the future without being able to object to it."

      I doubt it. There are enough ex-iron curtain countries who will object to it. The unified Germany being one. They are actually quite strong on privacy in many respects.

  7. Anonymous Coward
    Anonymous Coward

    I can't even be bothered to login for stuff like Youtube. If I was forced to create a Google account and login, I'd simply abandon using it.

    1. Adrian 4

      I'm afraid Google are ahead of you. The latest trick is to stick a popup in front of youtube telling you to agree to their privacy policy. This will apparently come up every time you use the site unless you log in (when it can remember that you agreed).

  8. davenewman

    Estonian ID cards tell you who is snooping

    When someone looks up your data connected to your ID card in the Estonian government, it generates a record you can read of who looked it up, and for what purpose.

    1. asdf

      Re: Estonian ID cards tell you who is snooping

      While transparency is very good (but probably easy overridden in the name of state security) I would rather they didn't have the ability at all at least in regards to internet thank you. Yet more reason to use Tor no matter where you live.

    2. Anonymous Custard
      Trollface

      Re: Estonian ID cards tell you who is snooping

      Hmm, just think of the recursive fun you could have look at your own records of viewing your own records. Especially if you automate it with a little scripting... :-)

    3. hplasm
      Big Brother

      Re: Estonian ID cards tell you who is snooping

      "Hmm, all of my records have been accessed by Redacted.T.T Redacted.

      Fancy that!"

    4. fidodogbreath

      Re: Estonian ID cards tell you who is snooping

      "it generates a record you can read of who looked it up, and for what purpose"

      Do you really believe that the state security apparatus would allow a system where all of their snoop requests leave a user-visible audit trail?

    5. This post has been deleted by its author

    6. Havin_it

      Re: Estonian ID cards tell you who is snooping

      Wow. That's unexpected to say the least. I'm not sure whether I think it's the greatest bit of transparency and open governance ever, or a recipe for abuse of some kind that I haven't identified yet. Probably moot as our gov wouldn't give such an idea the time of day, but interesting. Must learn more about this...

    7. Solmyr ibn Wali Barad

      Re: Estonian ID cards tell you who is snooping

      It's not a quality of ID cards as such (which are mostly 2-factor authentication systems and bugger else), but a quality of related services, and most importantly, a quality of legislative framework. If there are laws stating that citizen is entitled to see who's been accessing his/her private records, and on what grounds, it should be a good thing. Provided that these laws are actually followed and enforced. That there are not too many "special" and secret exceptions to the rule. Heh. Getting on the swampy ground already.

      Undergoing criminal investigation/surveillance is obviously one of those exceptions - it's a bit daft to reveal data queries in realtime, as it may tip off the perpetrator. On the other hand it is very dangerous to provide an authority to hide the queries. That'll get abused in no time. Maybe there's a middle ground available. Like delaying their publication for the period of investigation (strictly under judicial oversight) and updating the record afterwards. Just like it's done with the phone tapping - third parties who happen to converse with a person under surveillance will eventually get a notification that their phonecalls from period /.../ were being recorded in connection with a criminal investigation of /.../, and they are entitled to review these materials if they so desire.

      And of course the elephant in the room - secret services and their covert operations. I would be mightily surprised if there was a country under the sun where citizens would be informed of being a 'person of interest' for local spycatchers, even if the interest happened to be erroneous.

      Interestingly, for Estonian ID card it is not mandatory to activate its digital certificates. Or using it for anything else than scraping the ice off the windshield. But it is mandatory to have the card.

      Ref:

      eesti.ee

      id.ee

      1. Havin_it
        Joke

        Re: Estonian ID cards tell you who is snooping

        >id.ee

        How this wasn't already bought up by a disruptive French hot-desking startup, je ne saura jamais.

    8. AndrewDu

      Re: Estonian ID cards tell you who is snooping

      Really? EVERY time it's checked? Even if it's the state snoopers doing the checking?

      If you'll believe that you'll believe anything.

      For instance, you probably think all this stuff is being done for your own good.

      Lenin's phrase about "useful idiots" comes to mind yet again.

  9. Anonymous Coward
    Anonymous Coward

    Risk

    "for every consumer to have a multitude of username and password combinations is not only inconvenient but becomes a security risk."

    And keeping a database of all these details on websites isn't an even bigger risk?

    I look forward to the day when it's possible to administer a slap round the head via the internet every time a bureaucrat proposes something particularly stupid.

    1. PNGuinn
      Thumb Up

      Re: Risk

      "I look forward to the day when it's possible to administer a slap round the head via the internet every time a bureaucrat proposes something particularly stupid."

      If you can that useful facility added, why stop at a slap round the head? Think of what fun we could all have with the adslingers et al.

    2. John Brown (no body) Silver badge

      Re: Risk

      "I look forward to the day when it's possible to administer a slap round the head via the internet every time a bureaucrat proposes something particularly stupid."

      An "Internet of Things" robot arm with webcam on every bureaucrats desk!

  10. asdf

    You let Estonia in?

    >Estonian robo-commissioner Andrus Ansip

    Estonia is the Mississippi of the EU (Hungary is the Alabama, geographical distance aside). Just took a look at the median income of that country and they are not first world. Scraping the bottom of the barrel letting them in and now paying the price.

    1. Anonymous Coward
      Anonymous Coward

      Re: You let Estonia in?

      Ask yourself (and Orlowski) why the NATO cyber centre is in Tallin... Probably the donkey has a smartcard and knows how to use it, unlike the US were getting rid of magstripes looks an hard task...

      That said it's ok for me to use an electronic id to access government services (Italy has something alike in its National Services Card), but I would never use it to access Gmail...

Page:

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Other stories you might like