485
Australian Government gets a taste of what everyday people have to deal with in terms of data breaches as Prime Minister Anthony Albanese's mobile phone number released online (www.abc.net.au)
submitted 1 year ago by to c/technology@lemmy.world
48 comments fedilink hide all child comments
 

What are the chances this will lead to online data privacy reform and corporate accountability for PII for all? or just...some?

you are viewing a single comment's thread
view the rest of the comments
[–] 17 points 1 year ago (14 children)

You still have to have some kind of unique identifier. What do you propose phone numbers are replaced with because I can't think of anything that isn't basically just the same but with a different flavour or actually is actively worse.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 14 child comments
    •
  • [–] 3 points 1 year ago (2 children)

    Sure you can have a unique identifier. That’s not the issue. The issue is that anyone can contact you via your phone number! This is not a problem with chat apps where people need permission to add you to their contact list. Why not have a system like that?

    Same goes for credit cards. They should need to ask for permission to charge your credit card. Merely knowing your credit card info should not be enough.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 7 points 1 year ago* (10 children)

    Your device and account credentials are unique enough to identify you on the carrier-level, SIM/eSIM as well. Ultimately, every time you share your contact info, it should be a unique code (QR would be convenient enough) generated by your cell provider. If it's ever leaked, you just notify your carrier to burn it, and give the contact a new unique code. No two people should be given the same contact, and all of the contacts are simply correlated to your device by the carrier. Additionally, when sharing contacts via QR, they could be modified on the device-level to include e2e encryption keys, thus further securing the transmitted information, not at the trust-me-bro carrier level, but at the user-verifiable device level. If the carrier gets hacked, reset the identifiers, associate the new one in your text app to keep conversations going, and move on like nothing happened. You'll still be better off than if your phone number was leaked. It's not perfect, but it'd be a hell of a lot more secure than what we have now.

    In other words: What if a billion dollar company made Signal, but with cell towers, and not as good?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 10 child comments
    •
  • [–] 17 points 1 year ago (7 children)

    QR would be convenient enough

    My friend, that is not convenient. Phone numbers need to be memorable, and need to be transmittable offline without relying on technology. Old people use phones...

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 7 child comments
    •
  • [–] -2 points 1 year ago (6 children)

    Phone numbers need to be memorable. A disposable unique contact does not. You can print a QR code, easily save it to a device, transmit it via nearly anything with a connectible screen. Of course you would want to launch it with alongside phone numbers, not in place of it, but this is what should be the next 'innovation' in cellular communication.
    That said, it does pose the problem of contacting someone with a phone that isn't your own, perhaps from jail. I'm sure they would never suggest putting an emergency contact chip in your hand for your own health and safety. No government would ever suggest something so silly. /s

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] 6 points 1 year ago (5 children)

    If I want to contact a business though I know I need to dial 555-123-4568, and I know that because there was a little jingle at the end of the advert. But if they just flash up a QR code then do I just have to wait until the ad is on TV again? There's a reason they don't really put QR codes on TV but they do on YouTube where you can pause it, and queue up the video whenever you wanted.

    It's not an awful idea but it needs a bit of refinement. That needs to be some kind of way to associate a human readable identifier to the contact.

    We use QR codes all of the time for websites but eventually that still boils down to a URL in plain text.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 0 points 1 year ago (2 children)

    Businesses are a separate use case. Phone companies already handle separate use cases, where they use very short memorable numbers for specific purposes. They just need something similar, whether it's keeping phone numbers, or using something slightly different. Probably some sort of simple alias.

    It's the phone companies that need to innovate, and the solution isn't very hard.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 4 points 1 year ago* (1 child)

    You say the solution isn't very hard but what you are suggesting is basically just obfuscating phone numbers. Surely the actual solution is to just make spam calling illegal.

    Oh and just cut Indias data connection, because those guys are never going to fix their scam call centre problem because the government and police are corrupt.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 2 points 1 year ago

    You could argue that cryptography is nothing but a type of obfuscation. I was trying to explain things so that the very average person could understand it.

    People don't stop doing things just because you make it illegal. You even know this because you mentioned India. However people actually do stop when you make it nearly impossible.

  • permalink
  • fedilink
  • source
  • parent
  • [–] -1 points 1 year ago

    The solution is simple then. Allow businesses to maintain a phone number for people who watch ads on TV. Not like businesses getting spam calls is that big an issue. Though I'm certain they'd be very enthusiastic to have the unique contact QR feature available for tracking in web ads.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 2 points 1 year ago

    In Tox you have a code on the end of the Tox address. One can do similar, but have different codes for different levels of acceptance. Default - ignore. Some other code - add to the list of callers without notification. Some other - with notification. Some other - for SMS, but not calls, or the other way around. And so on.

    The problem with things being memorable exists, yes. Computers can make calls, meaning that there's no solution. A good secret required to call someone can't be memorable.

  • permalink
  • fedilink
  • source
  • parent