YOTI id system - anyone used it?

[peterb]

I had vaguely heard about Yoti, then happened upon a banner advert on HEXUS.

It is an id verification system. Now those with copper plated, securely grounded, faraday cage tin foil hats need read no further as with all id verification systems, you need to share and verify id with the system, and I admit I am quite wary about these systems. (Although not as wary as some )

But this one is British, the data is stored in the UK and is encrypted end to end so I have created an account.

Its currently being trialled by some financial institutions, some nightclubs are using it to verify age and identity, and some supermarkets are looking at it to verify age for age restricted products (not a problem I have )

But it can also be used to prove your id to another person, either face to face or remotely.

Is anyone else using it?

(For anyone interested in finding out more https://www.yoti.com )

[Zak33]

i have had to remove my foil head attire recently......

but I've not used it no

[CAT-THE-FIFTH]

Waits for security breech to appear in the news.

[Smudger]

I had vaguely heard about Yoti, then happened upon a banner advert on HEXUS.

It is an id verification system. Now those with copper plated, securely grounded, faraday cage tin foil hats need read no further as with all id verification systems, you need to share and verify id with the system, and I admit I am quite wary about these systems. (Although not as wary as some )

Who could you possibly mean?

[Smudger]

Is this all so you can continue viewing mucky sites when the new rules come in next month?

[CAT-THE-FIFTH]

Is this all so you can continue viewing mucky sites when the new rules come in next month?

Nah,our forward looking government has commissioned the foreign company,Pornhub to sort that all out(I am not actually joking).

[Ttaskmaster]

Could be interesting... especially once people figure out how to hack it or spoof it.

So regarding the mucky sites - what are people without a credit card supposed to do?

[peterb]

Is this all so you can continue viewing mucky sites when the new rules come in next month?

I would have thought that id verification would be the last thing viewers of 'mucky' sites would need - but that is outside my sphere of knowledge!

Waits for security breech to appear in the news.

Looking at the details and the organisations that are trialling it, it would seem that they are taking security pretty seriously. The data itself is encrypted, and is pseudo randomised as well, before encryption, and the decryption keys are held on the access device.

https://www.yoti.com/personal/security/

[CAT-THE-FIFTH]

Could be interesting... especially once people figure out how to hack it or spoof it.

So regarding the mucky sites - what are people without a credit card supposed to do?

Go to the newsagents!!

[Saracen]

..... Now those with copper plated, securely grounded, faraday cage tin foil hats need read no further as with all id verification systems, you need to share and verify id with the system, and I admit I am quite wary about these systems. (Although not as wary as some )

But this one is British, the data is stored in the UK and is encrypted end to end so I have created an account.

Its currently being trialled by some financial institutions, some nightclubs are using it to verify age and identity, and some supermarkets are looking at it to verify age for age restricted products (not a problem I have )

....

Hmmm. Who might you be thinking of? Clearly not me, since my hat is a tinfoil/gold amalgam, not one of those amateur things.


No, I've not used it, This, obviously, will be a huge shock.


On a more serious note, what might genuinely be a shock is that I can clearly see a use for and even need for such a service, and as time goes on, increasingly so.

Being UK-based and subject to UK law is clearly a good start. Being a young (less than 4 years) company run by people I've never heard of and know nothing about, less so.

For me to consider such a company, product or service I would want to know, essentially, three things :-

- what GOOD reason do I have for using such a service?
- does this service meet those needs?
- do I trust this company?

Currently, my answers would be .... I don't, irrelevant, and no reason not to but that isn't adequate to justify doing so, respectively.

[peterb]

Hmmm. Who might you be thinking of? Clearly not me, since my hat is a tinfoil/gold amalgam, not one of those amateur things.


No, I've not used it, This, obviously, will be a huge shock.


On a more serious note, what might genuinely be a shock is that I can clearly see a use for and even need for such a service, and as time goes on, increasingly so.

Being UK-based and subject to UK law is clearly a good start. Being a young (less than 4 years) company run by people I've never heard of and know nothing about, less so.

For me to consider such a company, product or service I would want to know, essentially, three things :-

- what GOOD reason do I have for using such a service?
- does this service meet those needs?
- do I trust this company?

Currently, my answers would be .... I don't, irrelevant, and no reason not to but that isn't adequate to justify doing so, respectively.

And the problem for the individual is how to decide whether to trust any company that you divulge private data to. Its the organisations that do trust it (with there resources to verify the claims) that might lead to greater trust among individuals. Their website is offering business solutions so I would expect this to become more mainstream if the technology lives up to the promise.

http://www.zdnet.com/article/yoti-ai...martphone-app/

( Oh yes, it also includes a password manager, although only for Chrome and Firefox at the moment))

[Zak33]

mucky sites? limited access?

crap.... how am I gonna read this?
http://dirtrunning.org.uk/dirt-half/

[Ttaskmaster]

Go to the newsagents!!

And do what?
They don't stock magazines any more. A friend was hospitalised a few years back and I absolutely scoured Reading looking for such things, as it would have really brightened his day... not a single place did magazines any more. The Internet has completely killed off that corner of the market.

[Smudger]

Nah,our forward looking government has commissioned the foreign company,Pornhub to sort that all out(I am not actually joking).

They're also going to log which sites you use the verification for. Which should scupper the donkeys and dwarf sites. Allegedly.

But you know, it's all keeping us safe. By keeping all of the blackmailable info in one place. That would never, ever be hacked. Ever. Scout's honour.

[Saracen]

And the problem for the individual is how to decide whether to trust any company that you divulge private data to. Its the organisations that do trust it (with there resources to verify the claims) that might lead to greater trust among individuals. Their website is offering business solutions so I would expect this to become more mainstream if the technology lives up to the promise.

http://www.zdnet.com/article/yoti-ai...martphone-app/

( Oh yes, it also includes a password manager, although only for Chrome and Firefox at the moment))

That is indeed the, or rather, "a" question for each individual.

I would argue another is to evaluate the value you put on any data you intend to share, and the level of risk in the event that either the conpany isn't robust/reliable, or even if it is, but gets hacked anyway.

And to balance that against the benefit gained from such an ID system.

Personally, because I value my privacy very highly, the benefit would have to be significant and my view of the risk low before I'd do it. A lot depends on what data is to be shared. My address, and even phone number, are important, but far less so thsn bank details, investment records, tax returns, medical records, business reports and analyses and a myriad more.

As my default mode is to protect everything, I'd need to be a lot more reassured than I currently am before I'd divulge even name and address to a service like this, but that no doubt reflects a set of value judgments about privacy that are somewhat stricter than most peopled.

In part, my attitude is that the ONLY time we have any real control over our data is before we divulge it for the first time. Once something is "out there" just once, you've lost control permanently. The ONLY way to be sure you've maximised privacy is to release absolutely nothing that isn't absolutely necessary to do. So for me, a service like this needs an utterly compelling need before I'd consider it.