I've just signed the campaign: No to online surveillance: Scrap plans for a state-run Digital ID card in Ireland
#MastoDaoine #MyGovID #DigitalWallet #Surveillance #DigitalSurveillance #IEPol
I've just signed the campaign: No to online surveillance: Scrap plans for a state-run Digital ID card in Ireland
#MastoDaoine #MyGovID #DigitalWallet #Surveillance #DigitalSurveillance #IEPol
Irish data protection knowers! Can you help? While there have been concerns (and fines) over the PSC, are there data protection worries in relation to MyGovID, or how it's used?
(Trying to search for this, but keep getting PSC-specific info.)
#DigitalID: for government, by government, web-capable and standards-based.
I think that has a nice ring to it, and it's achievable (https://bne.social/@andrew/113506044045409357).
"For government" implies no social media age verification shenanigans.
My opinion is my own of course but I intend to bring this to EFA and like-minded organisations.
Serious question: could #myGov become part of #DigitalID scheme and be merged with #myID, with all of the capabilities of myGov retained (website + multiple 2FA methods)? To explain a bit, both myGov and myID are currently identity providers. myID is an app that can be used as an IdP for government services like ABRS. myGov is a website and app that can be used as an IdP for ATO and Centrelink among others. myGov supports multiple 2FA methods like SMS, Passkeys and (perhaps confusingly) myID. myID itself doesn't appear to have any MFA methods but is pinned to a device with one-off verification for that to happen. Why not bring myGov into the Digital ID fold, and merge most of myID's capabilities into myGov? Since myID is also being used as MFA for myGov I would rename the myID app to "myGov MFA" so it could continue to be used for that purpose. Passkeys could be suggested for people who use the myGov app so they're not using the same device for password and second factor. #auspol
I received a message today from the #Australian Government's #myGovID service announcing that they are soon changing the name to #myID. "It will have a new name and look, but you'll continue to use it in the same way."
There is zero mention of whether the website domain (my.gov.au) will remain as it is or be supplemented.
Apparently, as of today, myid.au is for sale ...
I'm convinced that one of our main cybersecurity challenges is how poorly thought through official communications are.
I sent feedback to Services Australia to support TOTP (Authenticator) in #myGov.
The problem at the moment is that myGov supports SMS MFA, which is prone to SMS hijacking/SIM swapping, or #myGovID app for MFA which requires a Google or Apple account to install and use.
In order to submit my tax return securely I would need to buy a new phone and create a Google account (my current phone uses LineageOS).
This year I'll be submitting a paper tax return 🤦♂️
Digital ID and the need for open platforms
https://roffey.au/2024/mygovid.html
This is my first blog post! Still new to it and my writing style is probably a little stiff.
Australia's new myGovID gives favourable treatment to Apple and Google and promotes digital lock-in to those providers.
Australians will be given the choice of convenience and digital rights, but not both.
Digital ID can absolutely be better than this.
#DigitalID #myGovID #EFA #ElectronicFrontiersAustralia #Apple #Google