Re: It's not an ID card
If your ID is on your phone it means that in reality your phone is your ID then whoever has your phone is you - and that's the case with much existing security theatre.
42414 publicly visible posts • joined 16 Jun 2014
First define identity. Have you given it much thought? Have you ever tried, yourself, to prove someone's identity? Do you even know, positively, that you're the person named on your birth certificate? You were told you were but, given the occasional reports of babies being mixed up in hospitals, even those who told you that were not necessarily sure. And in any case that birth certificate will say it's not evidence of identity. Given that being a UK native is one of the entitlements to work in the UK that this is allegedly all about then not having the ability to trace an individual back to birth puts the whole thing on a shaky foundation. It leaves whoever's issuing these IDs having to believe a lot of what people say in which case Rice Davis applies.
"But I could never in good conscience recommend anything other than an Atomic OS to a noob."
From what's been described here the only use case I can imagine for that is a bleeding edge distro where you might want to roll back to a known good version because essentially it's planning for failed updates. In good conscience I wouldn't recommend anything that wasn't solid, LTS mainstream-based.
Now here's an interesting conflict. Someone of Lord Grade's age - and wealth - doesn't need to worry about future employees so has no need to worry about doing the right thing. Perhaps you should sort things out between yourself & VoT and his accompanying A/C as to which is the best age range for board members. Or perhaps you could get together and come up with different selection criteria.
It's outsourcing part of your security, thus enlarging the attack surface, the enlargement being a conspicuously attractive one to attackers as it offers an entry into so many other companies as well as your own.
Agreed the eggs and basket analogy doesn't work as adding more and more bits to the attack surface would be putting one egg into many baskets.
"It just needs someone who needs to know what a domain name and MX record is, how SMTP works and how to glue all that together."
If you have a decent registrar/MSP supplier there's little of that except setting up mail boxes and addresses when the service is in place. But otherwise, yes. It just nees someone to know that (a) it's possible, (b) it's a really good idea and (c) if you're in business an email address in your company's name looks so much better.
Find a company that can act as registrar, preferably one that can host a mail service for you, get yourself your own domain and have your own mail service, either run by the registrar or, failing that, by another company. If you have problems with your service provider you can simply move to a new provider, keeping your email addresses.
>> useful options ... were disabled/removed because "telemetry showed nobody used them"
This is one of those instances where sloppy use of English leads to sloppy thinking (or possibly the other way around). "Telemetry failed to show them being used" would have been a better way of putting it. I suppose if they'd looked at it that way the response would have been to enforce telemetry harder.
"I don't remember the current plate number"
It takes a year or so for it to become second nature and even though it's coming up to 2 years the other day I had to register the number on a parking meter (the pattern here is LLYYLLL) I put in the first 2 letters of the previous car (actually only second letter changed).
"Can you remember, in what month, of a year several decades ago you opened a bank account ?"
The present account, no. The first account I opened, yes - the month and year I started at University.
I think for most people it's the same with cars - they can remember their first reg and, out of necessity, their current one but very few in between.
"ohh my phone died since it's not charged"
Quite often my situation because I don't use it much.
A couple of days ago SWMBO asked me to make a payment for her. It took a few hours to charge up far enough to handle the bank's MFA and, even connected to power, the charge level started sinking while it was in use. It took until this morning to get it holding charge properly.
In the interim I wondered if it was time to get a new one and as I use very little in the way of apps I looked at the possibility of KaiOS as their store has a calendar that will sync with NextCloud. That got me exposed to lists of phones describes as "for elders" which might be the target for some of the potential users of a veteran's ID.
It seems that the main selling point for these is having WhatsAp loaded and that doesn't work on KaiOS any more so that many of them now have proprietary S/W - good luck with finding a wallet on there if that's what's how it's to be stored. I also found that quite a few of the KaiOS phones don't access the app store any way so there's no chance of getting it on those. There are also Android based phones in that category which don't access PlayStore so it's unlikely they would be any more use.
It means that a digital ID by mobile phone is going to mean the holder buying a smartphone whether they can afford it or not.
Not that I'm ex-service but I suppose I am in the age-group you mention. We've been around long enough to apply critical thinking but I can see how you might misunderstand that as "unaccustomed and often unwilling to engage with the up-to-date technology, less likely to have a computer or smartphone, and ... may be suffering brain deterioration which makes it difficult to learn and understand the necessary tech in any case."
"It's proof of ID."
It isn't. It specifically says it isn't - at least last copy I saw said it wasn't.
The fact that it's necessary for a passport is just silly. It goes back to the fact that proof of ID is a really slippery concept. There's no way that the Passport Agency can determine that you're the same living entity as the child named on the birth certificate, that parents were those named (especially the father!) or even that there was such a child (it would be possible to fraudulently register a home birth, I doubt anyone has been required to take the baby to the registry office as proof).