this post was submitted on 24 Oct 2024
764 points (99.0% liked)

Technology

59589 readers
3332 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] MoonlightFox@lemmy.world 8 points 1 month ago (25 children)

Everyone in Norway has one, well like 99,99% or something. It is a requirement for banking.

It is used for all banking services in Norway. When you get your own bank account at 13 or something you also get BankID.

[–] 01189998819991197253@infosec.pub 3 points 4 weeks ago (11 children)

Right. But Facebook shouldn't have that number.

[–] Leavingoldhabits@lemmy.world 11 points 4 weeks ago (10 children)

As far as I understand, BankID actually abstracts away those numbers. FB have to use an API, and more or less receive a true or false on their query.

They recently opened up for using BankID to prove your age at bars and such, and I think they only get to know if person is old enough or not. Not even a number, just old enough.

[–] 01189998819991197253@infosec.pub -1 points 4 weeks ago (1 children)

If truly masked, it might be fine. But the site has to gather that data in order to append it to the API call and it, therefore, mean that they could keep it (even of they actually may not). There are ways around it, such as with session tokens passed between the social media's page and the bank's official API page. But, knowing fb, they won't use the latter.

[–] InverseParallax@lemmy.world 2 points 4 weeks ago (1 children)

Obviously not, it's like Google authentication , you log into a site, doesn't mean the site can see your Gmail.

It depends how it's implemented. If they implement correctly, then you're right. But not all do. That's a fact that bit me in the arse once, and I no longer use those features for lack of trust.

load more comments (8 replies)
load more comments (8 replies)
load more comments (21 replies)