Please create an account to participate in the Slashdot moderation system

 



Forgot your password?
typodupeerror
×
United States Government

New York Launches Mobile Driver's Licenses (theverge.com) 65

New York has launched its mobile ID program, "giving residents the option to digitize their driver's license or non-driver ID," reports The Verge. From the report: Beginning today, the New York Mobile ID app is available from Apple's App Store and Google Play. The app can be used for identity verification at airports. A physical license, permit, or non-driver ID is required to activate a mobile ID; you'll need to take a photo of the front and back with your phone during the enrollment process. The news was announced during a media briefing at LaGuardia Airport on Tuesday that included New York's and Transportation Security Administration federal security director Robert Duffy, among other speakers. Their pitch is that mobile IDs "will revolutionize the way New Yorkers protect their identities and will significantly enhance the way they get through security at airports across the nation." State officials are also emphasizing that it's a voluntary option meant for convenience.

"When you offer your mobile ID to TSA or anyone else who accepts it, you are in full control of sharing that information. They can only see the information they request to see," Schroeder said. "If you only need to prove your age, you can withhold other information that a verifier doesn't need to see." The app is designed so that your phone remains in your possession at all times -- you should never freely hand a device over to law enforcement -- and shows a QR code that can be scanned to verify your identity. Any changes to your license status such as renewals or suspensions are automatically pushed to the mobile version, and the digital ID also mirrors data like whether you're an organ donor.

For now, acceptance of mobile IDs by businesses (and the police) is completely voluntary -- and there's no deadline in place for compliance -- so it's definitely too soon to start leaving your physical one at home. But bars and other small businesses can start accepting them immediately if they install the state's verifier app. The New York Mobile ID app can be used "at nearly 30 participating airports across the country including all terminals at LaGuardia and John F. Kennedy airports," according to a press release from Governor Kathy Hochul.
New York joins a small list of states that have rolled out mobile driver's licenses, including Arizona, Colorado, Delaware, Georgia, Florida, Iowa, Louisiana, Maryland, Mississippi, Missouri, and Utah.

New York Launches Mobile Driver's Licenses

Comments Filter:
  • by Anonymous Coward

    pro: the bar doesn't get to know how tall you are

    con: your ID just left a footprint as being scanned at bar X (gay bar?) on 2024-06-11 23:04 in a data point that will live forever, in data sets that may or may not (jk, it's the second) actually stay within a single office forever (this is before even considering breaches/leaks)

    invisible dominoes are incomprehensible to most, "If I didn't see it, it never happened."

    there will be use cases for this but i'll let the septembers beta it

    • many bars already use a scanning gun for id verification. same thing except at least you (supposedly) have more control here. at the very least, you don't have less...

      and let me make a general observation. y'know, i'm not referring to you, but... in general a lot of the people who "care" about "privacy" have just been duped into it by a scary article but haven't actually thought about it. i bet many people with concerns like this (not you, i'm talking statistically) already pay with plastic (or even an e-pl

      • Everyone has to work and deal with their job requirements and other pressures that might put awkward pressure on privacy concerns. That doesn't mean fighting for privacy isn't a meritorious activity. Privacy enhances commerce by building trust, encouraging innovation, allowing for regulatory compliance (GDPR/CCPA), and fostering a competitive market environment. When it comes to liberty & freedom, privacy protects individual autonomy, supports free expression and democratic participation, and guards aga
  • by codebase7 ( 9682010 ) on Tuesday June 11, 2024 @07:36PM (#64542015)
    So how long until it's mandatory to pay some cell service provider to be able to have a "valid" / "legitimate" ID?
    How long until having unreliable phone service means you get hauled off to booking for driving "without" a valid license?
    How long until Zoomers demand the death of physical ID cards because they consider them "old" and "obsolete"?
    • How long until having unreliable phone service means you get hauled off to booking for driving "without" a valid license?

      I'm pretty sure the data is stored on the phone, hence taking the photos of the ID.

    • Re: (Score:2, Troll)

      So how long until it's mandatory to pay some cell service provider to be able to have a "valid" / "legitimate" ID?

      How long until having unreliable phone service means you get hauled off to booking for driving "without" a valid license?

      How long until Zoomers demand the death of physical ID cards because they consider them "old" and "obsolete"?

      You sure do fantasize about being persecuted.

      Say it with me slowly

      No one is coming for your physical drivers license

      • by kmoser ( 1469707 )

        No one is coming for your physical drivers license

        Maybe not now. Maybe not ever. But one thing is as certain as death and taxes: organizations and individuals will make it less and less convenient to use a physical drivers license, and will prioritize those who go digital. Don't want to go digital, Citizen? No problem, just get on this separate line, where we will make you wait longer, treat you with disdain, and maybe even offer you a lower tier of service.

      • by Entrope ( 68843 )

        If you like your physical driver's license, you can keep your physical driver's license, amirite?

      • by Anonymous Coward

        Just like no one is coming for cash payers?

        Surely you aren't hinging on the pedantic "one" in there. No one thinks the above/your line is being perpetrated by a single supergenius individual bogeyman with a curly villain mustache.

        Such a bogeyman would be a strawman for you to knock down. Heh.

    • You're asking a lot of questions that rely heavily on assumptions and ignorance.

      a) Why is mandatory payment to a cell provider not already a fixed assumption in the world. It's 2024. You are socially crippled without a mobile service, unable to do simple things such as internet banking to say nothing of actually functioning professionally and socially.

      b) Why do you assume any connectivity is required to generate the QR code in question? Europe has just shown that it's not. We didn't require internet access

    • by AmiMoJo ( 196126 )

      Google Wallet has had something like this for UK COVID health records for a few years now. When travelling you might need to prove you are vaccinated, for example. It works completely offline.

      Actually all the Google Wallet stuff does. Store cards and credit card payments.

      In principle there is no reason why this driver's licence would need an internet connection, so if it does you should be suspicious.

    • Meanwhile, your dystopian future is already here in Norway:
      You need a Norwegian bank account to exist as an adult person.
      There are no paper/card IDs. All you get is a single number (that is used instead of ID-number, social security number etc.).
      Hauled off to booking doesn't happen because the cops get all your data from your license plate.
    • by mjwx ( 966435 )

      So how long until it's mandatory to pay some cell service provider to be able to have a "valid" / "legitimate" ID?
      How long until having unreliable phone service means you get hauled off to booking for driving "without" a valid license?
      How long until Zoomers demand the death of physical ID cards because they consider them "old" and "obsolete"?

      About 5 minutes after the paperless office and other death predictions come true. Which is to say shortly after the 22nd of June, Twenty Twenty-never.

      Loads of things hang around simply because they're simple and useful. It's nice to have options, I'm not one of those "I don't even have a wallet" hipsters (yeah, I'm fine with my plastic photocard license and yes, a coin pocket is a requirement on a new wallet for me) but I bear no ill will towards those who don't want to carry one.

      So calm down and stop

  • by PubJeezy ( 10299395 ) on Tuesday June 11, 2024 @07:39PM (#64542023)
    The consultants who wrote this plan are fully aware that it will lead to a massive increase in identity theft. There's no question of if this plan will hurt hard-working New Yorkers, it's just a question of when and how much worse.

    Every aspect of this plan, from it's inception to the contracts it's creating, are evidence of public corruption.' This system bad.

    Our cell phones cannot be secured. Every manufacturer is failing to keep up with no-click exploits and here's the government telling us to put even more personal information on these devices.

    https://www.apple.com/newsroom... [apple.com]

    3 years ago Apple came forward and told the courts they were unable to secure their phones because of groups like NSO. Well that tech is way more prevalent than it was back then.

    Phones using MacOS or Android cannot be secured. My ID in my wallet is completely secure. This is a gross idea.
    • Just because it's a physical license then you must have lived one hell of a sheltered life and I think I'm genuinely envious of you...

      The problem with something like this is that unless you're rich enough that you're not afraid of cops (and that's very very rich) then this would be something that's both stupid and dangerous because you don't want to piss the guy with the gun off when he pulls you over especially when we are constantly telling those guys with guns that they're a dangerous criminals out to
    • by AmiMoJo ( 196126 )

      Our cell phones cannot be secured. Every manufacturer is failing to keep up with no-click exploits and here's the government telling us to put even more personal information on these devices.

      And yet banks seem to trust them more than their own bank cards, when it comes to making contactless payments.

      In the UK you get your money back if there are fraudulent transactions because your phone was hacked through no fault of your own, so they aren't just ignoring the cost and letting the customer pay it.

      The reality is that Android and even iOS phones are quite secure. The biometrics alone are more than most thieves can get past. Malware somehow doesn't create hundred million device botnets of phones e

    • The consultants who wrote this plan are fully aware that it will lead to a massive increase in identity theft. There's no question of if this plan will hurt hard-working New Yorkers, it's just a question of when and how much worse.

      Gee, I wonder who might have wanted unreliable and easily gamed IDs ...

  • Their pitch is that mobile IDs "will revolutionize the way New Yorkers protect their identities and will significantly enhance the way they get through security at airports across the nation."

    Two things immediately caught my attention.

    1 - Airports can be a pain, but with my state driver's license and a TSA number, I get through security easily and efficiently, never had a problem other than how long the line is. I cannot see how this idea improves anything.

    2 - On the other hand, taking a secure personal hard-copy form of ID and turning it digital is a big risk. Anything digital online or in the cloud is at risk. See comments above me - they stated the issue much more eloquently or with greate

  • Full control. (Score:4, Insightful)

    by fahrbot-bot ( 874524 ) on Tuesday June 11, 2024 @08:08PM (#64542071)

    "When you offer your mobile ID to TSA or anyone else who accepts it, you are in full control of sharing that information. They can only see the information they request to see," ...

    I imagine the TSA wants to see everything to get an accurate match/check. Any assertion of your "full control" will be met with, "Do you want to fly today?"

    ... you should never freely hand a device over to law enforcement ...

    Good advice.

    • Re:Full control. (Score:5, Interesting)

      by 93 Escort Wagon ( 326346 ) on Tuesday June 11, 2024 @08:37PM (#64542133)

      The way this is described seems to indicate your phone has to be unlocked to use it - which also means this isn't integrated with the Wallet apps from Apple and Google. Which in turn means New York almost certainly rolled their own security rather than rely on the people at Apple and Google, who arguably know device security the best.

      If I lived in New York, I don't think I'd want to use this as it currently exists.

      • The way this is described seems to indicate your phone has to be unlocked to use it - which also means this isn't integrated with the Wallet apps from Apple and Google. Which in turn means New York almost certainly rolled their own security rather than rely on the people at Apple and Google, who arguably know device security the best.

        If the phone has to be unlocked, then their advice to not hand your device over to LEO is especially appropriate.

        If I lived in New York, I don't think I'd want to use this as it currently exists.

        Agreed.

    • Oh you can fly today without showing identification? News to me.

      • Oh you can fly today without showing identification? News to me.

        (a) Not sure what you're getting at as that's not what I was implying -- I was implying that you would *not* get to fly w/o showing full identification and (b) yes, actually you *may* be able to fly w/o identification if your identity can be confirmed by other means. From Acceptable Identification at the TSA Checkpoint [tsa.gov]:

        Forgot Your ID?
        In the event you arrive at the airport without valid identification, because it is lost or at home, you may still be allowed to fly. The TSA officer may ask you to complete an identity verification process which includes collecting information such as your name, current address, and other personal information to confirm your identity. If your identity is confirmed, you will be allowed to enter the screening checkpoint. You will be subject to additional screening, to include a patdown and screening of carry-on property.

        You will not be allowed to enter the security checkpoint if your identity cannot be confirmed, you choose to not provide proper identification or you decline to cooperate with the identity verification process.

        Other sources note that, "You might be asked to sign a Certification of Identity [papersplease.org] form (TSA Form 415) with your name and address."

        • by kmoser ( 1469707 )

          In the event you arrive at the airport without valid identification, because it is lost or at home, you may still be allowed to fly.

          This hinges on the use of the word "may", which I would guarantee is written to mean (and will be interpreted by the courts as) "might" (as in maybe), not "have permission to". In other words, TSA reserves the right to refuse travel if you don't have ID.

        • by hawk ( 1151 )

          The first time I used a Lyft to get to the airport, I didn't scoop up my wallet while using my phone.

          A thorough search of my luggage, a scan of me for gunpowder, and a search for what I *did* have.

          They couldn't use my photo of my license.

          We ended up using a car club magazine addressed to me, and a checkbook with my name, as conservator.

          The best of all things, apparently, is any federally issued document with your SS on it.

  • The app is published by IDEMIA Group, not by the state (they seem to publish every stateâ(TM)s app) and when it asks for your phone number for registration it gives a sample number with a New Jersey area code. Iâ(TM)m not doubting its authenticity, but it raises unnecessary red flags.
  • I don't get it. Just because it's on my phone doesn't make it mobile. I still have to carry something around...

  • This smells super unfishy. All the fact checkers agree. It's safe and effective and everybody should install the app.

    What could go wrong when the state's code is running on your phone and in every business?

    NY has such an enviable security record and wouldn't deign to pillage users' data beyond its legal purview (plus whatever's granted by the TOS that nobody reads) or expose anybody to hacking via shoddy code or pure negligence.
  • Let's put private companies in charge of your government-issued ID. What could go wrong?

  • by Daina.0 ( 7328506 ) on Wednesday June 12, 2024 @12:36AM (#64542465)

    Even if they get everything right and it works perfectly, you're relying on other apps, the mobile OS, the mobile hardware, and a battery. Any one of those fail then you have nothing. Yesterday I had my phone refuse to put an app in the background. A week ago it completely froze. This stuff hadn't happened before--maybe it's the hardware failing, maybe it's an updated app that's messing things up, or something else.

    It's kind of like having fingerprint-enabled gun. When you need it, if the battery dies, the OS freezes, etc. then you're dead.

    No thanks. I can't see any benefit to a mobile ID. Plus the downsides are too great.

    • by Asgard ( 60200 )

      Fortunately there are very few situations where failure to present a DL results in instant death.

  • >"you are in full control of sharing that information. They can only see the information they request to see," Schroeder said. "If you only need to prove your age, you can withhold other information that a verifier doesn't need to see."

    I have been doing that for many, many years. I put a sticker over the barcodes. I don't allow anyone to "scan" my ID in a machine-readable way, because they don't need that. It has caused a slight amount of inconvenience a few times, but I would escalate it to managemen

  • All I know is that whenever I go the the airport, there is a gaggle of fliers off to the side trying to get their phones to work to show their check-ins and boarding passes.

  • I hate carrying around that big, bulky driver's license
  • I'm calling it now:

    1. The QR code just contains a URL to verify the ID.
    2. The URL contains the license number or other identifying information lightly obfuscated by base64.
    3. Scanning the QR code in the app will take you to a page that contains *all* the user's info, including photograph.
    4. To protect your privacy you can only access the URL via the app. Looking it up in a browser will get you an error message.
    5. Unless you change the browser's User-Agent to match the app's, in which case you have the keys to the kingd

If God had a beard, he'd be a UNIX programmer.

Working...