Last active
May 24, 2018 14:48
-
-
Save pmocek/8a4163ee0d1ce402d27352787d89bad0 to your computer and use it in GitHub Desktop.
Short-term car rental business accepts image of face, but not actual face, as identification
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Following are quotes from an e-mail exchange between Car2go representatives | |
Alexus, Sarah, and Jessica, and Car2go customer Phil Mocek between | |
2017-10-19 and 2017-10-24: | |
C2> It looks like your driver's license information is not up-to-date in our | |
C2> system, so we had to lock your account temporarily. | |
PM> Your system's information is outdated. My Washington driver license will | |
PM> expire in September of 2019. | |
C2> You may update your driver's license on your account from home. | |
PM> May I stop in at an office and show it to somebody? If I sent out this | |
PM> information to anybody who asked for it, then they could effectively | |
PM> impersonate me. I mean, really, if Car2Go had images like you request, | |
PM> then some other organization who wanted to verify my license status by the | |
PM> same means could be easily fooled by your staff. | |
PM> | |
PM> Or, put another way: If I send you an image of my driver license and of | |
PM> the same person on the card, how will you know that it's me on the other | |
PM> end and not somebody from, say, ReachNow? | |
C2> We ask that you please bring two forms of identification when you visit | |
C2> the local office. | |
PM> Do I understand correctly that you will accept a digital image of a driver | |
PM> license and headshot that appear to be mine and me--remotely transmitted | |
PM> from anyone who claims to be me--as proof that I am licensed to drive, but | |
PM> if I show up in person to show you proof of my license to drive, you'll | |
PM> want *two* forms of identification--my driver license card and something | |
PM> else--in addition to the live image of my face? What is the reasoning | |
PM> behind that policy? | |
C2> The selfie is considered the second form of your ID when you update | |
C2> through the website. | |
PM> Will you consider my actual face to be my second form of ID if I update | |
PM> you in person with my driver license card? | |
C2> You can bring the card that you have on file as the second form of ID. | |
PM> So remotely, someone can use a picture of my face as a second form of | |
PM> ID--in addition to an image of my driver license. But in person, you will | |
PM> not accept in addition to my driver license *my actual face*? Seriously? | |
PM> | |
PM> You are actually telling me that you will trust anyone who claims to be me | |
PM> to send in images of my face and of my driver license card as an accurate | |
PM> indication that I am licensed to [drive], but if I show up in person with | |
PM> the actual card (rather than a remotely-transmitted image of it) and with | |
PM> my actual face (rather than a remotely-transmitted image of my face), you | |
PM> will demand more proof of me than you would of said random remote person? | |
PM> How in the world is this sensible? | |
C2> I was hoping to speak with you over the phone to clarify a few things and | |
C2> hopefully, more effectively address your concerns. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment