Mr Lovenstein | Mastodon | Patreon

The real reason that babies cry at birth.

me too little guy, me too

Who doesn’t ask for an email at signup nowadays? They’re now asking for phone numbers for 2fa.

I guess I'm in the minority when I just refuse to continue signing in.

MFA over SMS is unacceptable and is less secure than MFA over email.

As an aside, I don't see any reason why we couldn't have a system where the combination of someone's name and birth year had to be unique. This would make identifying unique people a snap. Your full name and your birth year would be enough to find your file at the doctor's office, bank, or literally anywhere else.

Even assuming people only choose to pick from the 500 top names, this allows 125 million unique combinations every year following the English trinomial naming convention. It rises to 62.5 billion combinations if one follows the tetranomial Hispanic naming convention. The issue of running out of names or duplicate names would almost never come up. And parents could just reserve a name for their child if they were so bothered.

Because you get issues with the most common last names in pretty much any language. Do you realize how many people out there have the same Last name? And does this system take into account homophones? Because if not, you didn't actually gain any meaningful benefit out of this effort.

It would result in December babies being named 'Xyoabxoanz Smith" or similar.

Edit: just looked it up and did some napkin math. There were 2,369,644 Smiths in the USA alone in 2020. Half of them are women, and lets say about one third of them are in the age where they can have children, which leaves us with around 400k female Smiths in a childbearing age range. US fertility is at around 54 children / 1000 women / year, meaning you would have to assign around 21500 unique first names every year. This is before taking homophones to Smith into account, which will make the issue far worse. The user who said Unix Epoch would be his choice has a better system than this one could ever be.

Ok, name and unix epoch timestamp

"Hey, I just need your unix epoch timestamp real quick to find your file"

It’s pronounced 'John'

Today a site required me to make a username that must not share any of the letters in my name and must have a number in it, with a password that needed six non-consecutive numbers.

Please crawl out of my ass and leave me be, infosec.

You are vastly overestimating the number of people with the same surname. Like, comically overestimating it. The 100 most common surnames only make up 15% of the US population. If anything, 500 surnames is insanely conservative. I should have said something like 2,000 surnames if I wanted to have a serious estimate.

Ehm i looked up the distribution beforehand, see my edit. These things are not distributed evenly - you have a few surnames with an insane amount in relation to any others before even coming to homophones which tilt the balance even harder towards those supercommon surnames. Smith and Brown are the ones you would have real issues if using the suggested unique name schemata.

Edit: There's a whole another issue with this approach. If we do this on a per-country-basis, people moving into foreign countries will have to add the country of birth to everything, for example doctors appointments, for the rest of your life in case of a name collision. Making the system work worldwide will exacerbate the issue with very common surnames, because these are not only common in a single country. (Even in the DACH-area the name Schmid/Schmied/Schmidt and so on, which is simply the german form of Smith, is one of the most common surnames)

True. But I'd still rather have a TOTP setup.

must not share any of the letters in my name and must have a number in it, with a password that needed six non-consecutive numbers

Reminds me of the first time I applied online for an ESTA visa to visit the US: It said that I had to enter my name exactly as it is on my passport but with only the letters of the English alphabet, which is contradictory to the point of impossibility.

On a subsequent trip, I was stuck in Phoenix' Moon Moon (officially Sky Harbor Airport) for several hours and missed my flight because the check in machine couldn't deal with that same non-English letter and there was around a million passengers per employee to help resolve such issues 🤦🏻

It's only 1 more digit than a SSN. Could give everyone a barcode for convenience

The letters thing is horrible. That must be one of the easiest sites to hack. You're reducing the options by a significant amount. Make sure you don't give them any information important to you.

You calculated that 21,500 given names are required annually to make this work.

500 × 500 = 250,000.

i do not know what you are calculating here.

You need 21500 names for the last name "Smith" alone without any homophones messing everything up. There is no second "500".

Edit: unless you mean forcibly reassigning last names. That will go down real smooth mate, go for it lol

Names in English typically have three components. A given name, middle name, and surname. Within any given surname, assuming people choose only to pick from the top 500 for the given names and middle names, that is 500 × 500 combinations.

However, there is in fact more variety in given names. The top 1,000 given names account for 72% of children according to the US Social Security Administration.

So there are actually at least 1 million viable combinations. Certain enough that except for all but the most common names ("John William Smith"), a person's trinomial name is almost already going to be unique.

just gwt 2862378374 factor authentocation and it's all good.

You're correct, but unless they are directly targeted normally the attempts made are all from scans and those scans do not know this information so it shouldn't matter that much.

Sadly I see this happening one day, but of course it will actually be made to work just fine by being autogenerated with the birth and details provided to you the following day through the parents email. Can't wait till a company believes this is absolutely needed and convinces politicians to be on board because hes rich and told them it will protect the children somehow.

And a facebook account for three factor authentication.

Can't get user data stolen if you don't have users

Kid named "Sphinx of black quartz, judge all of my 1,432,765,089 vows!":

Digital Universal Master Bio-metric Access Security Standard.

May not be used for voter identification.

Yeah, it's not an issue until it's an issue. I have no idea what company is doing this, but I wouldn't trust them with a credit card, PII, or almost anything else. I wouldn't put it past them to be storing the password, and anything else, in plaintext.

It’s a bank 😭

No fucking way! That's insane. I'd create a ticket through support if I were you. That is absolutely unacceptable.

That baby aged 20 years in 2 sec

It took me a while to realize that they did a face palm in the forth panel, somehow, I thought it was their nose.

Ah, you are counting middle names. The one i know exactly noone actively using. I have one too! But the amount of people knowing it is around 7, and most of them will already have forgotten it.

This makes everyone's name they have to use in basic situations increase in size by about 50%. I can't see many people being happy about that change.

Are you being obtuse on purpose? Nothing is supposed to change about everyday use of names. This is to make indexing easier by allowing records to be easily searched by formal legal name and birth year, information that is always available and always known to the person whose records are being found.

I am not being obtuse. There are tons of cultures not following your name schema. It makes people moving from one country to another a pain in the ass.

It explains a lot of the usernames as names people are assigning their kids.

I guarantee you the person that was tasked with building the system knew this was unacceptable and was told to get on with it by laters of middle management.

Yeah, and I am a member of one of those other cultures. I maintain my position that you are talking about an overblown problem. And if it becomes a problem, they can pick a fourth name to distinguish it. Immigrants making modifications to their names when they arrive in a new country is not a new phenomenon, and the overwhelming majority of them will not have to make any modifications as well.

Here's a better attack line for you to adopt, since your previous one was bad: How would the proposed system deal with people who had non-unique names before the system was implemented? That is something that would be far more disruptive.