Digital ID -Plan für das britische Risiko, „ein enormes Hacking -Ziel“ zu schaffen, warnt Experte
https://www.theguardian.com/uk-news/2025/sep/26/keir-starmers-plan-for-digital-ids-risks-creating-an-enormous-hacking-target
Von F0urLeafCl0ver
Digital ID -Plan für das britische Risiko, „ein enormes Hacking -Ziel“ zu schaffen, warnt Experte
https://www.theguardian.com/uk-news/2025/sep/26/keir-starmers-plan-for-digital-ids-risks-creating-an-enormous-hacking-target
Von F0urLeafCl0ver
16 Kommentare
Isn’t this something many countries have? What has happened there?
And right now it’s much easier to commit identity fraud because of the lack of a national ID card. It’s always a trade off. At least this time it’s a government database and not private companies.
Why hack when they can simply pay our government for access as a subcontractor.
That’s like saying the Bank of England gold reserve creates „an emormous theft target“
Yeah, it’s true, but it doesn’t mean we should therefore automatically not do it
Who will HMG contract this job to ? Please not use Crapita or TCS !!
Its not like all our data is online anyway.. HMRC, NHS, GOV.uk, your local council and any social media.
It’s gonna be challenged in the courts on privacy and data security grounds. We all know Starmer loves his rule of law. What in the world is he gonna do if the court strikes it down? He wouldn’t dare pass an act of parliament to get around the established law would he? Interesting times ahead.
Regardless, he’s not gonna have it in place by the end of the parliament and even if he does, every single other party out there has already said it’ll be dead and buried on day one. I honestly don’t know why he is bothering.
With any system like this, there is always a risk. What I want to know is what is the business continuity and DR plan for a system of this scale that will be used on a daily basis by millions (when they inevitably move beyond it being a glorified NI card with a photo on it)? Ransom protection must be top of the list. Proper encryption of everything at rest and in transit. Full audit logging of every data access, offsite and offline backups of everything in case of an encryption attack. Multiple hosting locations with different hosting providers and network infrastructure.
Otherwise it’s a national level JLR or Marks and Spencer waiting to happen.
Cost cost cost. And it will solve no real problems.
My guess is several billions that will be paid to an overseas providers like MS, Amazon or Oracle to provide the Datacentre scale and availability.
The sheer scale of potential exposure that they have dropped on people with the online safety act and now digital id plans are mind-blowing.
And it isn’t like these things are stored in an NSA/GCHQ style fortress, it’s all outsourced to unknown 3rd parties… Granted we don’t know the Brit pass back end yet but I’m sure security of the data is an after thought & passing „We update Norton 360 every month.“ Is probably enough to satisfy the government tick box.
itll all come crashing down one day, and no doubt the government will blame 3rd parties for it, and probably launch some multi-million quid investigations and decide the 3rd party that long since changed its leadership was at fault but nothing will come of it.
The media companies are complicit in sowing discontent in the country at this point.
This fella’s argument hinges on an “if”. Though I agree that the announcement should have had more information to it
Finland, Sweden, and Norway all have digital ids, and they don’t seem to have a problem.
Also in these countries you need a special bank id to do anything official.
There’s always a risk. Properly implemented, this will both dramatically reduce the attack surface (because you don’t need so many different systems covering identification) and make it irrelevant if someone steals your details, because they won’t be able to steal your identity anyway.
Welcome Social Credit 😍
On a serious note though the effects if this will show up years later, they will interconnect this with OSA, they will start to track everything tou do on social media, UK already wants to convert to CBDC around 2029 so it will look like this;
Your Digital ID will be connected to every account of yours, when you say something government doesnt like your account will get flagged, then if you say it again they can chip it down from your bank accounts, they can control digital currencies however they want, they can print millions of it, delete millions of it. It holds no value.
Also if you think UK government or any other government wouldn’t do such thing, please look back in history and learn what fascists can do.
Such a weird reaction to this.
My driver’s licence, passport and tax info are all online.
That’s literally more than a digital ID will have.
I wouldn’t mind but we now need id to vote. I Always have my phone, I would be so much happier with an online driver’s license in Google wallet like in some US states Vs the card I have.
So personally I’m happy. Security is always an issue but no more today than yesterday.
Wildly speculative article. Nothing has been announced about „how“.