Skip to content

Instantly share code, notes, and snippets.

@pmocek
Last active May 24, 2018 14:48
Show Gist options
  • Save pmocek/8a4163ee0d1ce402d27352787d89bad0 to your computer and use it in GitHub Desktop.
Save pmocek/8a4163ee0d1ce402d27352787d89bad0 to your computer and use it in GitHub Desktop.
Short-term car rental business accepts image of face, but not actual face, as identification
Following are quotes from an e-mail exchange between Car2go representatives
Alexus, Sarah, and Jessica, and Car2go customer Phil Mocek between
2017-10-19 and 2017-10-24:
C2> It looks like your driver's license information is not up-to-date in our
C2> system, so we had to lock your account temporarily.
PM> Your system's information is outdated. My Washington driver license will
PM> expire in September of 2019.
C2> You may update your driver's license on your account from home.
PM> May I stop in at an office and show it to somebody? If I sent out this
PM> information to anybody who asked for it, then they could effectively
PM> impersonate me. I mean, really, if Car2Go had images like you request,
PM> then some other organization who wanted to verify my license status by the
PM> same means could be easily fooled by your staff.
PM>
PM> Or, put another way: If I send you an image of my driver license and of
PM> the same person on the card, how will you know that it's me on the other
PM> end and not somebody from, say, ReachNow?
C2> We ask that you please bring two forms of identification when you visit
C2> the local office.
PM> Do I understand correctly that you will accept a digital image of a driver
PM> license and headshot that appear to be mine and me--remotely transmitted
PM> from anyone who claims to be me--as proof that I am licensed to drive, but
PM> if I show up in person to show you proof of my license to drive, you'll
PM> want *two* forms of identification--my driver license card and something
PM> else--in addition to the live image of my face? What is the reasoning
PM> behind that policy?
C2> The selfie is considered the second form of your ID when you update
C2> through the website.
PM> Will you consider my actual face to be my second form of ID if I update
PM> you in person with my driver license card?
C2> You can bring the card that you have on file as the second form of ID.
PM> So remotely, someone can use a picture of my face as a second form of
PM> ID--in addition to an image of my driver license. But in person, you will
PM> not accept in addition to my driver license *my actual face*? Seriously?
PM>
PM> You are actually telling me that you will trust anyone who claims to be me
PM> to send in images of my face and of my driver license card as an accurate
PM> indication that I am licensed to [drive], but if I show up in person with
PM> the actual card (rather than a remotely-transmitted image of it) and with
PM> my actual face (rather than a remotely-transmitted image of my face), you
PM> will demand more proof of me than you would of said random remote person?
PM> How in the world is this sensible?
C2> I was hoping to speak with you over the phone to clarify a few things and
C2> hopefully, more effectively address your concerns.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment