Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

As others have alluded to, it's trivial to photoshop an ID with different info and photo. You could use a stolen credit card and a modified ID to make a reservation.

That said, I'm more concerned with "email a scanned photo ID". Are they seriously having users send scanned IDs through email? Email is completely insecure and should NEVER be used for sensitive information such as an ID. IDs should be treated in the same manner as credit cards. Would you ever ask a customer to email you scans of their credit card? You'd lose your merchant account faster than you can say law suit.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: