Comment by endisneigh
4 years ago
> Citation needed, I very much doubt Google would comply without a search warrant. For financial activity, it depends whether the application requires authentication, or simply funds. For authentication see things like DECO, where you could prove some personal information about yourself without actually revealing that information (SSN for example). Obviously that is piggy backing off of a legacy system; it's up to the application to say what data they need.
There's plenty of evidence out there for this (https://www.jamesmadison.org/the-governments-secret-google-s...). Furthermore Google has a contact to official subpoena them if you want (https://support.google.com/faqs/answer/6151275?hl=en). For mild things you could just report abuse and escalate - https://support.google.com/mail/contact/abuse?hl=en
Again, you're not answering the question. What does the web administrator do if someone is creating fake accounts using a private key? If you're going to use third party systems you don't need blockchain to begin with.
> You are completely wrong that everyone currently using MetaMask is capable of hosting their own web server. Securely hosting a web server is orders of magnitude harder than securely using MetaMask.
You're addressing a claim I didn't make. I'm not sayin everyone using metamask can host their own server, I'm saying someone who isn't using a centralized entity anywhere can do it, by definition. Hosting a web server is trivial in 2022. You can literally setup a server by going to digitalocean.com right now, paying $5, and spinning up a one-click machine. Administrating it at scale is obviously more difficult, but it's trivial to setup a little oAuth server if you want.
> There's plenty of evidence out there for this
You are completely moving the goalposts, I thought we were talking about internet services trying to prevent spam..not government snooping and subpoenas. Are you claiming the government's ability to collect data about you from Google is a good thing? I'm pretty confused.
> Again, you're not answering the question. What does the web administrator do if someone is creating fake accounts using a private key? If you're going to use third party systems you don't need blockchain to begin with.
You are not answering the question either, is this web administrator the government? Are they going to serve Google with a subpoena?
> I'm not sayin everyone using metamask can host their own server, I'm saying someone who isn't using a centralized entity anywhere can do it, by definition.
Ok fair enough, I'm not saying anybody will be using "no centralized entity anywhere", not totally sure what your point is. Using a centralized entity for A is equivalent to using it for A+B?
you don't really make any sense. sorry. I already addressed your points. the government point is not really relevant. the point is that a web admin has recourse with Google and/or government depending on the nature of the activity.
good luck
I just don't see how "ask Google / the government to tell me the identities of its customers" could be seen as a positive of the current system for 99% of cases. Especially given that Google likely won't even have the information, especially for an account created to commit serious crimes warranting NSA snooping or legal intervention. Just like creating a private key, you don't need a SSN or a passport to create a Google account, or most other email providers.
I feel like you are intentionally ignoring the dangers of SSO tied to a company that can unilaterally delete your account, and has little incentive to unlock it or even let you plead your case.
Cheers.
3 replies →