SERVICE: FACEBOOK as the arbiter of identity

http://www.dailymail.co.uk/news/article-1350038/Facebook-bans-Kate-Middleton-imposter-having-royal-brides-namesake.html

I’m not a fake Kate! Facebook bans royal bride’s namesake for being an imposter (but boyfriend Jonathan Ross can keep using his account)
By DAILY MAIL REPORTER
Last updated at 5:52 PM on 24th January 2011

*** begin quote ***

Banned: Kate Middleton has had her Facebook account suspended after being accused of impersonating Prince William’s fiancée

Facebook has accused a woman of being an impostor and suspended her account – because she shares her name with Prince William’s future bride.

Healthcare assistant Kate Middleton, 29, has been locked out since last Thursday after the social network site claimed she had registered under a fake name.

Ironically, Miss Middleton’s partner Jonathan Ross has not been accused of being a fake, despite sharing his name with the television presenter.

*** end quote ***

This is going to get interesting. Especially since FACEBOOK is being touted as the arbiter of identity.

Any competent Information Security practicioner could have predicted that “NAME” would not be a unique identifier. Or, any combination of LNAME, FNAME, LNAME||FNAME, or even if you throw in SUFFIX, TITLE, MI, or NICKNAME.

Sigh!

I learned this lesson in High School — too many moon ago — when the Good Christian Brothers had to revamp their “information systems” — manual on clay tablets — to accommodate identical twins Peter and Paul. It was a hoot. They were the first twins I remember meeting. (You really count Playboy twins as having been “met”. Yeah, I know TMI!)

So you can establish “identity” with any combination of name, email, phone number, or even address.

How does the internet establish identity?

I have, always, thought that the ISPs were absolutely best suited to provide “identification”.

Of course, they never agreed. But when there is a credit card transaction, you actually have something that you can hang your hat on.

It doesn’t assure that you can say it is a “unitary id”. I can, and do have, multiple ISP accounts paid for separately on different credit cards for what would be “multiple identities”.

But, it’s better than depending upon FACEBOOK.

FACEBOOK has even abandoned requiring College email accounts, so even they have realized the flaws in their original design.

What to do? What will they do?

Bottom line: Nobody does nothing! And, the problem goes on.

This is important because IF the ISPs stepped up, we could have a good age differentiator on the internet. But no one cares much! Unless you’re a parent.

# # # # #

Please leave a Reply