Thread on middle names. As we discovered at CAcert, there is now one form of names., and attempts to regularise it into one clean system are doomed to be unclean.
Some random things about names. It’s possible to have two first names, or a name with two names in it.
In Spain, everyone has two surnames, one from either side. Also in Spain, up until recent times, first names were religious, and all women were named Maria of something.
For example, Maria de La Mar or Maria del Sol, which shortens to Marisol. So not only multiple words but multiple forms.
In Greece, when your name is written on legal documents, it includes your parentage, sometimes only your father, other times both.
When names are written on government issued identity documents there is no requirement that they be the same. So depending on the ‘breeder documents’ used, you can have distinct variations.
Typically in many parts of the world, women on marriage change their surname. But they don’t necessarily lose their other one; this is useful for maintaining two personalities apart, and separate finances when divorcing.
Men sometimes do this too.
Immigrants in the last century into the new world would meet with border officials who would rewrite their old name into some approximation within the new language. And thus, two names.
Same happens with Asian cultures - passports can show two different names, one in romanised.
We call this the One True Name fallacy. There is no one true name. And if there is no one true name, what is an acceptable name?
An acceptable name springs from use, and recognition by the community, in many and different ways- we’ve all known people who go by different names.
An authority-issued document is only a local stamping - the passport is a document to pass borders, and is unreliable beyond that.
The Driver Licence is a permit to drive, and is unreliable beyond that.
Why? Because that’s all the issuer is practically interested in.
This is why anglo identity cards don’t work so well, and European-style identity cards work very well: Anglo reliance on identity documents gets into a mess when the documents differ, whereas in Europe they simply grab the ID number, and ignore the name (or any differences).
Historically, Anglo world is hung up on WWII propaganda about how bad demands for papers are, as shown in countless movies. But for authorities to deal with the confusion in documents, they demand more, and the outcome is worse - inconvenient, unreliable, overbearing.
Without understanding the cultural element in identity systems, many engineers are at sea, and they sink when they meet an assumption trivially broken by strange people doing daft things.
Eg, one of the ways in which CA/PKI/x509 web browsing sunk was the obsession in the anglo world with the One True Name. American style engineers asserted that if they could present a certificate with the name in it, that would be what the users needed.
At one level, which name? The corporation name? or the domain name… Both might be important, depending on ones PoV.
But at a deeper level, users wanted to know the site was reliable. And they never got that, bc certs stopped at the name.
Why not go further? Bc CAs told browsers what they needed, and browsers didn’t understand any better. By the time it was shown to be of low efficacy, it was too late, and the CAs were in the trap of not being able to revise the narrative.
So, many people think x509 couldn’t do what was required. But actually, it was the infrastructure around x509 that couldn’t do what was required: the CAs, the browsers, the contracts, the servers… all locked into a deadly embrace of low performance.
In summary, beware the fallacy of the One True Name. If you’re obsessed about the name of someone, you’re probably on the wrong track.
• • •
Missing some Tweet in this thread? You can try to
force a refresh
Everyone’s writing about Tether at the moment, so why not join in the noise.
They announced that about half of their reserves are held in commercial paper, which is a short term loan to some company, good for the money, on some future date. So far so good. 1/12
The rosy picture: a buyer of Tether turns up with $$$, and purchases in good faith the same amount of USDT. The system then places that $$$ into its reserves. The $$$ are then lent to a company in exchange for commercial paper. Which is paid back in due course with $$$. 2/12
While good accounting, I see 3 potential flaws. (1) Will the company pay back? Of course, some might not. Let’s say 2% do not- this is covered as Tether actually sports more reserves than issued units of USDT, and the commercial paper pays a competitive rate of interest. 3/12
ORF (media) in Austria report that 5 eyes Intelligence Community have convinced EU Council to secretly resolve for a total EU backdoor on end-to-end encryption.
As a term, PKI suffers the same problem as ‘identity’ - it means different things to different people. Consequently, as a sector, it’s totally unreliable as a term. It can mean...
Infrastructure around PKs to make the PK do or mean something. OR
Identity system based on PKI, implying use of private key is proof of person. Or...
@Steve_Lockstep@joerosato@csuwildcat X.509-based PKI which locks in a particular technology *and* a set of meanings/doings which don’t work *and* a set of companies that extract rents for little benefit, which extraction works a treat.
So, 1st order question is, what is this person meaning when using the term PKI?
Here is the response if the website strategic hyphen culture dot org is included in the Tweet:
Here’s the part I wanted to highlight, which is important!
💥 "The prize that America truly seeks is to seize for itself over the coming decades, all global standards in leading-edge technology, and to deny them to China.” 👈 👆
As we move closer to November, it’s somewhat non-controversial to say this USA election is the most divisive in living memory. I at least can’t recall one as divisive. 1/34
Reasons are obvious but I want to point out one reason that isn’t obvious, it’s the “NEVER TALK ABOUT…” rule.
Here’s the flaw: SAC is a flag that says signature verification and RMA (Relationship Management Application) authorisation and verification was successful.
Let me say that more clearly: SAC says verification is done. 2/
The flaw is this: the SAC isn’t the authorisation - it’s a flag saying there was an auth. Which means, in short SWIFT messages do not carry any role-based authorisations.
They might be authorised, but it’s like they slapped a sticker on to say that.