Slashdot Mirror
Supermarket Loyalty Cards Vs National ID Cards
john.wingfield writes "The BBC is running a story on a speech David Blunkett, the British Home Secretary, has given on ID cards and supermarket loyalty cards. He criticises the data protection arrangements for the loyalty cards whilst simultaneously (hypocritically?) promoting his own national ID card scheme, which is exempt from the Data Protection Act 1998. See also the UK Information Commissioner's (data protection and freedom of information watchdog) concerns about the ID card scheme."
The cards were not a panacea for everything but could help stop terrorists using multiple identities Because everyone KNOWS that terrorists can't fake ID cards! Hell, that's probably why GB is the terrorist haven that it is now, because they don't have a national ID card!
Geez, I thought that only America had to deal with this kind of insane rationalization. And no, I don't have and never will have a "loyalty" (i.e. "We want to track you") card.
I avoid those grocery store cards. I will go out of my way to find the stores that don't use them. Luckily the little mom&pop store down the street doesn't use them, so that's where I usually go.
Guess what? While their small size means their selection is limited, the overall prices are about the same as the larger stores that use the nasty little cards.
Even if the prices were higher, I'd still go there. Everyone in the store knows the location of every item. Can't find something? Ask the next kid in an apron, and they'll take you right to it.
sigs, as if you care.
as for the supermarket loyalty cards, they give the card, no one says you have to give them your address, they call me Mr Goatse at one store, one clerk figured it out and started laughing at my name. You can easily grab a handful of them, use one for every day of the week.
"Do you have a Kiroger card?"
'Nope'
"well...here's the card and the application" She swiped it, and gave me the blank app, to be filled out later.
The card works, and I just shredded the application.
So..just take the blank application, and say "I'll fill it out later".
I reluctantly applied for one a few years ago, since the discounts meant I'd save over $100/year. In reality, I was off by a factor of two, saving close to $200/yr. off of the store's artificially inflated prices.
There are actually two types of discount cards: the first requires a real name and address and proof of identity. This one affords the user check cashing privileges. Since I do my banking business at an actual bank, I opted for the second, which doesn't require a real identity. Being a properly paranoid Slashbot who doesn't want The Powers That Be to track my aluminum foil purchasing habits (for the hats, you see), I gave my name as John Doe, 1234 Main St., Anytown, USA.
I'd been using the card for over five years before I realized that the cashier sees your name come up on her terminal when you use the card. About a month ago, the cashier asked me if my name was really "John Doe".
"Yeah, and it's a real bitch when I check into a hotel," I replied.
About a year after I got the card, the supermarket (Stop and Shop in Massachusetts) launched a web site that integrated your purchasing data. You'd log in by entering the serial number on the card and get a history of your purchases and discounts, along with "healthy" alternatives (which was pretty brain dead, offering mayonnaise as a "healthy" alternative to mustard).
The beauty part was that after you logged in you were presented with the option of password protecting your data. However, that meant that anyone who hadn't logged in had their purchase data unprotected (albeit with no identity attached). I tested this by entering numbers at random and viewing the purchase histories of random strangers ("Grape soda and rice cakes? What were you thinking?" "Oooh! KY Warming Jelly! Party on, dude!"). I was tempted to enter passwords for some of these but I didn't.
The store pulled the web site after a couple of weeks, citing "security concerns".
Gotta go. I have a craving for grape soda and rice cakes.
k.
"In spite of everything, I still believe that people are really good at heart." - Anne Frank
As far as I'm concerned, it's not a privacy issue unless they fuck it up. They can already track you by SSN, state ID, or whatever. It would only really be a privacy issue if they put RFID stuff in your card, and this enabled unintended people to scan the thing and get useful information. That would open the system up to abuse by criminals and stores alike.
But the real problem with national ID cards is that they have negative security value. They will be trusted more than ID cards and social security numbers, and they will be only one piece of information to forge or steal. The government databases connected with the ID cards will be vulnerable and unreliable, and more so than the SSN databases because of their size (i.e., more chances to create a privacy problem by fucking it up). They'll be a bigger pain in the neck for people who lose them, and the risks of identity theft will be monstrous.
It would be very difficult to get something on this scale right, and it would be worse than the current system of state IDs, kludgy as that is. On top of that, the project would be horrendously expensive.
There would also certainly be ways for an insider to ruin someone's life, even more than there are today, by fiddling with these databases.
If there were national ID cards from the beginning, the system might be better than what we see today (I personally think it would be simpler but probably more vulnerable to abuse). But I think that instituting them now would be a mistake.
Schneier has a good essay on this here.
I hereby place the above post in the public domain.