Elektrine lite

← Feed

@analogist@social.ridetrans.it

2024-05-02 18:56 UTC

@briankrebs@infosec.exchange isn’t login.gov supposed to perform this exact task of providing SSO for government services?? Why are they contracting auth when they have in-house capabilities? Which congresscritters are enriching their tech friends? Edit: found this article from 2 years ago - nothing seem to have changed since then https://www.theverge.com/2022/2/22/22946108/irs-login-gov-id-me-tax-season-facial-recognition

Replies (3)

  • @ampersine@mastodon.online 2024-05-02 22:19

    @briankrebs@infosec.exchange @analogist@social.ridetrans.it But how are private companies supposed to funnel obscene amounts of tax dollars to their owners if you just let the government perform a valuable public service‽‽ That sounds like SoCiaLISm to me!

    Open ##5286410

  • @nemoest@mastodon.online 2024-05-03 01:04

    @analogist@social.ridetrans.it @briankrebs@infosec.exchange this could have something to do with it: https://fedscoop.com/gsa-login-gov-watchdog-report/

    Open ##5286411

  • @analogist@social.ridetrans.it @briankrebs@infosec.exchange Login . gov is not certified to handle identity verification and authentication at a sufficiently high enough (NIST IAL2) to service many of the government use cases. While they do leverage the .gov TLD, they are a wrapper for non-government organizations.

    Open ##5286412