告诉 HN：美国公民的身份/投票权面临的威胁来自私人服务
1 分•作者: m3047•大约 2 个月前
现在，关于选民身份证明的真正风险来自私营企业
由于 HN 帖子的字符限制，本文已被压缩。
[...]
现在的情况是，私营实体正在管理数据库并运营政府合同使用的自动化裁决服务。“但这都是些小事，行政方面的事情。” 也许吧，但看看它们在“杀伤链”中的位置。大约在 2026 年 5 月 15 日前后的一周，我被这些“行政事务”拒绝了在美国邮局预约的“特权”，而且没有特别的理由认为政府自己运营这项服务，完全依赖于他们控制的计算和数据。所以，这就是啄木鸟摧毁文明的方式；或者至少是我们的代议制民主。没有上诉。在服务时也没有明确的拒绝。
以下是它在现实生活中的运作方式：
美国联邦政府运营 Login.Gov，这是一个为联邦机构及其客户提供的单点登录服务。我访问了 Login.Gov，将另一个联邦机构的 Web 服务与我现有的帐户关联起来。该机构希望重新验证我的身份，因此有说明要求提供图片 ID 上的身份识别码和其他一些信息，然后他们会向我发送一份文件，让我打印出来，上面有一个条形码，然后我被指示将其带到邮局进行裁决，以及内裤或其他东西。哦，还有一件事。在我们给你打印那份文件之前，你能给我们一个电话号码吗？它必须是我们知道的……但我们不会告诉你任何关于我们希望你告诉我们的那个号码的信息。这发生在收集了填充表格所需的所有个人身份信息之后。我输入了三个我使用或付费的电话号码，但没有一个匹配。“再试一次！”
没有电话号码匹配，因此无法完成在邮局预约以实际裁决我的身份的工作。
我被剥夺了权利，与我的政府断绝了联系。
地球上难道没有人曾经收到过垃圾邮件，上面写着“你赢了 100 美元，你只需要完成这项调查就可以收到它”吗？如果你傻到去参加调查，它永远不会结束，它只会不断地问问题。永远。（并且在后台使用你的电脑做其他事情。如果它把你深深地吸入沉没成本谬误，它可能会要求你告诉它它正在考虑的电话号码、你狗的名字、你奶奶的同性恋摩托车手的名字……）我想说“你玩够了，是时候坦白了”，但没有人可以对它说。好吧，我说了。
通常情况下，如果消费者信息被用来拒绝某些具有财务影响的合同或授权，法律要求发出拒绝的实体提供他们所依赖的服务的身份。此外，法律要求服务提供商允许你审查他们拥有的关于你的信息。但没有拒绝；而且该决定是否具有财务影响是有争议的。毫不意外且令人失望的是，Login.Gov 没有提供此信息。由于无法审查这些信息，我只能说这些电话号码“据称”未被识别。事实是，根据几次互动，Login.Gov 的客户支持人员不知道数据提供商或处理者是谁（但他们会急于编造听起来合理的说法）。
没有上诉或补救措施。
[...]
我很乐意与 Login.Gov 或 GSAIG 中有实际权力的人进一步讨论这个问题。
规范的完整原始版本在这里：http://consulting.m3047.net/dubai-letters/voter-id-industry-capture.html 我在这里尽可能完整地发布它，因为我欢迎讨论/提问，而且我不希望它“消失”。
查看原文
THE REAL RISK AROUND VOTER ID NOW COMES FROM PRIVATE ENTERPRISE<p>This post has been condensed due to character limitations on HN posts.<p>[...]<p>What's happening is that private entities are curating the databases and operating automated adjudication services which the government contracts to utilize. "But it's little things, administrative things." Yeah maybe, but look where they are in the kill chain. During approximately the week surrounding 15-May-2026 I was denied the "privilege" of scheduling an appointment at the United States Post Office by one of these "administrative things" and there is no particular reason to think that the government runs this service themselves, relying entirely on compute and data which they control. So THIS is how the woodpecker destroys civilization; or at least our representative democracy. There is no appeal. There is no overt denial at the time of service either.<p>Here's how it works in real life:<p>The United States federal government operates Login.Gov, a single signon service for federal agencies and their customers. I went to Login.Gov to associate an additional federal agency's web service with my existing account. This agency wanted to reverify my identity, so there were instructions to supply the identification code on a picture ID and some other information and then they'd send me a document to print out with a barcode on it and then I was instructed to take that to the Post Office where it would be adjudicated, and underpants or something. Oh but one more thing. Before we give you that document to print out, can you give us a phone number? It has to be one we know about... but we're not going to tell you anything about the one we want you to tell us about. This occurs AFTER all personally identifying information required to populate the form has been collected. I entered the three phone numbers which I use or pay for, and none of them matched. "Try again!"<p>No phone number match, therefore no ability to complete the work to make an appointment at the Post Office for the actual adjudication of my id.<p>I have been disenfranchised, severed from my government.<p>Is there anyone on the planet who hasn't received a spam at some point saying "You have won $100, you just need to complete this survey to receive it." If you're foolish enough to take the survey, it never ends it just keeps asking questions. Forever. (And uses your computer to do other things in the background. If it suckas you deep enough into sunk cost fallacy, it'll probably ask you to tell it the phone number it's thinking about, your dog's name, your grandma's gay biker name...) I'd like to say "you've had your fun, it's time to come clean" but there's nobody to say it to. Oh well, I said it.<p>Normally if consumer information is utilized to deny some contract or authorization with financial implications, the law requires the entity which issued the denial to provide the identity of the service they relied on. Furthermore the law requires the service provider to allow you to review the information concerning you which they have on file. But there was no denial; and whether the decision has financial impact is debatable. Unsurprisingly and disappointingly Login.Gov does not provide this information. Lacking the ability to review the information, I can only say that the phone numbers are ALLEGEDLY unrecognized. The truth is, based on several interactions, that Login.Gov customer support doesn't know who the data provider(s) or processors are (but they'll eagerly make up plausible sounding things).<p>There is no appeal or redress.<p>[...]<p>I would be happy to discuss this further with somebody at Login.Gov or GSAIG who has actual authority.<p>Canonical full original version is here: http://consulting.m3047.net/dubai-letters/voter-id-industry-capture.html I've posted it here as completely as possible because I welcome discussion / questions and I don't want it to "disappear".