Saturday, March 28, 2026

Digital IDs are insecure and can be hacked


Digital IDs are insecure and can be hacked



My response to Prof Norman Fenton after hearing about how X made it increasingly difficult under the guise of “security,” and then comically insecure involving a threatening letter and his needing to establish and use a previously unknown email account that honestly could have been anyone, was this:

I think we can take Norman’s contentions at the end of his post a logical step further.

With several more controlled and less resistant countries having already adopted the WEF/UN digital ID, and countries like the UK, Australia, New Zealand and Canada all marching in lockstep to a digital ID dystopian future, how can governments even pretend these “all eggs in one basket” solutions are remotely safe, secure or protected?

Governments in countries like Sweden failed to secure their digital ID source code (see ‘Sweden’s E-Government Source Code Leaked After ByteToBreach Breaches CGI Sverige’) and have had their digital ID systems and databases hacked by bad actors, with personally identifying data capable of enabling identity and bank fraud being found for sale on the dark web (see ‘Sweden’s digital ID provider CGI Sweden confirms data breach’). Even worse than that, their own tax office was selling access to the data to advertisers! (see ‘Sweden’s Tax Authority Accused of Selling People’s Data to Advertisers’).

The UK’s OneLogin digital ID system has already shown itself to be a potential security nightmare that could send the UK back into the technological dark age – with the core code being written by unvetted Romanian hackers on insecure systems and the platform losing encryption and needing to be taken down when key SSL certificates expired and were not renewed (see ‘Security concerns over system at heart of digital ID’). The platform was also shown to lack key redundancy and resiliency when a minor Amazon AWS outage took down the UK’s entire digital ID and OneLogin system (see ‘AWS Outage Sparks Debate Over UK’s Digital ID Resilience’).

It wasn’t as if the UK didn’t have warning that the Romanians were bad at digital ID security – only around 20 months ago, the Romanian Government’s system was hacked, with the ID of many, including the Romanian Prime Minister’s ID, being taken (see ‘Hackers Crack Into Romanian Parliament’s Database, Steal PM’s ID’).

And parts of the platform behind Vietnam’s digital ID that led to over 86 million bank accounts that lacked a linking digital ID being seized by the government were hacked in what was described as “a data breach of epic proportions” (see ‘A data breach of epic proportions in Vietnam’).

How will our governments protect us from having our digital ID accounts hacked, hijacked and abused like Professor Fenton’s X account?

What happens when these collections of hugely sensitive and personally identifiable data are stolen and potentially millions of people are at the mercy of the hackers and the identity fraudsters who buy the data on the dark web?


I think the answers are all pretty clear …

Having all your identity eggs in one basket – like Australia’s MyGov login which links to your Centrelink benefits, Medicare payouts, Tax Office refunds, Superannuation and other accounts, each with national ID and bank details included – is a significantly bigger risk than leaving them as separate logins to separate systems.

We won’t be protected.

These systems can never be safe or secure.

When our digital IDs are taken, we will at best become non-persons – unable to access or participate in daily life or societal systems at large. Limited like Professor Fenton was – only to watch as the hackers and fraudsters use our accounts to ruin us, our reputations and use us as a way into the accounts of our friends and family. At worst, we will be deemed responsible for the acts of the hackers or the identity fraudsters to whom they sell our digital IDs. Why? Because it is impossible to prove a negative … i.e. that it wasn’t you who did these acts with what is, after all, your digital ID.


And supported by the examples in Romania, Sweden and Vietnam, I predict now that in every country that adopts the digital IDs wanted by our globalist overlords in the WEF and UN, hundreds of thousands to millions of lives will be ruined each year by this wonderful … all eggs in one basket … target.



No comments: