logoalt Hacker News

matheusmoreira • yesterday at 6:39 PM • 2 replies • view on HN

My most recent interaction with a government website that did this: Nota Fiscal.

Didn't have an account, so I had to go through their "first login" flow where it demanded my CPF, birth date and some other tax number thing I don't quite remember. That's all it takes to "verify" my identity, apparently.

It's a system that rolled out nationwide some time ago. I was forced to migrate to it after my city's nota fiscal system was deprecated. Don't remember if the local system was better or worse: my accountant signed up for it, not me.

Honestly, I don't even want them to fix any of this at this point. If they try, I have no doubt they'll double down on the surveillance and mandate facial recognition instead. And when people inevitably start deep faking it with AI, I have no doubt they'll destroy computer freedom because of it by requiring that everybody be restricted to locked down government approved phones.


Replies

marcosdumay • yesterday at 8:23 PM

> some other tax number

I imagine your voter registration. That one is a very "secretive" number, since people used to use it to commit voter fraud by the 80s and 90s.

Anyway, that's a site where you register to report and pay taxes. It's not something other people will rush to do in your name. There is usually extra security on the services that provide stuff that people actually want.

➕ show 1 reply
drdexebtjl • yesterday at 6:52 PM

Interesting. I also went through this sign up recently and thought it was weird that it didn’t require gov.br.

But it asked me for my voter ID and the receipt numbers of my last 2 annual tax forms, which are very secret and somewhat in line with the scope of permissions I got (read-only permissions of tax documents). Write permissions required a digital certificate.

I will report this :)

➕ show 1 reply