告诉HN：对美国公民身份和投票的威胁来自私人服务
关于选民身份证的真正风险现在来自私人企业
由于HN帖子字符限制，本文进行了简化。
发生的事情是，私人实体正在整理数据库并运营自动裁决服务，而政府则与其签约以利用这些服务。“但这只是一些小事，行政事务。”也许是这样，但看看它们在杀伤链中的位置。在2026年5月15日左右的那一周，我被这些“行政事务”拒绝了在美国邮政局预约的“特权”，没有特别的理由认为政府会自己运营这项服务，完全依赖于他们控制的计算和数据。所以，这就是啄木鸟如何摧毁文明；或者至少是我们的代议制民主。没有上诉。服务时也没有明显的拒绝。
以下是它在现实生活中的运作方式：
美国联邦政府运营Login.Gov，这是一个为联邦机构及其客户提供的单点登录服务。我访问了Login.Gov，以将一个额外的联邦机构的网络服务与我现有的账户关联。该机构想要重新验证我的身份，因此有指示要求提供带照片的身份证上的识别码和其他一些信息，然后他们会给我发送一份带有条形码的文档，让我打印出来，并指示我将其带到邮局进行裁决，等等。哦，还有一件事。在我们给你打印那份文档之前，你能给我们一个电话号码吗？必须是我们知道的……但我们不会告诉你我们想要的那个号码。这发生在所有填表所需的个人识别信息都已收集之后。我输入了我使用或支付的三个电话号码，但都没有匹配。“再试一次！”
没有电话号码匹配，因此无法完成在邮局预约以进行身份裁决的工作。
我被剥夺了投票权，与我的政府割席。
地球上有没有人没有收到过这样的垃圾邮件：“你赢得了100美元，只需完成这项调查即可获得。”如果你傻到去做调查，它永远不会结束，只会不断问问题。永远。（并在后台利用你的计算机做其他事情。如果它把你深深吸入沉没成本谬误，它可能会要求你告诉它你正在想的电话号码、你狗的名字、你奶奶的同性恋摩托车手名字……）我想说“你们玩得够了，是时候说实话了”，但没有人可以对其说。哦，好吧，我说了。
通常，如果消费者信息被用来拒绝某个合同或具有财务影响的授权，法律要求发出拒绝的实体提供其所依赖的服务的身份。此外，法律要求服务提供商允许你查看他们档案中有关你的信息。但没有拒绝；而且该决定是否有财务影响是有争议的。不出所料，Login.Gov并未提供这些信息。由于无法查看信息，我只能说这些电话号码据称是未被识别的。事实上，基于几次互动，Login.Gov的客户支持并不知道数据提供者或处理者是谁（但他们会热衷于编造听起来合理的东西）。
没有上诉或补救措施。
我很乐意与Login.Gov或GSAIG中有实际权威的人进一步讨论此事。
完整的原始版本在这里：http://consulting.m3047.net/dubai-letters/voter-id-industry-capture.html 我在这里尽可能完整地发布它，因为我欢迎讨论/问题，我不希望它“消失”。
查看原文
THE REAL RISK AROUND VOTER ID NOW COMES FROM PRIVATE ENTERPRISE<p>This post has been condensed due to character limitations on HN posts.<p>[...]<p>What's happening is that private entities are curating the databases and operating automated adjudication services which the government contracts to utilize. "But it's little things, administrative things." Yeah maybe, but look where they are in the kill chain. During approximately the week surrounding 15-May-2026 I was denied the "privilege" of scheduling an appointment at the United States Post Office by one of these "administrative things" and there is no particular reason to think that the government runs this service themselves, relying entirely on compute and data which they control. So THIS is how the woodpecker destroys civilization; or at least our representative democracy. There is no appeal. There is no overt denial at the time of service either.<p>Here's how it works in real life:<p>The United States federal government operates Login.Gov, a single signon service for federal agencies and their customers. I went to Login.Gov to associate an additional federal agency's web service with my existing account. This agency wanted to reverify my identity, so there were instructions to supply the identification code on a picture ID and some other information and then they'd send me a document to print out with a barcode on it and then I was instructed to take that to the Post Office where it would be adjudicated, and underpants or something. Oh but one more thing. Before we give you that document to print out, can you give us a phone number? It has to be one we know about... but we're not going to tell you anything about the one we want you to tell us about. This occurs AFTER all personally identifying information required to populate the form has been collected. I entered the three phone numbers which I use or pay for, and none of them matched. "Try again!"<p>No phone number match, therefore no ability to complete the work to make an appointment at the Post Office for the actual adjudication of my id.<p>I have been disenfranchised, severed from my government.<p>Is there anyone on the planet who hasn't received a spam at some point saying "You have won $100, you just need to complete this survey to receive it." If you're foolish enough to take the survey, it never ends it just keeps asking questions. Forever. (And uses your computer to do other things in the background. If it suckas you deep enough into sunk cost fallacy, it'll probably ask you to tell it the phone number it's thinking about, your dog's name, your grandma's gay biker name...) I'd like to say "you've had your fun, it's time to come clean" but there's nobody to say it to. Oh well, I said it.<p>Normally if consumer information is utilized to deny some contract or authorization with financial implications, the law requires the entity which issued the denial to provide the identity of the service they relied on. Furthermore the law requires the service provider to allow you to review the information concerning you which they have on file. But there was no denial; and whether the decision has financial impact is debatable. Unsurprisingly and disappointingly Login.Gov does not provide this information. Lacking the ability to review the information, I can only say that the phone numbers are ALLEGEDLY unrecognized. The truth is, based on several interactions, that Login.Gov customer support doesn't know who the data provider(s) or processors are (but they'll eagerly make up plausible sounding things).<p>There is no appeal or redress.<p>[...]<p>I would be happy to discuss this further with somebody at Login.Gov or GSAIG who has actual authority.<p>Canonical full original version is here: http://consulting.m3047.net/dubai-letters/voter-id-industry-capture.html I've posted it here as completely as possible because I welcome discussion / questions and I don't want it to "disappear".