If they put an ID on a sanction list, there’s a possibility to verify it. They could verify that it actually belongs to the person they want to sanction before putting it on the list. Failing that, the actual person can prove that they don’t belong on the list by verifying their identity.
Verifying identity is a much simpler problem than establishing identity.
> If they put an ID on a sanction list, there’s a possibility to verify it
They didn't care to figure out if the Sean Byrne of County Sligo actually existed before putting the name on the list. I doubt they would bother verifying an ID number.
Plus, going back to my point about the list being full of foreigners, how do you verify the validity of a foreign ID number and address? Maybe Ireland is going to comply with a US request, but many other countries won't, and you are now back to square one.
Yes it's true we shouldn't let perfect be the enemy of good. But good also has to be good enough to solve the problem without creating more problems faster than it solves them.
It's fine to propose a solution but if people aren't convinced just throwing an aphorism grenade at them isn't productive.
The courts obviously never had an id document for the US to find. Is the US going to omit all partial identities to avoid false positives or is Ireland going to illegally investigate lists for the US from extra judicial processes that likely involve non-extraditable crimes? Will the US believe every country that says these investigations found no real citizen?
Not bending to the US might be less convenient at times but if you bend for them you will eventually be bending for China.
> In both cases the courts called for better matching. Compare the date of birth. Compare the middle name.
> There is no version of that available to me. The listing has no date of birth to compare. No middle name and no passport number, because the person doesn’t exist. A screening system that does its job perfectly will still flag me, forever, on the only two facts the record contains: a common Irish name and a country.
These systems operate by matching as much information as possible. If the information isn’t there but the rest matches (even if it’s just a name) it flags in the system.
> Failing that, the actual person can prove that they don’t belong on the list by verifying their identity.
Sounds like you should tell the author. They’ve been living with this problem for 6 years but I’m sure your zero experience with these systems or trying to deal with it will help him immensely.
You’re talking about different things. Sweden has personal identity numbers and they’re public information. It protects you from being mixed up with someone with the same name. Not from identity theft though.
Making them explicitly public is better than the US situation where they’re treated like a password - a password you can’t change if it gets disclosed, and that lots of people feel entitled to get.
You're asking the wrong person, I didn't downvote you. I am challenging your opinion with evidence of sama's uniquely sinister ambitions.
Can you elucidate why you think Sam is the better horse to bet on? From what I can see, he's the biggest zealot by quite a margin, in addition to being a chronic liar.
True, especially since President Sanders tends to be a bit heavy-handed on exerting political pressure. He's been issuing an unprecedented number of executive orders since he took office...
A 5% stake in an overvalued private company without public financials and with an indeterminate timeline to profitability is a bailout. Shareholders cash out while the taxpayer is stuck with the bill.
I don't know about better but it's certainly different. It's painfully slow through claude code vscode extension compared to copilot but maybe "smarter", I feel like I have to correct it less using sonnet on both. I don't use opus much because of the cost but coworkers say the difference between harnesses there is also pronounced.
Why are they storing a time period (start and end date) in the first example? Why not just store the date when the price comes into effect? That would make both overlaps and time travel impossible without using any constraints.
Works when there is always an active price. Having an explicit end date allows certain rows to be inactive automatically after validity period. Think of seasonal categories/products etc which dont exist after a specific period
And even if you don't have seasonal products, you still need an end date to mark when you stop selling a product; otherwise you have to do something hacky like defining "<price> = NULL means we stopped selling the product after <valid_from>" and inserting an extra record.
I think the end date should be nullable though, but valid_to is NOT NULL in the starting example... later in the article, when showing the "new way" using date ranges, it inserts a row with an open-ended range, which is more what I'd expect.
Yeah, but now this is implicit information (no price == marker row) and duplicate the entire row. And it is baking in "price" as the special field. This may not be just one field for another temporal entity
It's a trade-off. If you store both endpoints you can continue to think of rows as order-invariant tuples. If you store only one endpoint, you have to impose a meaningful order on the rows in order for them to make sense.
By that logic VPNs and many other technical solutions are also not solving technical problems, since it is theoretically possible to achieve the same results by other means.
It may work in your IDE (autocompletion, etc.) but there is no standard on this side. Some IDE have their own parsers, others use one of the LSPs for PHP.
Yeah, at the moment we use arrays as anonymous objects and phpdoc+phpstan to verify the types, but I want it in the language. PHP already supports intersection and union types, it really feels like just skipping the naming part and going all in on structural typing is not that far fetched by now.
What a great blog post! I have wanted to do rootless docker with subuids, but putting it all together like you have is not easy. Thank you for writing it down!
Verifying identity is a much simpler problem than establishing identity.