Live data from Hacker News

Stripe Identity

stripe.com

11–20 of 557 posts

Re: Stripe Identity

#11

How does this work?

It's actually pretty cool (IMO; I'm biased). Drop-in browser-based user authentication that:

* Uses various sophisticated heuristics to detect real vs fake IDs.

* Matches the ID to the human face.

* Detects whether the human face is live or not.

* Dynamically requests more or less information depending on the confidence level.

It also gets better over time based on the attacks and fraud attempts that Stripe itself sees.

Re: Stripe Identity

#13

How does this work?

https://stripe.com/docs/identity/verification-checks

> Document checks verify the authenticity of government-issued identity documents. Stripe uses a combination of machine learning models, automated heuristic analysis and manual reviewers to verify the authenticity of hundreds of different document types.

> Selfie checks look for distinguishing biological traits, such as face geometry, from a photo ID and a picture of your user’s face. Stripe then uses advanced machine learning algorithms to ensure the face pictures belong to the same person.

> ID Number checks provide a way to verify a user’s name, date of birth, and national ID number. Stripe uses a combination of third-party data sources such as credit agencies or bureaus, utility or government-issued databases and others to verify the provided ID number.

Re: Stripe Identity

#14
post #6

How does this work?

> Detect fake IDs and spoofed photos with machine learning > Match the ID photo with selfies of the document holder > Validate SSN and addresses against global databases Seems fairly clear.

So you just need to print physical (fake) id and claim to be in Europe to get around all three.

Re: Stripe Identity

#17
post #6

How does this work?

> Detect fake IDs and spoofed photos with machine learning > Match the ID photo with selfies of the document holder > Validate SSN and addresses against global databases Seems fairly clear.

Awesome, can't wait to be irreversibly put on a blacklist because a black box algorithm has decided something doesn't look right.

Re: Stripe Identity

#18
post #4

If Stripe were to get hacked who would pay the GDPR fine?

In their TOS and Privacy Policy it’s made clear they are also data controllers. Unless you contribute to the breach it would almost certainly fall on them.

Re: Stripe Identity

#19
If this even reduces 20% of having to call up a human to verify my account because 'our systems have detected that you have accessed your account from an unknown location' then, yes please and thank you! Also interested to see what form of IDs it will accept! Only negative: Expensive...but I guess it's fair for it doing all the heavy lifting.

Re: Stripe Identity

#20
post #2

I've never seen a company release incredible products with as high velocity as Stripe has over the last few years. Truly incredible. $1.50/user may sound outrageously expensive at first, but having seen all the engineering power it takes to build something like this at Uber...it's a totally fair price.

This is on the less expensive side of alternatives and doesn't require a minimum annual spend quota. They nailed this for startups, which I imagine is a combination response to / anticipation of regulatory requirements in Web3 apps.
Post reply on HN