I wonder...
It can pull up a user's drivers license - so what about their covid vaccination record (maybe in the future).
Stripe Identity
31–40 of 557 posts
Re: Stripe Identity
#32It’s not clear to me how you can detect a fake ID with machine learning. A persons appearance can change drastically - seems intractable
Some things don't change, like the dimensions between features like eyes, nose, ears, etc. Coinbase had an interesting presentation on this a few years back about how they verified IDs from pictures and dealt with all kinds of fraud.
Worst case, if the appearance is really drastic then it would just fail and require a manual intervention.
Re: Stripe Identity
#33Earlier quoted context omitted.
In their TOS and Privacy Policy it’s made clear they are also data controllers. Unless you contribute to the breach it would almost certainly fall on them.
Yep, Stripe would be the data controller in this situation (and we comply with GDPR). https://support.stripe.com/questions/managing-your-id-verifi...
Out of curiosity, given that this is among the most sensitive PII that can be stored, where is this data located for Stripe? I think this looks like an excellent product and can absolutely see the utility for so many businesses, but as a European I would never want such data to be stored outside of the EU. If there could be flexibility in the location the data is stored I think many European customers would appreciate that. Thanks.
Re: Stripe Identity
#34Does Stripe intend to make a giant online database of international identity documents? Why should we trust Stripe to secure these? It could be Equifax levels of problematic if there would be a intrusion, but I also can't tell how Stripe plans to use this information.
Re: Stripe Identity
#35Earlier quoted context omitted.
> Detect fake IDs and spoofed photos with machine learning > Match the ID photo with selfies of the document holder > Validate SSN and addresses against global databases Seems fairly clear.
So you just need to print physical (fake) id and claim to be in Europe to get around all three.
This sort of thing is definitely usable in Europe; if you’re thinking of GDPR the legitimate interest and legal obligation rules are likely to apply to users of this product. Eg at least one of my banks uses something like this for account identity validation (I see KYC is high on their list of use cases). Things like car rentals would find this really useful too.
Re: Stripe Identity
#36The Stripe Identity product is fantastic. Some of the most impressive things: 1. If you are at a desktop, there is an easy transition to using your phone to take a picture of your ID (or a selfie if that's the use case - it will match selfies with ID photos), and then complete verification on the desktop. 2. It does all the image analysis (i.e. is the ID in focus, etc.) in browser without the need for a native app.
This almost proves that webapps are a competitive substitute to AppStores - making the consumer detriment very hard to prove in the current anti-trust framework.
Proves it for this one use case maybe. I don't even think you can get webapp notifications on iOS.
Re: Stripe Identity
#37How does this work?
It's actually pretty cool (IMO; I'm biased). Drop-in browser-based user authentication that: * Uses various sophisticated heuristics to detect real vs fake IDs. * Matches the ID to the human face. * Detects whether the human face is live or not. * Dynamically requests more or less information depending on the confidence level. It also gets better over time based on the attacks and fraud attempts that Stripe itself se…
Ahh I see. This is really great.
Those are 4 great bullets btw. They helped me understand the service a lot more than the landing page for identity. Might want to consider a view like this.
Re: Stripe Identity
#38Any folks at Stripe want to chat about a HIPAA compliant version of this? I know some folks who may be interested...
Re: Stripe Identity
#39Re: Stripe Identity
#40I am so excited to see this!
Previously, you'd have had to use something like Jumio for this, which was (to be generous) pretty wonky.