Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Stripe Identity

stripe.com

Post reply on HN
Print view View original

81–90 of 557 posts

Re: Stripe Identity

#81

Post by jsmith45 »

jtbayly wrote: post #62
patrickmcnamara wrote: post #36

Earlier quoted context omitted.

Proves it for this one use case maybe. I don't even think you can get webapp notifications on iOS.

The fact that Apple has refused to deliver that only proves the point. If they did, many apps wouldn’t be forced to be in the App Store. It’s certainly possible, as iirc, it works on Android for years now.

Incredibly annoying that apple does not support this, while also trying to crack down on apps that is considered to just be a wrapped web-application. (In which case they want you to make a proper web app instead). Even using notifications is not considered enough of a reason to get an app they feel is just a wrapper approved.

Re: Stripe Identity

#82

Post by jmatthews »

Not to take away from the accomplishment, but hopefully the "selfie auth" isn't considered the penultimate verification. With no social engineering, just finding a public photo of someone, one could composite a short video that would be very hard to distinguish from reality.

Re: Stripe Identity

#83

Post by dean177 »

baybal2 wrote: post #60

I was once enticed by AirBnB's promise of "we don't store your ID data after validation" Few years down the line, it requested me to submit my ID data for a booking in China. All my ID data was pre-filled.

Was this your browser filling for you?

Re: Stripe Identity

#84

Post by f38zf5vdt »

edwinwee wrote: post #74
f38zf5vdt wrote: post #34

Does Stripe intend to make a giant online database of international identity documents? Why should we trust Stripe to secure these? It could be Equifax levels of problematic if there would be a intrusion, but I also can't tell how Stripe plans to use this information.

No. 1. Stripe cares tremendously about and knows the importance of security—we’ve learned a lot from securely processing hundreds of billions of dollars in payments annually, and Identity is built from those learnings. ( https://stripe.com/docs/security/stripe ). 2. Any biometric identifiers that are created to perform the verification are never stored or retained—they are fully removed from all of our systems within…

> We will typically store the rest of your submitted identity information for 3 years. This includes all images captured, extracted data from your ID document including name, date of birth, and ID number, and any information submitted via forms such as name, date of birth, SSN, email, and phone number, and the verification response.

That doesn't make me feel a lot better. :( The images are enough to generate biometric data such as facial recognition profiles.

Re: Stripe Identity

#86

Post by andy_ppp »

ngoel36 wrote: post #2

I've never seen a company release incredible products with as high velocity as Stripe has over the last few years. Truly incredible. $1.50/user may sound outrageously expensive at first, but having seen all the engineering power it takes to build something like this at Uber...it's a totally fair price.

I know that KYC checks for Onfido we had no volume but we’re being charged around $10. Is the $1.50 for KYC or some lesser verification?

Re: Stripe Identity

#87

Post by tchalla »

edwinwee wrote: post #74
f38zf5vdt wrote: post #34

Does Stripe intend to make a giant online database of international identity documents? Why should we trust Stripe to secure these? It could be Equifax levels of problematic if there would be a intrusion, but I also can't tell how Stripe plans to use this information.

No. 1. Stripe cares tremendously about and knows the importance of security—we’ve learned a lot from securely processing hundreds of billions of dollars in payments annually, and Identity is built from those learnings. ( https://stripe.com/docs/security/stripe ). 2. Any biometric identifiers that are created to perform the verification are never stored or retained—they are fully removed from all of our systems within…

Well, I don't believe what Stripe (or anyone) says; I believe what you do.

Does Stripe have a legal contract with users that says something to the effect of "if it does 1 and 2 above (by mistake or by choice doesn't matter) - that they will be liable for it". If not, all the support documents and technical security documentation is moot. I want to see "skin in the game" by Stripe. If you're so sure about "security" sign a legal contract.

Re: Stripe Identity

#89

Post by apexalpha »

Is this new? (to the USA?)

Because I've used similar services inside apps dozens of times. Sometimes to verify a drivers license to ride a car, sometimes to verify my ID to register a bank account.

Every time is was done in a few seconds so I assumed the companies used an API rather than every car-share building it themselves.

Re: Stripe Identity

#90

Post by andy_ppp »

jonplackett wrote: post #54
ngoel36 wrote: post #2

I've never seen a company release incredible products with as high velocity as Stripe has over the last few years. Truly incredible. $1.50/user may sound outrageously expensive at first, but having seen all the engineering power it takes to build something like this at Uber...it's a totally fair price.

Just what I was thinking. Can Stripe hurry up and go public so I can buy some shares?

If only Stripe would start a pre-ipo stock market. I guess only incumbent regulation prevents this, it’s not a technology problem.
Post reply on HN