Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Stripe Identity

stripe.com

Post reply on HN
Print view View original

311–320 of 557 posts

Re: Stripe Identity

#311

Post by Sr_developer »

jlhonora wrote: post #281
Sr_developer wrote: post #208

Earlier quoted context omitted.

Are you going to pay me? If not, good luck!

Probably not the answer you expect, but the I18N team is hiring :) https://stripe.com/jobs/listing/internationalization-enginee... Otherwise, if you're a trained linguist and have demonstrable consulting experience QA'ing technical documentation then we'll be happy to arrange something. In either case, we appreciate your feedback, and my emails are open!

No trabajo de gratis para multinacionales cuiquito. Tu credencialismo barato y sobrador lo puedes archivar donde mas te convenga.No se si es la respuesta que estabas esperando.

Re: Stripe Identity

#312

Post by ridruejo »

echopom wrote: post #306
agwa wrote: post #290

Considering that Stripe was originally known for letting websites accept credit card payments without seeing your credit card number, one might assume that Stripe Identity only allows websites to see the verification result, and not your selfies and scans of your identity documents. That would be an incorrect assumption. Per https://support.stripe.com/questions/managing-your-id-verifi... customers of Stripe Identity…

It's unfortunate , I'm an Enterprise Architect in Banking and honestly I wouldn't have let that feature go in production. Businesses that do not have a legitimate reason to view my sensitive document like Passport , should not be allowed to do so. Only authorized institutions like Licensed Payment Institution / Banks / Insurances etc... should be allowed to do so and AFTER they've been approved. It's sad because you…

My take is that if you need it, Stripe will be better and more secure than rolling your own

Re: Stripe Identity

#313

Post by motohagiography »

cycop wrote: post #283
motohagiography wrote: post #243

Smart. Banks haven't been allowed to monetize their KYC data, but this new non-bank class of payments companies have this opportunity. Interac has been trying to do this for many years. Some years ago I worked on a system let banks do identity assertions with proofs via SAML attributes instead of sharing customer PII. It is now a federation of banks in wide use for govt services in Canada. The use cases were really l…

"Banks haven't been allowed to monetize their KYC data"? I work for a major US Bank and they are most definitely monetizing KYC data, in fact we have made several billion dollar acquisitions just to scoop peoples data.

The convention in Canada was there were limits on how much customer PII banks and the payment networks could collect, use, and share or sell, and how. "Monetize," in my comment means "sell to others like a social platform / ad-tech company," whereas I would agree it could be monetized in other ways.

What I see is that Stripe doing IAM for platforms and services that people use daily sets them up to dominate retail and small business banking services if they wanted to go there.

Re: Stripe Identity

#314

Post by rStar »

terminator38 wrote: post #183

> Access captured images of ID documents and selfies Why is this necessary? I thought the point was to trust Stripe with this data instead of many small companies which could abuse the data

it’s a data black hole. just wait a few years.

Re: Stripe Identity

#315

Post by rokobobo »

rokobobo wrote: post #41
f38zf5vdt wrote: post #34

Does Stripe intend to make a giant online database of international identity documents? Why should we trust Stripe to secure these? It could be Equifax levels of problematic if there would be a intrusion, but I also can't tell how Stripe plans to use this information.

I never wanted Equifax to have any of my data, and yet here we are. After the breach, I wouldn’t ever be a paying customer to them if I had a choice. (Indirectly, I am still a “customer” in the sense that they probably still have my data and get new data about me—but apart from canceling all my cards, not sure what choice I have). In comparison, Stripe seems to charge for each product it offers. I think that’s a more…

Edit (sorry, I don't think I can edit my own comment at this point): I think I was missing the point. Storing user data for 3 years after verification seems unnecessary for the user. So yes, it does sound like some data-mongering f*ckery is going to happen/is happening.

Re: Stripe Identity

#317

Post by objclxt »

rejectedandsad wrote: post #106
f38zf5vdt wrote: post #34

Does Stripe intend to make a giant online database of international identity documents? Why should we trust Stripe to secure these? It could be Equifax levels of problematic if there would be a intrusion, but I also can't tell how Stripe plans to use this information.

Stripe hires elite Stanford grads unlike Equifax is the simplest answer they probably wouldn’t say publicly. But the pedigree and engineering talent is miles better.

There isn’t a correlation between graduating from Stanford and being able to write secure code.

If there was, all black-hats would be coming from Ivy League schools. They’re not.

Re: Stripe Identity

#318

Post by lxgr »

anonymouse008 wrote: post #143
kgraves wrote: post #46

Earlier quoted context omitted.

how are mobile notifications on the web going for iOS?

Said it in another thread -- SMS's are a tangibly better user experience. You get to say stop in the moment, instead of searching through opaque settings... you can set DND to certain numbers for certain times... The whole ecosystem is there and very few are playing with it.

SMS are a horrible user experience for notifications!

For push notifications, I can set them to silent by application, they take me to the right place in the app when clicking them, very often they offer quick responses directly from the notification itself...

Finally, it's bad enough to require a phone number for 2FA (or worse, as the primary user identifier). Why should I have to give my phone number to a service?

Re: Stripe Identity

#319

Post by jonplackett »

grouseway wrote: post #187
ngoel36 wrote: post #2

I've never seen a company release incredible products with as high velocity as Stripe has over the last few years. Truly incredible. $1.50/user may sound outrageously expensive at first, but having seen all the engineering power it takes to build something like this at Uber...it's a totally fair price.

I'd put Twilio and Cloudflare in the same category for vision (expanding product offering) and execution.

I thought that too - until I tried to use Twillo for the first time in a couple of years. Holy crap they overcomplicated the interface! There's 3 or 4 levels of menu all shown at the same time in different directions. The docs are also way worse. The product is still great, but the interface is a complete mess!

Re: Stripe Identity

#320

Post by lxgr »

iudqnolq wrote: post #295
easrng wrote: post #230

Earlier quoted context omitted.

Push is free, assuming you have network connectivity, and 100000*0 is still 0.

Edit: Totally wrong You need to buy from apple/google if you want battery efficiency, as you want to be included in the one persistent channel the OS manages. Even without that your own servers cost money.

Apple's and Google's services are free, as far as I know; it's only if you want to send through some third-party provider that you pay per message.
Post reply on HN