Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

We have 4 days to contest KYC being required by internet services

federalregister.gov

Post reply on HN
Print view View original

81–90 of 395 posts

Re: We have 4 days to contest KYC being required by internet services

#81

Post by AdamH12113 »

gdcbe wrote: post #43
SOLAR_FIELDS wrote: post #26

Earlier quoted context omitted.

Yeah this is a very industry standard term in banking and anyone in that industry is going to immediately know what you are talking about, but outside of that industry, chances are high that a layman will not

In the past that would be true. But given most blockchain platforms require it, I imagine it is more widely known in the tech-savy hn-like realms? Then again I worked on blockchain tech around half a decade ago, so I might be knowledge biased here?

I posted my comment because the linked proposal itself never uses the abbreviation "KYC" and none of the early comments spelled it out, so if (like me) you didn't already know what it means a quick Ctrl-F wouldn't help.

The proposal seems to use the term Customer Identification Program (CIP) instead, mentioning KYC (spelled out) only once, in the introduction:

> Section 1 of E.O. 13984 requires the Secretary to propose, for notice and comment, regulations that mandate that U.S. IaaS providers verify the identity of foreign persons that sign up for or maintain accounts that access or utilize U.S. IaaS providers' IaaS products or services (Accounts or Account)—that is, a know-your-customer program or Customer Identification Program (CIP).

Re: We have 4 days to contest KYC being required by internet services

#82

Post by jovial_cavalier »

newaccount7hhhf wrote: post #64
justaman wrote: post #37

Earlier quoted context omitted.

I think everyone has a sour taste left over from decades of half-baked laws written by politicians that don't understand the basics of the internet or technology in general. With that said, I also don't understand the issues people are having with this.

What laws are you talking about? The Internet has grown a lot that’s largely because we have smart politicians and strong institutions. I really think the regulation of the Internet has been amazingly good.

https://en.wikipedia.org/wiki/Stop_Online_Piracy_Act

https://en.wikipedia.org/wiki/PROTECT_IP_Act

https://en.wikipedia.org/wiki/Anti-Counterfeiting_Trade_Agre...

https://en.wikipedia.org/wiki/Digital_Millennium_Copyright_A...

https://en.wikipedia.org/wiki/Patriot_Act

https://en.wikipedia.org/wiki/PRISM

Re: We have 4 days to contest KYC being required by internet services

#83

Post by chlodwig »

lolinder wrote: post #42
chadsix wrote: post #27

Earlier quoted context omitted.

AI is mentioned, but the scope is significantly larger if you read the fulltext.

It's still just for IaaS companies, though, right? Not that that makes this all okay, but it is a much more limited proposal than "internet services" makes it sound.

IaaS is defined as a provider of computing resources the allows you to run software that is not predefined. So that would seem to include basically every web host. If you can install Wordpress or Mastodon on the servers they provide, they are an IaaS.

Re: We have 4 days to contest KYC being required by internet services

#84

Post by OgsyedIE »

axus wrote: post #70
chadsix wrote: post #27

Earlier quoted context omitted.

AI is mentioned, but the scope is significantly larger if you read the fulltext.

I'm going to need another intelligence to read the full text. "U.S. IaaS providers and foreign resellers of U.S. IaaS products must exercise reasonable due diligence to ascertain the true identity of any customer or beneficial owner of an Account who claims to be a U.S. person." So at a minimum, everyone's identity is verified by IaaS provider. If you claim to be a non-U.S. person, additional information is collected…

Dreamhost, Wordpress, etc

Re: We have 4 days to contest KYC being required by internet services

#85

Post by erie »

lolinder wrote: post #56
chadsix wrote: post #46

Earlier quoted context omitted.

Legally speaking, internet service providers are infrastructure providers.

Do you have a basis for this claim or are you just throwing it out there to see if it catches on? The document linked refers to IaaS, which as an acronym definitely does not include ISPs.

Some AI services such as Synthesia https://www.synthesia.io › ethics " Your avatar can be created only with your explicit consent, following a thorough KYC-like procedure. Complete control: Our platform ensures you can decide"

Re: We have 4 days to contest KYC being required by internet services

#86

Post by switch007 »

plus wrote: post #5
chadsix wrote: post #2

Submission Statement: We have exactly 4 days to leave comments to the Federal Government of the United States of America contesting the requirement of KYC by internet service providers. This law is not conducive to a free internet/society.

I ask this 100% genuinely, since this isn't a subject I've ever given any mind to. Why should we oppose this? What are the potential negative outcomes if this goes through? Can you steelman the argument for why people support this, and explain why you find the arguments unconvincing?

It's on the parties sponsoring and proposing the law to rigorously explain the benefits (and to discuss any negatives). Maybe go ask them?

Re: We have 4 days to contest KYC being required by internet services

#87

Post by wetpaws »

oshout wrote: post #21

Skimming through the article, it seems like the extent of this is to require IAAS (Infrastructure) providers to verify the identity of those who are using their services to train AI. It's an attempt to stymie sanctioned or malicious actors, from training AI and especially from hopping between services or using aliases to continue training on their model. It seems a bit benign and I don't understand the parallels othe…

[dead]

Re: We have 4 days to contest KYC being required by internet services

#88

Post by kube-system »

monksy wrote: post #59
kube-system wrote: post #57

Earlier quoted context omitted.

> You're calling a collection and storage of your personal information as "benign"?! All major cloud services already collect this information. I filled in the bare minimum on AWS, and they've got my full name, address, phone number, email, and credit card details.

They collect biometric data (selfie) plus a copy of your drivers license? That's a big part of KYC/AML. That's a huge difference from address, email, CC number.

At a quick reading, it doesn't sound like those are requirements. It also doesn't look like any documentation is technically required. One of the methods permitted is "Verification through non-documentary methods".

Re: We have 4 days to contest KYC being required by internet services

#89

Post by RAM-bunctious »

oshout wrote: post #21

Skimming through the article, it seems like the extent of this is to require IAAS (Infrastructure) providers to verify the identity of those who are using their services to train AI. It's an attempt to stymie sanctioned or malicious actors, from training AI and especially from hopping between services or using aliases to continue training on their model. It seems a bit benign and I don't understand the parallels othe…

It's really not benign as far as I can see. There is an implication that its purpose is to allow providers to start writing reports on foreign users training LLMs (which, incidentally, I'm not condoning either), but in the process it requires every American IaaS has to start implementing KYC folly.

No one wants to send in selfies and their passport just to start a Digital Ocean droplet.

Re: We have 4 days to contest KYC being required by internet services

#90

Post by buildbuildbuild »

AdamH12113 wrote: post #19

For those who didn't know, KYC stands for "know your customer". It's a good idea to spell out abbreviations the first time they're used, especially since the abbreviation itself is not used in the linked article. It's also worth noting that the proposal is about US infrastructure as a service (IaaS) products specifically, not "internet services" in general.

In practice this often means requiring a photo ID scan.
Post reply on HN