Live data from Hacker News

We have 4 days to contest KYC being required by internet services

federalregister.gov

111–120 of 395 posts

Re: We have 4 days to contest KYC being required by internet services

#111
post #59

Earlier quoted context omitted.

They collect biometric data (selfie) plus a copy of your drivers license? That's a big part of KYC/AML. That's a huge difference from address, email, CC number.

At a quick reading, it doesn't sound like those are requirements. It also doesn't look like any documentation is technically required. One of the methods permitted is "Verification through non-documentary methods".

Do you mind expanding on what "non-documentary methods" means?

Re: We have 4 days to contest KYC being required by internet services

#112

For those who didn't know, KYC stands for "know your customer". It's a good idea to spell out abbreviations the first time they're used, especially since the abbreviation itself is not used in the linked article. It's also worth noting that the proposal is about US infrastructure as a service (IaaS) products specifically, not "internet services" in general.

Yeah this is a very industry standard term in banking and anyone in that industry is going to immediately know what you are talking about, but outside of that industry, chances are high that a layman will not

[flagged]

Re: We have 4 days to contest KYC being required by internet services

#113

For those who didn't know, KYC stands for "know your customer". It's a good idea to spell out abbreviations the first time they're used, especially since the abbreviation itself is not used in the linked article. It's also worth noting that the proposal is about US infrastructure as a service (IaaS) products specifically, not "internet services" in general.

KYC in the context of internet services stands for "violating the 4th Amendment".

I don't disagree with your premise that KYC enables governments to violate the 4th amendment, but in general, for certain industries this is just generally a really good idea. Banking is the first industry where I encountered KYC, and it strikes me as being obviously good there.

Isn't effectively the majority of what the Snowden leaks covered essentially violating the 4th amendment?

Re: We have 4 days to contest KYC being required by internet services

#114
post #70

Earlier quoted context omitted.

I'm going to need another intelligence to read the full text. "U.S. IaaS providers and foreign resellers of U.S. IaaS products must exercise reasonable due diligence to ascertain the true identity of any customer or beneficial owner of an Account who claims to be a U.S. person." So at a minimum, everyone's identity is verified by IaaS provider. If you claim to be a non-U.S. person, additional information is collected…

Dreamhost, Wordpress, etc

This is not the industry-standard or NIST definitions of these terms. Something like Google Workspace Suite is Software as a Service. Something like Heroku (or Dreamhost or Wordpress) is Platform as a Service. Something like EC2 and S3 are Intrastructure as a Service. The distinction is renting out undifferentiated server space that a customer installs their own software onto. If you rent a VPS from Linode and install self-hosted Wordpress, that's IaaS. If you buy Wordpress's managed hosting, that's PaaS.

Re: We have 4 days to contest KYC being required by internet services

#115

Earlier quoted context omitted.

Yeah this is a very industry standard term in banking and anyone in that industry is going to immediately know what you are talking about, but outside of that industry, chances are high that a layman will not

KYC is that poorly known? I would have expected most white-collar professionals to have at least heard of it.

If someone knows about KYC because of their profession, they are quite literally the opposite of a layperson.

Re: We have 4 days to contest KYC being required by internet services

#116

Earlier quoted context omitted.

I think that the biggest argument in favour is that it would remove anonymity on the internet, at least from governments, and that could enable law enforcement to more easily find people committing real crimes. CSAM, scams, etc. I think the biggest argument against it is that this removes anonymity on the internet, at least from governments, and that would remove people's ability to freely voice their opinions withou…

Does this actually remove anonymity on the internet? It seems to de-anonymize a set of IaaS customers, sure; but that's not nearly the same thing as removing anonymity completely. I've only just scanned this but it seems at first glance to mean that a foreign company can't anonymously spin up an AWS instance, that's all. Am I reading this incorrectly?

A set? Only US customers are unaffected, i.e. 96% of the planet would no longer be able to use AWS (or anything similar based in the US, all the way down to simple web hosting or e-mail services) without going through KYC.

There are so many things that can fall under the IaaS bracket. Think anything 'cloud'. Maybe that's not how they'll apply it, but legally they are free to do so. It's a huge reach.

Re: We have 4 days to contest KYC being required by internet services

#117

Earlier quoted context omitted.

KYC in the context of internet services stands for "violating the 4th Amendment".

I don't disagree with your premise that KYC enables governments to violate the 4th amendment, but in general, for certain industries this is just generally a really good idea. Banking is the first industry where I encountered KYC, and it strikes me as being obviously good there. Isn't effectively the majority of what the Snowden leaks covered essentially violating the 4th amendment?

What is being proposed here will be used as a tool of fear by the government to suppress speech it doesn't like.

Comparing what one individual did in the past to a formal government policy doxxing away peoples' 4th amendment rights is a strawman argument.

Re: We have 4 days to contest KYC being required by internet services

#118
post #53

Earlier quoted context omitted.

The fourth amendment? > “The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no Warrants shall issue, but upon probable cause, supported by Oath or affirmation, and particularly describing the place to be searched, and the persons or things ...

How does verifying your identity in any way violate that, though? You have a physical address that you live at, and the government verifies that you are the person living at that address, and that is not violating the fourth amendment. This would be pretty similar to that.

Of course the words are open to interpretation but "unreasonable searches" seem to encompass this sort of thing. Usually it's taken case by case and reasons would need to be given for every individual being searched. This is a blanket excuse to search every interaction without a reason.

Re: We have 4 days to contest KYC being required by internet services

#119

Earlier quoted context omitted.

Yeah this is a very industry standard term in banking and anyone in that industry is going to immediately know what you are talking about, but outside of that industry, chances are high that a layman will not

KYC is that poorly known? I would have expected most white-collar professionals to have at least heard of it.

I thought it was a zipper manufacturer tbh
Post reply on HN