Live data from Hacker News

We have 4 days to contest KYC being required by internet services

federalregister.gov

161–170 of 395 posts

Re: We have 4 days to contest KYC being required by internet services

#161

Earlier quoted context omitted.

I think everyone has a sour taste left over from decades of half-baked laws written by politicians that don't understand the basics of the internet or technology in general. With that said, I also don't understand the issues people are having with this.

> With that said, I also don't understand the issues people are having with this. The regulation "requir[es] U.S. Infrastructure as a Service (IaaS) providers of IaaS products to verify the identity of their foreign customers" Q: How would one propose to determine if a customer is foreign or not? A checkbox, perhaps? No bad actor would possibly pretend to be a domestic customer, of course...

That's a strawman. It won't be a checkbox, of course...

Re: We have 4 days to contest KYC being required by internet services

#162
post #21

Skimming through the article, it seems like the extent of this is to require IAAS (Infrastructure) providers to verify the identity of those who are using their services to train AI. It's an attempt to stymie sanctioned or malicious actors, from training AI and especially from hopping between services or using aliases to continue training on their model. It seems a bit benign and I don't understand the parallels othe…

This won't work. Foreign nations have enough skill and resources to pass KYC as a citizen (steal someone's documents, pay a homeless for verification etc). And as I understand, US doesn't have a central citizen database so it is difficult to verify a document.

It's funny they don't need ID to vote but they'll need one for a VPS.

EDIT: I know it's about IaSS.

Re: We have 4 days to contest KYC being required by internet services

#163

Earlier quoted context omitted.

> …directs the Secretary of Commerce (Secretary) to propose regulations requiring U.S. Infrastructure as a Service (IaaS) providers of IaaS products to verify the identity of their foreign customers… (from TFA) This is about IaaS not “internet services”. It doesn’t remove anonymity from internet users, just foreign customers renting cloud servers and other infrastructure.

It seems the definition of IaaS Products could very well extend to ISPs: https://www.federalregister.gov/d/2024-01580/p-46 > This proposed definition adopts the E.O. 13984 definition for “Infrastructure as a Service product”, which is any product or service offered to a consumer, including complimentary or “trial” offerings, that provides processing, storage, networks , or other fundamental computing resources, and w…

I can't see how an ISP (or VPN for that matter) would qualify for the second half "and with which the consumer is able to deploy and run software that is not predefined, including operating systems and applications."

This would apply to all hosting providers, which is bad enough.

Re: We have 4 days to contest KYC being required by internet services

#165
post #21

Skimming through the article, it seems like the extent of this is to require IAAS (Infrastructure) providers to verify the identity of those who are using their services to train AI. It's an attempt to stymie sanctioned or malicious actors, from training AI and especially from hopping between services or using aliases to continue training on their model. It seems a bit benign and I don't understand the parallels othe…

Skimming the regulations, this does not seem right. All IAAS providers (which is everyone who allows customers to run custom code, so it includes any web host like Dreamhost) to verify the identity of foreigners who open an account. This would seemingly entail the service provider needing to verify everyone's identity, in order to figure out who is a foreigner and who is not. In other words, if you want to run your o…

Tbh this is fine by me. It's about time the US stop being the center of the world for internet infrastructure.

Re: We have 4 days to contest KYC being required by internet services

#166
post #153
post #127

Earlier quoted context omitted.

Why is it so hard time for some of this site to understand that some of us are principled when it comes to choosing technologies? Or you know, actually learned from past trauma and make choice to avoid getting burned in the future.

Not all of us are enlightened. Wouldn't you mind telling us what those technologies are?

Ansible comes to mind. Used it to orchestrate hundreds of servers with migrations. Could also simply set up proxmox services beforehand if you're truly motivated, then just replicate the server to another instance.

Re: We have 4 days to contest KYC being required by internet services

#167
post #78

Earlier quoted context omitted.

What laws are you talking about? The Internet has grown a lot that’s largely because we have smart politicians and strong institutions. I really think the regulation of the Internet has been amazingly good.

For example: CAN-SPAM. If I want to send emails to a list, I have to burn $90 of my scarce dollars every year just for a PO box for the address at the bottom on the off chance someone sends a letter to unsubscribe. Unless I want to put my home address in every email, which I don't, and no one should. Unsubscribe links and highly effective spam filters were already completely standard when the law was passed in 2003.…

Eh, unsubscribe links were definitely not universal in 2003 and they barely are today. But the situation has definitely improved in the last 20 years.

Re: We have 4 days to contest KYC being required by internet services

#168

Earlier quoted context omitted.

Dreamhost, Wordpress, etc

Wordpress clearly does not meet the definition of IaaS in the document. > provides processing, storage, networks, or other fundamental computing resources, and with which the consumer is able to deploy and run software that is not predefined, including operating systems and applications

Services like Github Actions, Google Collab, and web-based IDEs likely meet this definition though as it lets users execute their own custom code on their cloud. So basically all developer stuff may require an ID check.

Re: We have 4 days to contest KYC being required by internet services

#169

- "To Address the National Emergency" A fast-moving emergency that can't be fixed by normal constitutional lawmaking processes, and must resort, exceptionally, to executive-branch emergency decrees—for expedience. Nevermind the executive order it's drawing authority from was written three years ago. It was a fast-moving emergency then, too, I suppose. https://www.federalregister.gov/documents/2021/01/25/2021-01... (…

So national security trumps democracy and freedom? What do you have left to protect when you give it all up? Might as well just elect a king and be done with it.

[deleted]

Re: We have 4 days to contest KYC being required by internet services

#170
post #53

Earlier quoted context omitted.

The fourth amendment? > “The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no Warrants shall issue, but upon probable cause, supported by Oath or affirmation, and particularly describing the place to be searched, and the persons or things ...

How does verifying your identity in any way violate that, though? You have a physical address that you live at, and the government verifies that you are the person living at that address, and that is not violating the fourth amendment. This would be pretty similar to that.

The fourth amendment requires probable cause of a crime prior to being forced to identify yourself. This rule is forcing companies to verify the identities of their customers on behalf of the government for vague national security reasons.
Post reply on HN