Live data from Hacker News

We have 4 days to contest KYC being required by internet services

federalregister.gov

321–330 of 395 posts

Re: We have 4 days to contest KYC being required by internet services

#321
post #209

Earlier quoted context omitted.

Amazon is certainly supposed to ensure that you are not a sanctioned person or a citizen of a sanctioned country. This was a concern decades ago when I was in shared web hosting.. don't know why it would have changed?

When has big tech had a good history of proactive compliance?

I've been in big tech for a while and oh wow is there a lot of proactive compliance.

Re: We have 4 days to contest KYC being required by internet services

#322

Earlier quoted context omitted.

Aren't you basically revealing yourself anyway because you need to pay them?

Some hosts accept alternate payment systems, like gift cards or cryptocurrency. You can also have someone else pay for it with a credit card or bank transfer without giving your name, which can be quite important in some cases. The new rules would presumably make that a crime.

“Say you host spammers and scammers without saying you host them.”

Re: We have 4 days to contest KYC being required by internet services

#323
post #240

Earlier quoted context omitted.

From the executive order (Executive Order 14110) it seems to affect only massive compute infrastructure: > (i) any model that was trained using a quantity of computing power greater than 10^26 integer or floating-point operations, or using primarily biological sequence data and using a quantity of computing power greater than 10^23 integer or floating-point operations; and > (ii) any computing cluster that has a set…

No, that is just one part of it. The proposed rules are intended to cover both EO13984, which addresses foreign entities using US IaaS for Cyber attacks, and EO14110 which addresses foreign entities using AI hardware. They require all IaaS[1] to determine if customers are US persons, and if not to collect and retain certain identifying information[2], and provide annual reports describing their processes[3]. It grant…

> It grants the Secretary of Commerce extra-judicial power to force any IaaS to stop doing business with any foreign customer

This can backfire, as foreign customers of public clouds may switch to local providers, which erodes the US near-monopoly on cloud services. Ironically this can reduce the visibility and control the US government has over foreign nation states.

E.g.: most of the Australian government is hosted in either Azure or AWS. That kind of thing might stop if extrajudicial power is granted to pull the plug on any customer on any time.

Re: We have 4 days to contest KYC being required by internet services

#324
post #167

Earlier quoted context omitted.

Eh, unsubscribe links were definitely not universal in 2003 and they barely are today. But the situation has definitely improved in the last 20 years.

The point is the rules are daft. A sensible rule would require a functioning unsubscribe process in the email, which every piece of software would then automate as an unsubscribe link. The actual rule requires people to be able to unsubscribe via a postal mailing address , which is unreasonable and ridiculous.

I'm just saying, your earlier comment would have been better without the sentence: "Unsubscribe links and highly effective spam filters were already completely standard when the law was passed in 2003."

Re: We have 4 days to contest KYC being required by internet services

#325

Earlier quoted context omitted.

Tbh this is fine by me. It's about time the US stop being the center of the world for internet infrastructure.

i’m reading through the contrarian takes here and thinking, “yeah i’m kind of ok with that?” this would make it much trickier for bad actors to get away with everything from online ai scams to swatting. i could live with that.

It would not. They're financially motivated to do what they want. They will find a way around it. i.e. scaming the elderly to sign up for cloud services and proxying their KYC requirements.

There are scamers who walk seniors to sign up through Coinbase, the KYC requirements, to order bitcoin.

Re: We have 4 days to contest KYC being required by internet services

#326

Earlier quoted context omitted.

> That's a strawman [..] OK, I'll bite. How exactly are [US] domestic users of services supposed to prove they don't need to prove their identity? EDIT: it reminds me of the Common Travel Area (between Ireland and of the United Kingdom of Great Britain and Northern Ireland), which has some glorious inconsistencies. For instance that nationals of Ireland and the UK travelling between those two countries do not need a…

KYC stands for Know Your Customer, and is a core regulation in banking. So we can pivot off that and work through what a bank does to verify your identity. I signed up for a Mercury bank account a few months back for my Delaware corporation without talking to anyone, so I'll use that as a template. I can't remember the exact steps, but tl;dr submit a passport photo / driver's license photo and a photo I take in the a…

> a photo I take in the app itself

So what else did they pull off your phone? Location data, personal photos, personal files, wifi connections near by, microphone data, ongoing location data?

Re: We have 4 days to contest KYC being required by internet services

#327

Earlier quoted context omitted.

I think that the biggest argument in favour is that it would remove anonymity on the internet, at least from governments, and that could enable law enforcement to more easily find people committing real crimes. CSAM, scams, etc. I think the biggest argument against it is that this removes anonymity on the internet, at least from governments, and that would remove people's ability to freely voice their opinions withou…

Does this actually remove anonymity on the internet? It seems to de-anonymize a set of IaaS customers, sure; but that's not nearly the same thing as removing anonymity completely. I've only just scanned this but it seems at first glance to mean that a foreign company can't anonymously spin up an AWS instance, that's all. Am I reading this incorrectly?

This certainly makes it more hostile for an unsavory advocacy group to create a webpage and use the internet to organize a group to fight an anti-democratic bill.

Re: We have 4 days to contest KYC being required by internet services

#328
post #326

Earlier quoted context omitted.

KYC stands for Know Your Customer, and is a core regulation in banking. So we can pivot off that and work through what a bank does to verify your identity. I signed up for a Mercury bank account a few months back for my Delaware corporation without talking to anyone, so I'll use that as a template. I can't remember the exact steps, but tl;dr submit a passport photo / driver's license photo and a photo I take in the a…

> a photo I take in the app itself So what else did they pull off your phone? Location data, personal photos, personal files, wifi connections near by, microphone data, ongoing location data?

None of those, just asked for the photo

Re: We have 4 days to contest KYC being required by internet services

#330
post #326

Earlier quoted context omitted.

> a photo I take in the app itself So what else did they pull off your phone? Location data, personal photos, personal files, wifi connections near by, microphone data, ongoing location data?

None of those, just asked for the photo

You said it was their app correctly?

Have you validated that they didn't take the other bits off your phone?

Post reply on HN