Live data from Hacker News

I verified my LinkedIn identity. Here's what I handed over

thelocalstack.eu

281–290 of 516 posts

Re: I verified my LinkedIn identity. Here's what I handed over

#281

Earlier quoted context omitted.

> American companies don’t owe your European nationalist ambitions a dime. Use their products at your own discretion. As a fairly vociferous eu person....I fully agree. However, gdpr covers all eu residents, so if US companies don't want to obey eu law, that'sa fine, too.

Nobody is forcing you to use LinkedIn. LinkedIn is an American product, made by an American company in America, subject to American law. When you create an account - you agree to American terms and conditions, arbitrated by American courts. LinkedIn doesn't need to obey to EU law. It needs to obey to American law, which allows LinkedIn to do business with anybody (other than people from sanctioned countries) whilst c…

> you agree to American terms and conditions, arbitrated by American courts.

"Designated Countries. We use the term “Designated Countries” to refer to countries in the European Union (EU), European Economic Area (EEA), and Switzerland."

"If you reside in the “Designated Countries”, you are entering into this Contract with LinkedIn Ireland Unlimited Company (“LinkedIn Ireland”) and LinkedIn Ireland will be the controller of your personal data provided to, or collected by or for, or processed in connection with our Services."

"If you live in the Designated Countries, the laws of Ireland govern all claims related to LinkedIn's provision of the Services" "With respect to jurisdiction, you and LinkedIn agree to choose the courts of the country to which we direct your Services where you have habitual residence for all disputes arising out of or relating to this User Agreement, or in the alternative, you may choose the responsible court in Ireland."

Source: https://www.linkedin.com/legal/user-agreement

I'm not sure from where you got your information.

Re: I verified my LinkedIn identity. Here's what I handed over

#282
post #107

Earlier quoted context omitted.

The original version of the LinkedIn mobile app uploaded your personal contacts stored on your smart phone and SIM to their server (to also "invite" them), without requesting user permission. After that, I never installed it again (but too late), and I bought a second (non-smart) phone.

WhatsApp infamously did just that. It vacuumed the contacts and spammed them with "Join me on WhatsApp". One of the reasons for their initial exponential growth.

Almost everything coming out of Silicon Valley has an unethical past(present?) if you look at it a bit more closely.

Re: I verified my LinkedIn identity. Here's what I handed over

#283

Earlier quoted context omitted.

Let’s not forget Persona is linked to Peter Thiel. When Thiel and his friends support the government snatching citizens off the streets, there is unacceptable risk with forcing job seekers and the like to create accounts on LinkedIn.

>Thiel and his friends support the government snatching citizens off the streets What's the story here?

The Palantir app helping ICE raids in Minneapolis: https://news.ycombinator.com/item?id=46633378

ICE using Palantir tool that feeds on Medicaid data: https://news.ycombinator.com/item?id=46756117

Re: I verified my LinkedIn identity. Here's what I handed over

#284

Persona do not seem to be competent guardians of such a trove of private information. https://vmfunc.re/blog/persona

You can follow the discussions between that blogger and the CEO btw - https://x.com/rickcsong/status/2025038040599810385

    Persona was not hacked. No database was breached.  Frontend code source maps were leaked, 
    which means unminified variable names were exposed revealing all the names of our features. 
    These names are already publicly listed in @Persona_IDV's help center and API documentation.

Re: I verified my LinkedIn identity. Here's what I handed over

#285
This is a little unnerving because I know I've had to provide similar ID verification somewhere online, but I can't remember where. And based on everything here, it was almost certainly Persona.

I guess I'll just be in the corner crossing my fingers none of it is found in a hostile foreign land or used against me.

Re: I verified my LinkedIn identity. Here's what I handed over

#286
post #192

I almost fell for a very sophisticated phishing attack last December and most of the "verifiable" information was from my LinkedIn account. For each role I had described some of the tasks and accomplishments and this was used in the phishing message. Since then, I removed my photo, changed my name only to initials and removed all the role-specific information. It's a bit of a bummer as I'm currently in the process of…

I'm routinely shocked how biased people I work with are against individuals without a linkedin page. So many hiring managers across 15 years in my industry won't consider people without pages. One guy goes on rants how people are "sketchy" if they don't have a verified page and a lot of skill endorsements and testimonials! He'll pull up our vendors pages and check them out during meetings, complain if it isn't availa…

I agree for in-person jobs.

For remote jobs with remote interviews, not having a LinkedIn page or having a LinkedIn page full of generic information that can be disproven by a quick background check are common traits of scam applicants.

A friend’s employer started requiring more verification after they hired a group of remote workers who would some times connect from North Korean IPs when they made a mistake with their VPN.

Re: I verified my LinkedIn identity. Here's what I handed over

#287

Seeing some of my colleagues verify through Persona on LinkedIn, and I can't quite figure out what they're getting out of it. Every hiring process I've been through already requires proof of identity at some point. Background checks, I-9s, whatever it may be. So you're essentially handing your ID to a third party just to get a badge that doesn't skip any steps you'd have to do anyway.

It does provide an advantage when applying to remote jobs at some companies. They try to filter scammer applicants out early and the verified profile is one signal they look for.

Depends on the company, but in a competitive job market any extra signal can help.

There are a crazy number of fake LinkedIn profiles out there that are used for scamming companies or people.

Re: I verified my LinkedIn identity. Here's what I handed over

#288
I'll note that Persona's CEO responded on LinkedIn [1] pointing out that:

  - No personal data processed is used for AI/model training. Data is exclusively used to confirm your identity.
  - All biometric personal data is deleted immediately after processing.
  - All other personal data processed is automatically deleted within 30 days. Data is retained during this period to help users troubleshoot.
  - The only subprocessors (8) used to verify your identity are: AWS, Confluent, DBT, ElasticSearch, Google Cloud Platform, MongoDB, Sigma Computing, Snowflake
The full list of sub-processors seems to be a catch-all for all the services they provide, which includes background checks, document processing, etc. identity verification being just one of them.

I have I've worked on projects that require legal to get involved and you do end up with documents that sound excessively broad. I can see how one can paint a much grimmer picture from documents than what's happening in reality. It's good to point it out and force clarity out of these types of services.

[1]: https://www.linkedin.com/feed/update/urn:li:activity:7430615...

Re: I verified my LinkedIn identity. Here's what I handed over

#289
post #281

Earlier quoted context omitted.

Nobody is forcing you to use LinkedIn. LinkedIn is an American product, made by an American company in America, subject to American law. When you create an account - you agree to American terms and conditions, arbitrated by American courts. LinkedIn doesn't need to obey to EU law. It needs to obey to American law, which allows LinkedIn to do business with anybody (other than people from sanctioned countries) whilst c…

> you agree to American terms and conditions, arbitrated by American courts. "Designated Countries. We use the term “Designated Countries” to refer to countries in the European Union (EU), European Economic Area (EEA), and Switzerland." "If you reside in the “Designated Countries”, you are entering into this Contract with LinkedIn Ireland Unlimited Company (“LinkedIn Ireland”) and LinkedIn Ireland will be the control…

Nobody cares. They keep a skeleton crew office in the EU for compliance purposes only. Whether they have an office in the EU or not is inconsequential. If they closed it tomorrow, the EU would literally have nothing to go after...

Re: I verified my LinkedIn identity. Here's what I handed over

#290
post #288

I'll note that Persona's CEO responded on LinkedIn [1] pointing out that: - No personal data processed is used for AI/model training. Data is exclusively used to confirm your identity. - All biometric personal data is deleted immediately after processing. - All other personal data processed is automatically deleted within 30 days. Data is retained during this period to help users troubleshoot. - The only subprocessor…

All of those statements require trust and/or the credible threat of a big stick.

Trust needs to earned. It hasn't been.

The big stick doesn't really exist.

Post reply on HN