Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

I verified my LinkedIn identity. Here's what I handed over

thelocalstack.eu

Post reply on HN
Print view View original

321–330 of 516 posts

Re: I verified my LinkedIn identity. Here's what I handed over

#321

Post by egorfine »

laszlojamf wrote: post #133

I work in this space for a competitor to Persona, so take my opinion as potentially biased, but I have two points: 1. just because the DPA lists 17 subprocessors, it doesn't mean your data gets sent to all of them. As a company you put all your subprocessors in the DPA, even if you don't use them. We have a long list of subprocessors, but any one individual going through our system is only going to interact with two…

> I work in this space for a competitor to Persona

So that means you are participating in the evil that KYC services are.

Re: I verified my LinkedIn identity. Here's what I handed over

#322

Post by Saline9515 »

wolvoleo wrote: post #200
Saline9515 wrote: post #135

Earlier quoted context omitted.

The US is not just alone, EU governments are fully cooperating, happily. A Microsoft official explained during a french parliamentary session that he couldn't guarantee that the State data was safe from US requests. It created a shockwave, as everyone discovered what was evident from the start. Of course, nothing happened, and they renewed every contract since then. We could talk about the F35 procurement.

They renewed every contract, but the French government is hard at work at replacements for Microsoft stuff, called 'la suite'. The Germans are doing the same under the name 'opendesk' and the suite shares a lot of common tools in fact. This predates Trump II by the way, they did have more foresight than a lot of EU institutions. Things have changed for sure but big ships take long to turn.

There are already credible alternatives, from the EU, which do not require rebuilding everything from scratch. OnlyOffice, for instance. The french government's job isn't to write a new office SaaS suite.

Re: I verified my LinkedIn identity. Here's what I handed over

#323

Post by egorfine »

eel wrote: post #100

I'm glad the absurdity of verification is getting attention. I was "forced" to verify by Linkedin to unlock my account. It was last year, and I had left my previous job, but I had not yet lined up a new job. So one of the only times in my career I might actually get value from Linkedin, they locked me out, removed my profile, and told me if I wanted back in, I'd have to verify. I felt helpless and disgusted. I gave i…

> I'm glad the absurdity of verification is getting attention

It's not. The developers' bubble we're in on the HN is invisibly tiny compared to the real life. And normies are not only perfectly happy uploading all their PII to Persona - they won't even understand what's wrong with that.

Re: I verified my LinkedIn identity. Here's what I handed over

#324

Post by BorisMelnik »

majormajor wrote: post #294
aylmao wrote: post #288

I'll note that Persona's CEO responded on LinkedIn [1] pointing out that: - No personal data processed is used for AI/model training. Data is exclusively used to confirm your identity. - All biometric personal data is deleted immediately after processing. - All other personal data processed is automatically deleted within 30 days. Data is retained during this period to help users troubleshoot. - The only subprocessor…

But why believe that when their policy says any of it may not be true, or could change at any time? Even if the CEO believes it right now, what if the team responsible for the automatic-deletion merely did a soft-delete instead of a hard delete "just in case we want to use it for something else one day"?

I dont believe that for one second. I can think of many examples of times CEO's have said things publicly that were not or ended up being not true!

Re: I verified my LinkedIn identity. Here's what I handed over

#325

Post by jungturk »

afh1 wrote: post #227

>The legal basis? Not consent. You read and agreed with the terms explicitly stating the data would be used to do those things, and it was not at all necessary for you to do that. What else do you want? It seems like consent isn't the issue. You just don't like what this company does, and still volunteer your data for them to do just that. Now you regret it and write a blog post? One thing is to be tricked or misled,…

"Consent" and "Legitimate Interest" are legal terminology - they're two bases defined in GDPR and have different implications and requirements for balancing user and processor interests.

When the author says that Persona claims the "legitimate interest" basis for these data, they're saying that Persona is trying to achieve maximum flexibility for using the data (since "consent" generally requires specific agreement on a specific use for the data, and the burden of maintaining the consent records, where "legitimate interest" does not).

https://www.bulletproof.co.uk/blog/consent-vs-legitimate-int...

Re: I verified my LinkedIn identity. Here's what I handed over

#326

Post by csmpltn »

lejalv wrote: post #310
csmpltn wrote: post #289

Earlier quoted context omitted.

Nobody cares. They keep a skeleton crew office in the EU for compliance purposes only. Whether they have an office in the EU or not is inconsequential. If they closed it tomorrow, the EU would literally have nothing to go after...

You're saying they are buccaneers, and validating that as the fundamental working principle of American capitalism.

Call them whatever you want. All I'm saying is that Europeans are hypocrites for fucking over their greatest ally via unenforceable and anti-competitive regulation that's not worth the paper it's written in (and that European institutions have even exempted themselves from). The one ally that they desperately depend on for safety and security, technology, medicine, research, etc.

Re: I verified my LinkedIn identity. Here's what I handed over

#327

Post by flumpcakes »

egorfine wrote: post #318
aylmao wrote: post #288

I'll note that Persona's CEO responded on LinkedIn [1] pointing out that: - No personal data processed is used for AI/model training. Data is exclusively used to confirm your identity. - All biometric personal data is deleted immediately after processing. - All other personal data processed is automatically deleted within 30 days. Data is retained during this period to help users troubleshoot. - The only subprocessor…

A KYC provider is a company that doesn't start with neutral trust. It starts with a huge negative trust. Thus it is impossible to believe his words.

What does the (I assume) acronym KYC mean?

Re: I verified my LinkedIn identity. Here's what I handed over

#328

Post by tripdout »

flumpcakes wrote: post #327
egorfine wrote: post #318

Earlier quoted context omitted.

A KYC provider is a company that doesn't start with neutral trust. It starts with a huge negative trust. Thus it is impossible to believe his words.

What does the (I assume) acronym KYC mean?

Know Your Customer

Re: I verified my LinkedIn identity. Here's what I handed over

#329

Post by flumpcakes »

I am about to talk about "vibes" and "feelings" so please take this with a grain of salt:

Does anyone else get the impression that they feel like the nefarious surveillance state is now real and definitely not for their benefit?

It's been a long running trope of the men in black, and the state listening to your phone calls, etc. Even after Snowdon's leaks, where we learned that there are these massive dragnets scooping up personal information, it didn't feel real. It felt distant and possibly could have been a "probably good thing" that is it was needed to catch "the real bad guys".

It feels different now. Since last year, it feels like the walls are closing in a bit and that now the US is becoming... well, I can't find the words, but it's not good.

Re: I verified my LinkedIn identity. Here's what I handed over

#330

Post by yunnpp »

csmpltn wrote: post #201
Ylpertnodi wrote: post #114

Earlier quoted context omitted.

> American companies don’t owe your European nationalist ambitions a dime. Use their products at your own discretion. As a fairly vociferous eu person....I fully agree. However, gdpr covers all eu residents, so if US companies don't want to obey eu law, that'sa fine, too.

Nobody is forcing you to use LinkedIn. LinkedIn is an American product, made by an American company in America, subject to American law. When you create an account - you agree to American terms and conditions, arbitrated by American courts. LinkedIn doesn't need to obey to EU law. It needs to obey to American law, which allows LinkedIn to do business with anybody (other than people from sanctioned countries) whilst c…

I agree that people should just stay off LinkedIn. Keep your local job boards alive. That being said:

> LinkedIn doesn't need to obey to EU law.

This is false. A company must follow the law of the jurisdictions where it operates.

Post reply on HN