Live data from Hacker News

We have 4 days to contest KYC being required by internet services

federalregister.gov

331–340 of 395 posts

Re: We have 4 days to contest KYC being required by internet services

#331
post #127
post #71

Earlier quoted context omitted.

Wow, what layer of abstraction do you have that allows for that? Even with typical IaC, Terraform, it's going to be a rewrite. If you're leveraging anything beyond load balancers, compute, and containers I don't see how that approaches zero. Some of the services could end up with you having to build/run your own to get any equivalence.

Why is it so hard time for some of this site to understand that some of us are principled when it comes to choosing technologies? Or you know, actually learned from past trauma and make choice to avoid getting burned in the future.

Probably because most employees don't get to pick and choose the tech stacks? You're either being incredibly obtuse or I'm missing your point.

Re: We have 4 days to contest KYC being required by internet services

#332
post #330

Earlier quoted context omitted.

None of those, just asked for the photo

You said it was their app correctly? Have you validated that they didn't take the other bits off your phone?

Every modern smartphone has permissions on that stuff for years now. I don't self-peasantize with "but what if..."

Re: We have 4 days to contest KYC being required by internet services

#333

Earlier quoted context omitted.

True, I guess I wouldn't call it invading privacy, that's sounds a bit overwrought to me. Then banks invade my privacy, the DMV invades my privacy, etc. There's always tradeoffs, I respect people's concern about them, and I wish there was a gentler to say it.

> Then banks invade my privacy, the DMV invades my privacy, etc. That is a reasonable and factually accurate statement. > There's always tradeoffs, I respect people's concern about them, and I wish there was a gentler to say it. The tradeoff here is astonishingly bad. Studies have shown that AML/KYC have an effectiveness of less than a fraction of one percent. They continue to proliferate because their largest costs…

I had to look up what "effective" means in this context, found a couple crypto blogs using it as a talking point citing a 2011 UN study, the study says less than <1% of money laundering proceeds are confiscated worldwide, nothing about the laws. Money laundering is defined as an estimate of any money from illegal activity, including tax evasion.

Re: We have 4 days to contest KYC being required by internet services

#335
post #240

Earlier quoted context omitted.

No, that is just one part of it. The proposed rules are intended to cover both EO13984, which addresses foreign entities using US IaaS for Cyber attacks, and EO14110 which addresses foreign entities using AI hardware. They require all IaaS[1] to determine if customers are US persons, and if not to collect and retain certain identifying information[2], and provide annual reports describing their processes[3]. It grant…

> It grants the Secretary of Commerce extra-judicial power to force any IaaS to stop doing business with any foreign customer This can backfire, as foreign customers of public clouds may switch to local providers, which erodes the US near-monopoly on cloud services. Ironically this can reduce the visibility and control the US government has over foreign nation states. E.g.: most of the Australian government is hosted…

If they’re inspecting what people are running on GPU instances to report that information back to the US government it’s going to give a lot of people pause for thought. It’s basically violating guarantees that many businesses have with cloud providers.

Re: We have 4 days to contest KYC being required by internet services

#336
post #127

Earlier quoted context omitted.

Why is it so hard time for some of this site to understand that some of us are principled when it comes to choosing technologies? Or you know, actually learned from past trauma and make choice to avoid getting burned in the future.

Probably because most employees don't get to pick and choose the tech stacks? You're either being incredibly obtuse or I'm missing your point.

Uh, I not implying or saying anything about who has the power. My comment is kinda hard to read in any other way than directed at the people who chose to intimately tie their product up with a proprietary price-gouging, lock-in platform.

Idk, I guess if I take the less charitable read of your comment, ... if you're sitting here blaming your circumstances for not knowing anything other than how to spin up overpriced Amazon serives idk what to tell you.

Re: We have 4 days to contest KYC being required by internet services

#337

Earlier quoted context omitted.

Yeah this is a very industry standard term in banking and anyone in that industry is going to immediately know what you are talking about, but outside of that industry, chances are high that a layman will not

[flagged]

Except it’s goose that they’re cooking.

Re: We have 4 days to contest KYC being required by internet services

#338

There's a surprising amount of debate in this thread on the rights and wrongs of this topic. As a matter of simple efficiency, what I suggest to you all is that you imagine this was being rolled out by the British government. Because then you'd all be certain what it meant and what was necessary.

I can’t tell if you’re being sarcastic or not. I didn’t think the UK even provided IaaS services.

On the other hand it seems like half the business of The City is providing cover for dodgy foreign companies, which would be perfect for people trying to get around these laws.

Re: We have 4 days to contest KYC being required by internet services

#339

Earlier quoted context omitted.

Are you trying to argue that money is more important than banking? But that banking was the most important thing? Your logic elludes me. Or maybe you have a manipulative world view? What is more important - money or power? If you have power do you need money? Is power equivalent to money? "Money" is a means of exchange, and in some contexts it is a status signal. Money is a measure, not an ends in itself. People want…

Yes, I pay people do to work on difficult and annoying computer systems. Nobody would want to do this job for free.

Yes, rodger that, wealth is irrelevant to money - a concept plenty of people grok with time.

Your logic appears poor to me: perhaps that is why you employ logicians - money is your solution? Money doesn't write software, people do. People's motivations are crazy complex: which causes good or bad software to be created.

> Nobody

Somebody: My guest today was working for $0 on two systems (one maintenance, one he is developing). Both were difficult and annoying computer systems with a complex userbase. He didn't seem to really want to do the job: yet he was doing it for free (well, actually it was costing him)! Why does he need money if he gets his needs met by friends and acquantances. His only payment appears to be friendship and good company and his internal satisfaction (for varied reasons). I don't understand his motivations but yesterday he had said that offering him money would strongly demotivate him. Illogical?

Perhaps your philosophical world view has little overlap with mine. I have retired early so that is a signal that my world view is different from most people's. I haven't recently needed to buy development time so maybe my opinions are stale.

Re: We have 4 days to contest KYC being required by internet services

#340
post #13

What an absolute nightmare. I would also be surprised if iaas providers arent in vehement opposition, i will instantly migrate all cloud resources away from AWS if they start requiring KYC docs. Theres close to zero effort for doing so

I think this is about preventing sanctioned countries or individuals using US technology we don't want them to have access too (like China not having modern GPUs). That goal seems reasonable though there's always a fear that the law is way broader than the high level intent. Why would it be "an absolute nightmare" if it's so easy to migrate?

That's the stated goal. The actual goal is more likely complete knowledge of any person using IaaS service whether domestic or foreign and what they're up to.
Post reply on HN