Live data from Hacker News

Launch HN: Berbix (YC S18) – Instant ID checks to fight fraud and stay compliant

news.ycombinator.com

41–50 of 57 posts

Re: Launch HN: Berbix (YC S18) – Instant ID checks to fight fraud and stay compliant

#41
post #32

Earlier quoted context omitted.

So you require someone's PICTURE to deliver the data you gathered on that person? To further augment your digital stash? Or train your models to recognize said person? (after which you delete the picture, logical - storage space costs money) I hope I'm wrong somewhere. If I'm not, I don't think I want to do business with you, or to ever have my ID checked by you if it means you'll get to keep my data- then ask me for…

As OP in this thread, this is a complete mis-read of the situation; you should re-read the other comments and consider removing this one.

They say the photo is to make sure someone is not using a copied ID - I believe them. Makes sense.

They say the photo will be removed - I believe them. GPDR, California laws, good will, storage is expansive, etc.

What I won't trust anyone with, is what they will do with the data created from this photo that is not the photo itself.

Re: Launch HN: Berbix (YC S18) – Instant ID checks to fight fraud and stay compliant

#42

Nice! ID checks are so prevalent that I really wouldn't mind a stripe-esque provider mediating it. I stumbled on Indian government's effort to address this problem via https://digilocker.gov.in/ I think they basically store photos of you, your govt IDs (driving license, social security etc), your records (educational, financial) and digitally verify it with the issuer of those records (in most cases, other govt agenc…

there are a bunch of them out there already...

idology

jumio

identity mind

onfido...

Re: Launch HN: Berbix (YC S18) – Instant ID checks to fight fraud and stay compliant

#43

A few questions: 1. "images that leave our system..." Why do they at all?? -- 2. You're a startup. Meaning: 90%+ chance you die. What procedures have you put in place to make sure that ALL the data is destroyed in case your company changes hands, so that it cannot be used by somebody whose ideas and privacy are different than yours, simply by buying you (or your carcass after you are bankrupt)? -- 3. What use is wate…

Appreciate the thoughtful questions. On the point of why images leave our system at all, we provide a way to show our work to our customers — they won’t trust our results if they can’t see that they’re accurate. When they access information on our dashboard, if we render the images, they’ve left our systems. To be clear, we’re not syndicating this information to any third parties, just showing this information direct…

Cannot be used out of embarrassment, or you are actually ‘de-facing’ the identity?

For example, shutterstock logo sure doesn’t stop people from using those. Plus there are open source tools to reverse such watermarking.

Re: Launch HN: Berbix (YC S18) – Instant ID checks to fight fraud and stay compliant

#44
post #36

"Pay-as-you-go pricing for growing startups." $100 / month is NOT "Pay-as-you-go" pricing.

Pay-as-you-go can mean not committed term: stop going, stop paying. If it’s “month to month”, that counts.

Pay-as-you-go doesn’t necessarily mean usage-based pricing.

Re: Launch HN: Berbix (YC S18) – Instant ID checks to fight fraud and stay compliant

#45
Berbix looks good.

We need to compare the face on the user's ID card against other user-provided photos to see if they are the same person. Will the 'images.front.face_image' watermark interfere with face analysis?

Twilio's Lookup API can return extra data from various databases. Have you considered doing something similar with Berbix Verify? We would be interested in sex-offender registration status, violent crime conviction status, and home geographic area. Various demographic info could also be useful: education level, employment status, income/asset level, etc.

Re: Launch HN: Berbix (YC S18) – Instant ID checks to fight fraud and stay compliant

#47
post #38
post #33

privacy-first approach So, let's take a look at your terms.[1] However, we cannot guarantee that unauthorized third parties will never be able to defeat our security measures or use your personal information for improper purposes. You should always use caution before sharing your sensitive personal information online. we each agree to resolve any claim, dispute, or controversy (excluding any claims for injunctive or…

Thanks for taking the time to carefully read our terms of service! We share your point of view that these aren't merely a series of boxes to check. Our “privacy-first” claims are namely three-fold: 1. We limit the data returned to our customers and enforce a maximum data retention period after which data is permanently deleted. We encourage customers to reduce the amount of data they need and the number of days it mu…

Commenting as an uninvolved bystander: your entire reply sounds like corporate-speak to me, and it's offputting. I get that you're trying to state your intent, and perhaps English isn't your native language, but it's deterring me from looking further into Berbix. Also, your second claim really just seems to be a lock-in, not a user-friendly positioning.

Re: Launch HN: Berbix (YC S18) – Instant ID checks to fight fraud and stay compliant

#48
post #38
post #33

privacy-first approach So, let's take a look at your terms.[1] However, we cannot guarantee that unauthorized third parties will never be able to defeat our security measures or use your personal information for improper purposes. You should always use caution before sharing your sensitive personal information online. we each agree to resolve any claim, dispute, or controversy (excluding any claims for injunctive or…

Thanks for taking the time to carefully read our terms of service! We share your point of view that these aren't merely a series of boxes to check. Our “privacy-first” claims are namely three-fold: 1. We limit the data returned to our customers and enforce a maximum data retention period after which data is permanently deleted. We encourage customers to reduce the amount of data they need and the number of days it mu…

If your primary business is trust, you have to commit contractually to back it. Not just make "claims".

Re: Launch HN: Berbix (YC S18) – Instant ID checks to fight fraud and stay compliant

#49

disclaimer: I know some of the folks involved with Berbix I love this, for the same reason I love Stripe (and before them authorize.net et al): I don't want every vendor I use that has KYC requirements to implement their own controls on the screenshots/scans/videos/whatever of government IDs, because then there will be a huge amount of variation and some of them will inevitably get it very very wrong. Putting it all…

Not really following your logic. Why do you care as a customer if there’s variation in KYC requirements from vendor to vendor?

Also not sure why this makes handling ID information “safer.” The vendor using this service still has access to all the images (ID and selfie) and data returned to them from this API that they can store a copy of on their own servers forever. This is not like your Stripe analogy where you only get the token and not the actual card number.

Re: Launch HN: Berbix (YC S18) – Instant ID checks to fight fraud and stay compliant

#50
post #38
post #33

privacy-first approach So, let's take a look at your terms.[1] However, we cannot guarantee that unauthorized third parties will never be able to defeat our security measures or use your personal information for improper purposes. You should always use caution before sharing your sensitive personal information online. we each agree to resolve any claim, dispute, or controversy (excluding any claims for injunctive or…

Thanks for taking the time to carefully read our terms of service! We share your point of view that these aren't merely a series of boxes to check. Our “privacy-first” claims are namely three-fold: 1. We limit the data returned to our customers and enforce a maximum data retention period after which data is permanently deleted. We encourage customers to reduce the amount of data they need and the number of days it mu…

How can you force your customers to have a retention period for data you provide them? They could just keep a copy, and you'd never know.
Post reply on HN