421–430 of 516 posts
Earlier quoted context omitted.
Why would we believe they are deleted after processing and not shared with the government?
What's the government going to do with a picture of the ID they, themselves issued to you?
I don't get the whole idea of treating identity verification as a private enterprise problem. I realize it's easy to just blame LinkedIn or Microsoft here, but the core issue is architectural. We are trying to solve a public utility problem by building private honeypots. The government should provide an API or interface to validate a user, essentially acting just like an SSO. Instead of forcing users to upload raw pa…
This does not conform to the requirements of american KYC/AML provisions that require KYC service to store and leak PII.
I've been getting "Emails aren’t getting through to one of your email addresses. Please update or confirm your email." -- even tho I get messages from them every day. When you press the button to confirm the (working) email it states "Something went wrong". It happened last week too, I was able to fix it via their chat-help (human). Yesterday, their chat-help (human) was not able fix it and has to open a ticket. I pa…
> Emails aren’t getting through to one of your email addresses Do you block remote image loading? They are probably measuring via tracking pixels.
I'm glad the absurdity of verification is getting attention. I was "forced" to verify by Linkedin to unlock my account. It was last year, and I had left my previous job, but I had not yet lined up a new job. So one of the only times in my career I might actually get value from Linkedin, they locked me out, removed my profile, and told me if I wanted back in, I'd have to verify. I felt helpless and disgusted. I gave i…
> I'm glad the absurdity of verification is getting attention It's not. The developers' bubble we're in on the HN is invisibly tiny compared to the real life. And normies are not only perfectly happy uploading all their PII to Persona - they won't even understand what's wrong with that.
There has also been a backlash against verification in other communities like Reddit (also a bubble), mainly stemming from Discord's recent announcement.
The discourse is good, and while I wish every user and potential user understood all the pros, cons, and ramifications, I'm also happy we are finally talking about it in our bubbles.
Earlier quoted context omitted.
>Let that sink in That's a hallmark of GPT spam, so it's not surprising there's hallucinations.
and "That blue badge might not be worth what you’re trading for it. A checkmark is cosmetic. Biometric data is forever." I like the article, but I think it was nearly wholly LLM-generated. It's a shame that this contrived writing style is becoming so commonplace. Just annoying, more than anything.
I used to have a LinkedIn account, a long time ago. To register I created an email address that was unique to LinkedIn, and pretty much unguessable ... certainly not amenable to a dictionary attack. I ended up deciding that I was getting no value from the account, and I heard unpleasant things about the company, so I deleted the account. Within hours I started to get spam to that unique email address. It would be int…
Remember when LinkedIn was condemned because they copied Gmail’s login page saying “Log in with Google”, then you entered your password, then they retrieved all your contacts, even the bank, the mailing lists, your ex, and spammed the hell out of them, saying things in your name in the style of “You haven’t joined in 5 days, I want you to subscribe” ?
Now lots of contact forms (not even necessarily job related!) are treating it as a required field. Pretty distasteful situation.
I'll note that Persona's CEO responded on LinkedIn [1] pointing out that: - No personal data processed is used for AI/model training. Data is exclusively used to confirm your identity. - All biometric personal data is deleted immediately after processing. - All other personal data processed is automatically deleted within 30 days. Data is retained during this period to help users troubleshoot. - The only subprocessor…
What possible use legitimate use is Snowflake in verifying your identity? ES?
If you fly to US, Singapore, and many other countries these days, your face will be photographed and the photo will be matched to your passport photo via facial recognition (the machine tells you that outright, and does the action on the spot). They also take your right hand fingerprints.
I think flying to a country is a whole lot different than a little tickmark on a website, sorry. Don't forget that if you fly to a country you are also bound by their laws. They can do anything to you as long as they can make it stick under their laws. It's one thing that people often don't realise when flying somewhere, you are basically giving a blanket submission to their laws! For this reason I have a long blackl…
Earlier quoted context omitted.
"Spyware" doesn't quite capture it. It's "intelligence platform" in the sense that you can gain a ton of information on individuals, organizations, and relationships that drive it all. If you can track how people move and interact between organizations, you can determine who someone is doing business with and even make an educated guess if that's a sale or interview. I started writing about it almost 20 years ago: ht…
Bro if you want people to read your stuff. Don't require java script to view the page. Smart people block that stuff.
I'll note that Persona's CEO responded on LinkedIn [1] pointing out that: - No personal data processed is used for AI/model training. Data is exclusively used to confirm your identity. - All biometric personal data is deleted immediately after processing. - All other personal data processed is automatically deleted within 30 days. Data is retained during this period to help users troubleshoot. - The only subprocessor…
I thought everyone, at least in security would be somewhat concerned about this, but they're not. I get the benefits, and I want to enjoy those benefits too. I'd much prefer if I could privately confirm my name using IDs (zero problem with that) but then not have to show it or an exact profile photo. I'm sure there's a cryptographic way for my identity to be proven to any who I chose to prove it to who required such bona fides. I dislike the surface of "proven identity for everyone". You know?
This to me is the far more important thing than: "security focused biometric company processed my data, therefore being rational and modern I will now have a meltdown." Everytime you drive, use a payment method linked to your name, use your plan phone, your laptop, go to a venue that ID scans, make a rental, catch a flight, cross a border, etc, your ID (or telemetric equivalents sufficient to ID you) is processed by some digital entity. If you will revolt against the principle of "my government issued and not-truly-mine-anyway ID documents, or other provided bona fides are being read by digital entities contracted to do that", it seems nonsensical.
I think the bigger risk is always taking a photo of your passport and putting it on the internet, which is basically what the current LI verification means. Casual OSINT on a verified profile likely reveals the exact birthday (or cross-referenced on other platforms), via "happy birthday" type posts. How old am I type image AI can give you rough years.