It’s certainly interesting seeing the thread get attacked so obviously - that’s a first as far as I’ve seen on HN.

In terms of the actual story I think that we should be careful not to introduce insane KYC for contractors just to avoid the NK boogeyman.

If such measures were introduced, that would seriously restrict the ability to work with people from around the world. I also fear that scammy companies such as id.me will lobby for such measures in order to extract profit from companies who want to contract abroad, all the while not actually stopping sophisticated threat actors.