Hacker News Reader

Comment by nout | Hacker News Reader

Or maybe the government should not require companies to KYC you for every little stupid thing or action you do in this world. What happened to requiring only the information that's actually required? Why do I need to be KYCd in the systems when buying banana, ordering delivery, etc.

Because of the inevitable breaches and leaks - KYC is the illicit activity. The selling point of KYC was preventing fraud and money laundering. It doesn't actually do that. Search for "largest money laundering settlements" and you will find 5 banks and one crypto scam.

View on HN

> Or maybe the government should not require companies to KYC you for every little stupid thing

Actually....

Say what you like about the French today, but one good thing they have is an electronic service[1] where you can generate single-use KYC ID:

    - That only discloses minimum information required
    - For a specific recipient organisation
    - For a specific duration
    - For a specific use-case by that organisation

More countries should provide this sort of KYC tool.

[1]https://france-identite.gouv.fr/usages/le-justificatif-d-ide...

It looked great and I wanted to try it, but it doesn't work on the web and my smartphone is rejected with no clear explanation ("missing some security mechanisms"); probably because I'm running LineageOS with MicroG.

Proving* that the KYC implementation is bogus as it relies on GSF. *Probably.

Why do I have to learn about it on HN?

I'm tired of having to connect on EDF' shitty website to get a new PDF every three months.

I just set it up!

A bit bumpy because login on Ameli/Impôts wasn't working on Orion so I had to go on Safari, but otherwise its done. I even have colored pictures on the virtual CNI/Permis!

Thanks!

EDIT: Why do the put three stats about trains on your linked page?!

> I'm tired of having to connect on EDF' shitty website to get a new PDF every three months.

It doesn't look like this app can generate "justificatifs de domicile", only substitutes for an identity card or passport.

> Why do the put three stats about trains on your linked page?!

I was wondering about that too

> It doesn't look like this app can generate "justificatifs de domicile", only substitutes for an identity card or passport.

You're absolutely right! Damn!

At least it should make it easier to use France Connect with the QR code stuff instead of the credentials from other websites...

It's a pity this doesn't work for foreigners resident in France.

I'm not exactly sure of the details, but isn't this similar to DigiD in NL? There too you can "prove your Identity and log in" via the govt app. The server side of the 3rd party has to handle the rest (eg user account information etc.), nothing is shared beyond "this is the guy who's signing in, verified by the govt".

Wish entities who handle Aadhar in India be required to accept the one-time Virtual Aadhar. Its a quick online and SMS-only process. Seems everybody forces you to hand over your permanent Aadhar, including the ID verification partner for Paypal.

The overreach on access and then storage will be a meaningful issue we will have to reckon with more and more. Companies are acquired, companies die. What happens to your data in 5, 15, 50 years? It doesn’t just disappear.

From a few months back: https://mjeggleton.com/blog/your-data-never-dies

So that if you ever step out of line with regards to what the government deems "worthy" behavior (whatever the hell that means at any given moment) you can be de-banked and effectively excluded from participating in society

I’m not versed in the French system specifics, but know a bit about the Belgian itsme. It’s up to the companies to specify which scopes and data bits they want. The better government agencies only ask for your ID number and proof that you’re you. Corporate users tend to ask for absolutely everything in your profile.

Might be cheaper & safer to buy an identity than use my own.

KYC: Know your customer or know your client (KYC) laws, regulations and guidelines in financial services require regulated businesses and professionals to verify the identity, suitability, and risks involved with maintaining a business relationship with a customer.

https://en.wikipedia.org/wiki/Know_your_customer

Yeah, it should be made illegal to hold like, more than x columns of PII per entity or bank branch or something. It's just not smart to allow big database of everyone to be made and to expect you stay the one to abuse than to be nails that gets beaten using it.

Reply on news.ycombinator.com