News for hackers. Stuff that matters.
Re:Ask HN: Would you send a photo holding your drivers licen... by pants2 on Wednesday May 08, 2024 @08:55PM (#40304219)
AFAIK there's a new law requiring KYC for IaaS providers serving the US. I'm assuming it covers their butts as well regarding malicious activity, they don't want to host a DoS attack, CP site, or similar. You might be hard pressed to find a hosting provider in the US that doesn't ask for these things.
Re:Ask HN: Would you send a photo holding your drivers licen... by natejlong on Wednesday May 08, 2024 @09:30PM (#40304386)
It's only a recent proposal in the US, not law, if you're talking about what I think you are:

https://torrentfreak.com/u-s-know-your-customer-proposal-wil...

>>> Late January, the U.S. Department of Commerce published a notice of proposed rulemaking for establishing new requirements for Infrastructure as a Service providers (IaaS) . The proposal boils down to a 'Know Your Customer' regime for companies operating cloud services...

Re:Ask HN: Would you send a photo holding your drivers licen... by arealaccount on Wednesday May 08, 2024 @09:16PM (#40304320)
I’ve never seen this, maybe Im missing context? Amazon/Google/etc don’t require pictures of ID and CC?
Re:Ask HN: Would you send a photo holding your drivers licen... by pctTCRZ52y on Wednesday May 08, 2024 @09:26PM (#40304362)
agreed, I don't recall any large cloud or VPS provider asking for an ID.. maybe a French thing?
Re:Ask HN: Would you send a photo holding your drivers licen... by lolinder on Wednesday May 08, 2024 @09:35PM (#40304429)
This is probably what you're thinking of [0]. The comments period is closed, but as far as I know it hasn't actually become a rule yet, and regardless:

* The rule would only apply to people living outside the US, so if you pay with a credit card with a billing address in the US from an IP in the US they probably wouldn't need to KYC you.

* KYC != "send me a photo of you holding your driver's license". I can open a bank account by just typing in my name, address, birthday, and SSN. That's enough KYC for a bank, it would be more than enough for a hosting provider even if that proposed rule became law.

What this company is asking for is beyond the pale even by full finance KYC standards. The most likely explanation is that an automated fraud detection system got set off and OP was selected for a much more rigorous review than they typically do.

[0] https://news.ycombinator.com/item?id=40158752

Re:Ask HN: Would you send a photo holding your drivers licen... by pants2 on Thursday May 09, 2024 @12:13PM (#40309710)
That is what I'm thinking of, thanks for the context
Re:Ask HN: Would you send a photo holding your drivers licen... by KomoD on Wednesday May 08, 2024 @09:17PM (#40304325)
Source? OVH has had this for years.