News for hackers. Stuff that matters.

A comment on Tea app leak worsens with second database exposing user chats. Parent comment

Re:Tea app leak worsens with second database exposing user c... by gruez on Monday July 28, 2025 @09:10PM (#44717817)
Any sort of fintech (including crypto exchanges) is going to require photo ID scans (and possibly even some sort of live selfie stream, to make sure the scan isn't from some leak) for KYC reasons.
[ Parent | on HN ]
Re:Tea app leak worsens with second database exposing user c... by rsync on Tuesday July 29, 2025 @02:01PM (#44726461)
Our common, accepted knowledge - and what we should demand - is that all KYC be concentrated in actual banks.

Actual banks (not fintech barnacles) enjoy a very privileged position in terms of verifying identity and legal mechanisms afforded to them.

If a non-bank actor can verify against an actual bank, that should be enough…

It is absurd that, for instance, a small saas/iaas provider should perform any form of KYC when we can match a successful payment against a bank.

[ Parent | on HN ]