undefined | Better HN

story

0 pointsvmception4y ago0 comments

What you are explaining to me is why you feel comfortable being able to prove your innocence if necessary. To that, good luck and it’s a pleasant way to view the world.

That has nothing to do with someone else leveraging gaps in the financial system and acknowledging those gaps exist. To that i would say AML/KYC/OFAC is the joke and should just be dropped since anyone can transfer any amount of value under someone else’s ID on a computer near where the compromised ID owner is expected to live.

There are open source tools to wear someone else’s face over webcam while holding up a doctored passport at 240p resolution. Even easier with a still image. And many places do not ask for more than just the ID itself.

I don’t really understand who the denial here is helping.

0 comments

marcus_holmes4y ago

I was thinking about this more...

If I say my passport number is 134563543, how does anyone check that? Is there a database of passport numbers and identities that can be checked?

I get that the ID process of camera-and-passport can be spoofed, but in the context of this particular data breach, that's irrelevant. If I can dummy up a passport that looks good enough over 240p resolution then it doesn't matter if it's my actual number or whatever. The process I've been through checks for the watermark/sheen on the passport, but if you can dummy a face then you can dummy some glittery lights fine.

My original question stands: do you just need the passport number to prove identity? Because I've never had to provide just that as proof of identity.

vmceptionOP4y ago

The number has to corroborate whats on the picture of the passport.

Beyond what you asked though:

Most financial institutions are just covering their own ass and do not care. They just want the record in order to say they checked the box, and be able to look at that record when the government comes looking. Investigations rarely are high profile enough get stonewalled by a customer account that was fictional in order to ensnare the financial institution about how good/bad their KYC processes are. Money mule accounts are extremely prevalent, but this is limited to the actual person being tricked into using their own account for a ridiculous and shady purpose.

marcus_holmes4y ago

> The number has to corroborate whats on the picture of the passport.

Yeah, so knowing the passport number alone is useless.

And yeah, lots of the "security" around us is theatre and easily bypassed.

vmceptionOP4y ago

you superimpose it onto the picture of the passport, because you know the number.

that's like saying an exploit is useless because the pentester still has to privilege escalate. wrong forum to hold that opinion.

1 more reply

j / k navigate · click thread line to collapse

0 comments

marcus_holmes4y ago

I was thinking about this more...

If I say my passport number is 134563543, how does anyone check that? Is there a database of passport numbers and identities that can be checked?

My original question stands: do you just need the passport number to prove identity? Because I've never had to provide just that as proof of identity.

vmceptionOP4y ago

The number has to corroborate whats on the picture of the passport.

Beyond what you asked though:

marcus_holmes4y ago

> The number has to corroborate whats on the picture of the passport.

Yeah, so knowing the passport number alone is useless.

And yeah, lots of the "security" around us is theatre and easily bypassed.

vmceptionOP4y ago

you superimpose it onto the picture of the passport, because you know the number.

that's like saying an exploit is useless because the pentester still has to privilege escalate. wrong forum to hold that opinion.

1 more reply

j / k navigate · click thread line to collapse