Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The linked article seems purposely vague so much so that I'm wondering if you're a scam. It just has some privacy keywords like "zero knowledge proofs", but it doesn't really explain what's going on. Diving deep into your privacy policy, to know how it works - shows you use third party for the initial verification?

>For example, our Third-Party Providers may verify your government ID when you register for Changefly Anonymized Identity Protection[1]

[1]: https://www.changefly.com/policies/privacy-policy



Hey vorejdajo, I completely understand your questioning if this is a scam (Changefly actually blocks scammers). My name is Lukas Dickie and I'm the founder of Changefly. You can verify this by looking up our business registration with Washington State or contacting Troy Foster at Perkins Coie (https://perkinscoie.com/professionals/troy-foster). I have a long track record of working with governments and companies around the world.

For identity verification, Stripe is our current data processor and undergoes annual audits. Your identity is first verified by Stripe, secondly reprocessed for privacy on Changefly, then immediately deleted.

I encourage you to check out the links below to learn how the Changefly ID authentication process works and how Changefly is truly changing the game for privacy and security:

Changefly Anonymous Authentication FAQ: https://www.changefly.com/security

Changefly ID white paper: https://www.changefly.com/our-research

Changefly US Patent 12,301,546 B2: https://patents.google.com/patent/US12301546B2/en


>For identity verification, Stripe is our current data processor and undergoes annual audits. Your identity is first verified by Stripe, secondly reprocessed for privacy on Changefly, then immediately deleted.

This important information is not in your FAQ or your white paper. Not even a mention of identity verfication. Transparency is crucial, if you want trust.

Nevertheless, Am I not parting more of my data by giving Govt id to another third party(stripe) rather than just my email?


Hi vorejdajo, thanks for the feedback. We've been in private mode, and recently launched access to the general public. Additional info will be added to our website and Developer API guide.

"Nevertheless, Am I not parting more of my data by giving Govt id to another third party(stripe) rather than just my email?"

- Identity verification is OPTIONAL for Changefly ID. We chose to work with Stripe for government ID verifications because we can guarantee that after the verification and anonymization, your PII is verifiably deleted.

- Regarding using your email for logins and identity verification, that is no longer feasible in this day and age due to phishing, credential stuffing, account takeovers, scams, and the list goes on.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: