[JohnFen]

> As a result, it really tells us — and everyone else — nothing about you. All it does is stop you from being able to sign up again.

Which means it tells them something about you.

What about this scheme prevents identification through somebody scanning your iris to get your hash on the pretext of a legitimate purpose, then connecting your hash to your actual identity and passing it on?

This seems like a large risk, considering how many companies exist entirely to compile data from disparate databases into a single record. The existence of those sorts of businesses is why there is no such thing as an anonymous unique identifier.

[calderknight]

How would they go from iris data to World ID (hash)?

Also, World ID is anonymous because the service one uses it with does not recieve the ID, not because they recieve the ID without one's real name. In other worlds, you can sign up to a service using at once both World ID and your real name and they will still have no way of connecting your World ID to your real name.

[calderknight]

>Which means it tells them something about you.

Nah, don't think so, that's the point of zero knowledge proofs