Hacker News new | ask | show | jobs
by JimDabell 1 hour ago
The whole point of an identity check is that they know exactly who you are. If you tell them who you are and you fail the identity check, you can’t simply create a new account because when you go through the identity check for a second time you’ll still need to tell them exactly who you are, at which point they can match the new account to the original failure.
2 comments

So I’ll just automate failed verifications for everyone I want to lock out?
An empty account and an account with a year of history have very different weights in this - most people already have an account tied to their legal name, paid for with a credit card in that same legal name. Throw in some geo-location, browser fingerprinting, etc. to disambiguate the surprisingly rare case of two customers with the exact same name.

For a paid product, it's really not that hard to already have a fairly solid idea of what's going on - this just ensures that a responsible adult has gone through a clear process of signing off on the identity for this specific service, rather than a kid with their parent's credit card.

If I told them who I was and then failed to verify that, they don't know who I am because they think I'm lying about who I am. Otherwise what stops me DoSing Sam Altman's account by saying I'm him and then failing to verify?
> If I told them who I was and then failed to verify that, they don't know who I am because they think I'm lying about who I am.

They know who you claim to be. It’s not like they just delete all information about you when you fail verification. They are perfectly capable of seeing that two separate accounts are both claiming to be the same person.

> Otherwise what stops me DoSing Sam Altman's account by saying I'm him and then failing to verify?

For Sam Altman in particular? The fact that he’s the CEO. For people in general? Do you have their passport / driving license, and other details needed to attempt the verification process?