Top
Best
New

Posted by ColinWright 23 hours ago

I verified my LinkedIn identity. Here's what I handed over(thelocalstack.eu)
1201 points | 422 commentspage 5
tqi 15 hours ago|
> Persona extracts the mathematical geometry of your face from your selfie and from your passport photo. This isn’t just a picture — it’s a numerical map of the distances between your eyes, the shape of your jawline, the geometry of your features. It’s data that uniquely identifies you. And unlike a password, you can’t change your face if it gets compromised

Is there anything special about a passport photo, or can that be done from any photo of your face?

rpdillon 15 hours ago|
When I read selfie, I was thinking of one of those motion-based selfies where it's really a short video. And from the video, you can extract those measurements. I'm assuming it wasn't extracted from the passport photo, but rather the passport photo was used to verify that the selfie is of the same person that the passport belongs to.
xenator 17 hours ago||
More interesting that LinkedIn use fingerprinting everywhere and connect your personal data to every device you are using and connect to other services connected to their network.
alansaber 16 hours ago|
... i'm pretty sure every website does this lol. Aggressive fingerprinting is so easy to implement and so high ROI from a security/marketing perspective.
mcintyre1994 6 hours ago||
I have a LinkedIn account and I occasionally have recruiters cold phone call me. They always tell me they got my phone number from LinkedIn. The first time this happened I deleted my number off LinkedIn, which was not shared according to their settings but was being used for 2FA. I still occasionally get these calls, and I'm unsure if LinkedIn is still letting people buy access to my deleted phone number, or if the recruiters are just lying and getting my number from some creepy stolen data service.
VerifiedReports 9 hours ago||
The link isn't working, but anyone handing over unnecessary data to LinkedIn (AKA Facebook Pro) is probably too gullible to be online safely at this point.
huqedato 16 hours ago||
Passport photo... OMG. You can't image what they can do with that. That's precisely why I closed my linkedin years ago.
keithluu 14 hours ago||
I believe OpenAI used Persona during the verification step that you must complete to use their SOTA models in the API. Not sure if it's still the case now.

Anyway, I found that too much of a hassle and switched to other LLM providers.

8cvor6j844qw_d6 14 hours ago||
Similar experience here.

A few months back I was evaluating one of the GPT-5 models for a side project. Turns out streaming via the API requires org verification, and I decided to look elsewhere.

In hindsight, a good decision given what just came out about Persona.

Aldipower 11 hours ago||
I just registered at platform.OpenAI.com two days ago for MCP Apps registration and had to do the Persona process! Now I could cry.
blaze33 19 hours ago||
> My NFC chip data — the digital info stored on the chip inside my passport

Do we know how they get that? Because my fingerprints are also in there, so...

lkramer 19 hours ago||
They will have an app that asks to scan you passport with your phone's NFC reader. It's pretty common for Identity Verification.
duskdozer 17 hours ago||
Wow, that's even worse than I imagined and I was already imagining bad things
subscribed 16 hours ago||
Imagine all the things their phone app can exfiltrate. All vaguely categorised in privacy policy of course.
fuzzy2 13 hours ago|||
Highly unlikely they did. Just because it’s in the privacy notice doesn’t mean they actually gather or store this information.

And indeed, fingerprints are only accessible using privileged access. Not even you, the passport holder, has access.

Msurrow 17 hours ago||
Yeah was thinking the same thing. I wonder if the author didnt known that passpory chip == fingerprint.

And FP is a much worse modality to have registered because, as opposed to Face image, fingerprint is not affected by age. So that will match you 99.999999% for ever. Faces change.

alansaber 16 hours ago||
I naievely assumed fingerprints were trivial to change but on further reading they are a remarkable biomarker
mamma_mia 11 hours ago||
I've never used linkedin and have been more than fine, I feel that like with most social media that noise makes it seem more important than it is
bromuk 16 hours ago||
As a European citizen I hope it becomes law to have this data processed in the EU rather than the US.
Wilder7977 16 hours ago||
My wife works for a competitor of the company mentioned. They are in EU. Still run everything on AWS. The data collected is usually even more than what stated, full video recording of the session with audio etc.

AWS EU region is not doing much, and I suspect most companies run on US providers. EU needs independent platform for this to matter.

uyzstvqs 13 hours ago|||
Why? I don't want companies and governments to datamine and abuse my data at all. Be it in the US or EU, it's going to be no-way either-way.
al_borland 16 hours ago||
It would be even better if the law enforced that this kind of data could only be used for the stated business need (the basic identity verification), and not be stored or used/shared with anyone else. If anyone is caught violating a law like this, throw the entire c-suite in prison for 10 years.

I’m so tired of all these covert ops run by these businesses. They aren’t going to stop until there is a heavy price to pay.

eel 16 hours ago|
I'm glad the absurdity of verification is getting attention. I was "forced" to verify by Linkedin to unlock my account. It was last year, and I had left my previous job, but I had not yet lined up a new job. So one of the only times in my career I might actually get value from Linkedin, they locked me out, removed my profile, and told me if I wanted back in, I'd have to verify. I felt helpless and disgusted.

I gave in and verified. Persona was the vendor then too. Their web app required me to look straight forward into my camera, then turn my head to the left and right. To me it felt like a blatant data collection scheme rather than something that is providing security. I couldn't find anyone talking about this online at the time.

I ended up finding a job through my Linkedin network that I don't think I could have found any other way. I don't know if it was worth getting "verified".

---

Related: something else that I find weird. After the Linkedin verification incident, my family went to Europe. When we returned to the US, the immigration agent had my wife and I look into a web cam, then he greeted my wife and I by name without handling our passports. He had to ask for the passport of our 7 month old son. They clearly have some kind of photo recognition software. Where did they get the data for that? I am not enrolled in Global Entry nor TSA PreCheck. I doubt my passport photo alone is enough data for photo recognition.

kccqzy 15 hours ago||
The thing about looking straight into the camera and turning your head seems to originate from Chinese apps, including some payment apps, bank apps, and government apps. It’s especially disgusting since it imitates the animation used by Apple Face ID, but of course it’s not at all implemented like Face ID.
egorfine 11 hours ago||
> I'm glad the absurdity of verification is getting attention

It's not. The developers' bubble we're in on the HN is invisibly tiny compared to the real life. And normies are not only perfectly happy uploading all their PII to Persona - they won't even understand what's wrong with that.

eel 6 hours ago||
It's a start. I agree HN is a bubble and doesn't reflect real life as a whole. But I do think HN has a significant bearing on US tech. I've been reading HN for nearly 19 years and in that time almost every new major tech, unicorn, or big culture shift is discussed here before it is mainstream.

There has also been a backlash against verification in other communities like Reddit (also a bubble), mainly stemming from Discord's recent announcement.

The discourse is good, and while I wish every user and potential user understood all the pros, cons, and ramifications, I'm also happy we are finally talking about it in our bubbles.

More comments...