FRESH
Hacker News
Hacker News Hacker NewsGlad to know that my tinfoil hat wasn't too tight when social media came to be and this obvious use was predicted. How quickly will not having social media accounts become a crime?
Note also there's a direct response from Persona's security team here[1], and a lot of back and forth from Rick on Twitter[2].
[1]: https://withpersona.com/blog/post-incident-review-source-map...
[2]: https://x.com/Persona_IDV/status/2025048195773198385?s=20
Hi there,
Thank you for reaching out to Persona.
Please note that Persona primarily operates as a "service provider" or "processor" for its customers. We act as a "business" or "controller" only for specific services, such as identity verification for LinkedIn, FoxCorp, and Reusable Persona. To learn more about how Persona manages your personal data, please refer to our privacy notices, which can be accessed through the following link: https://withpersona.com/legal/privacy-notices
If you wish to exercise your privacy rights related to services where Persona is a "service provider" or "processor," please contact the entity using our service, as they are the "controller" of the data. We will assist the relevant customer to fulfill your data subject rights, but we do not handle such requests directly on their behalf.
For any privacy rights request related to services where Persona acts as a "business" or "controller," including identity verification for LinkedIn, FoxCorp, Reusable Persona, and personal data related to our sales, marketing activities, or website browsing on withpersona.com, please use our Data Subject Request (DSAR) available at the following link: https://withpersona.com/dsar
For all other inquiries, we will respond as soon as possible.
###
TL;DR we're not responsible, go talk to LinkedIn.
Persona's side of the story.
What am I missing?
I keep saying this. This is the playbook -- everything is moving to standardize Sam Altman's biometric authentication cryptocurrency company to use internet services. This has been a slow moving strategy for /years/ and every new step over that period only get closer, not further from this goal.
The ASCII flowcharts all contain jagged vertical lines. This is the biggest indicator of LLM output as no human would ever produce that. You can simply see with your eyes that it's wrong if you even glance at it.
> there’s no way for us to prove that they don’t have access to all of that data anyway. we can only assume that they don’t have access to all of that data. but if you want my two cents, they probably do.
This doesn't quite read as LLM output but it makes the whole article look like a conspiracy theory.
> after trying to write a few exploits, vmfunc decided to browse their infra on shodan. it all started with a Shodan search. a single IP. 34.49.93.177 sitting on Google Cloud in Kansas City. one open port. one SSL certificate. two hostnames that tell a story nobody was supposed to read:
> and the company that runs all of this is the same one that takes your passport photo when you sign up for ChatGPT. same codebase. same platform. different deployment. same facial recognition. same screening algorithms. same data model.
> and as always, the information wants to be free. we didn’t break anything. we didn’t bypass anything. we queried URLs, pressed buttons, and read what came back. if that’s enough to expose the architecture of a global surveillance platform… maybe the problem isn’t us.
These all absolutely stink of LLM writing patterns.
The 90s called, THE CAT HUNTS THE MOUSE! :D :D
Convenience is to humans, what bulb lights at night are to bugs.
Your biographic data will leak to every hacker and every government world wide.
This is the most important section, as the above ones any privacy-conscious person would assume most anyway. I did mention before that we need an open-source platform that tracks the people who work and build such systems. Those are the enablers who have no morals or ethics - a greedy corporation is always greedy, but when the average employee is willing to work full time on building such systems, they need to be exposed publicly, just as they are working relentlessly on violating private people's privacy. It isn't about public humiliation; it's about basic human decency and maintaining a minimum ethical code to abide by. These individuals shouldn't be hired or dealt with, not even a simple connection on LinkedIn.
These individuals are dangerous. They are like rats among us and should be exposed, and I bet some of them are reading this as well.
They promised freedom of speech and liberty and this is what we get.