KYC Is the Crime – Ludlow Institute

Comments (2)

not_your_vase · 22m ago

What a horrible article - defending garbage enterprise security practices against the KYC regulations?

No system is unhackable? You know what? No regulations say that you have to store sensitive information on an online machine. Also, no regulation prevents you from installing security updates in a timely manner.

Every time a hack happens, the response is always "very sophisticated state-level actors". You know what's behind 98% of them? Password enabled ssh (with the password being $COMPANYNAME123), client-sided password verification in javascript, and when authentication works, frequently it only protects the login page - if you know the direct URL to a resource, just type it to go around the login. Or just simply running on a system that hasn't seen an update since the pandemic. All these keep happening to this day.

It really wouldn't take a lot to make things work, all the tools have been available since a long time.

onecommentman · 4h ago

Sounds like the Author is arguing in favor of “security through obscurity”. There are well-known issues with this approach that those interested can research.

Ask HN: Selling software to company I work for as an employee

Ask HN: Go deep into AI/LLMs or just use them as tools?

Ask HN: Can you give tips on writing a README for project?

Ask HN: What's your favorite architect/editor pair with Aider?

Ask HN: Conversational AI to Learn a Language

Ask HN: What HN posts inspired or changed your perspective the most?

Ask HN: Senior SaaS developer wanting to pivot

Ask HN: How do you promote your personal projects with a limited budget?

ESP32 MCP Server

Ask HN: Do you have a side project you're getting tired of?

Ask HN: AI Reading List

I'm Peter Roberts, immigration attorney, who does work for YC and startups. AMA

Ask HN: What projects do you donate to?

Ask HN: How to Make Friendster Great?

We sold our first AI agent to a legacy industry–now we're stuck. Help us Advice?

Ask HN: How do you keep on top of all of the AI tools and new changes?

Ask HN: Places in the UK / Europe Related to computers

I spent 15 years developing a tool to make sense of software version numbers

Ask HN: Fakespot is shutting down July 1. Alternatives?

Ask HN: Pros and cons of offering a self-hosted version of your SaaS?

Modern Python Boilerplate – good package basic structure

Apple Rejects My Name Because It Contains "Dek" – But "Dick" Is Allowed

Ask HN: Where to find UX design resources?

Ask HN: Engineering Statics and Dynamics book recommendation

What If Every Picture You've Ever Seen Already Exists?

Tell HN: The Hetzner Experience - Invisible Outages

AskHN: Best, simplest platform to run a Technical Interview on?

Ask HN: Don't You Mind That LLMs Are Mostly Proprietary?

Ask HN: Agent / workflow frameworks or roll your own?

Ask HN: What makes a programming language great for code generation?

Ask HN: How are you using LLMs for research on a library of journal articles?

KYC Is the Crime – Ludlow Institute

Comments (2)