Show HN: Changefly ID + Anonymized Identity and Age Verification
By putting privacy first and using a novel approach to account protection, Changefly ID offers a path to a safer, more secure, and less-intrusive internet for everyone:
- Changefly ID for anonymous authentication + ANONYMIZED identity & age verification for services that are required to verify minimum age
- Zero-knowledge proofs, secure multi-party computation, temporary unique identifiers
- Protects against bot attacks, bot scraping, identity theft, phishing, credential stuffing, online tracking, and other evolving threats
Changefly ID + Anonymized Identity & Age Verification is like showing a bartender a “Yes, I’m over 21” hologram badge instead of handing them your driver’s license with your name, address, and birthdate. They get what they need—but none of what they shouldn’t have.
We’re just getting started and I’d love to hear what you think, what you’d like to see next, and any feedback you have.
Your Changefly ID is anonymous and end-to-end encrypted. Changefly does not know who you are, who you are connecting with, or what your IP address is as we do not log IP addresses.
I encourage you to read more below to learn how the Changefly ID authentication process works and how Changefly is truly changing the game for privacy and security:
Changefly Anonymous Authentication FAQ: https://www.changefly.com/security
Changefly ID white paper: https://www.changefly.com/our-research
Changefly US Patent 12,301,546 B2 https://patents.google.com/patent/US12301546B2/en
>For example, our Third-Party Providers may verify your government ID when you register for Changefly Anonymized Identity Protection[1]
[1]: https://www.changefly.com/policies/privacy-policy
For identity verification, Stripe is our current data processor and undergoes annual audits. Your identity is first verified by Stripe, secondly reprocessed for privacy on Changefly, then immediately deleted.
I encourage you to check out the links below to learn how the Changefly ID authentication process works and how Changefly is truly changing the game for privacy and security:
Changefly Anonymous Authentication FAQ: https://www.changefly.com/security
Changefly ID white paper: https://www.changefly.com/our-research
Changefly US Patent 12,301,546 B2: https://patents.google.com/patent/US12301546B2/en
[1] https://www.veridian.id/
[2] https://cardanofoundation.org/blog/veridian-digital-identity...
[3] https://ethereum.org/en/decentralized-identity/
I encourage you to check out the links below to learn how the Changefly ID authentication process works and how Changefly is truly changing the game for privacy and security:
Changefly Anonymous Authentication FAQ: https://www.changefly.com/security
Changefly ID white paper: https://www.changefly.com/our-research
Changefly US Patent 12,301,546 B2: https://patents.google.com/patent/US12301546B2/en
Considering most regulations require the party reliant on validating the data to store the source or proof, it seems like the only plausible mass-deployment of this approach would be US state-based ID systems specifically for drinking/anonymous patrons. That excludes driving, gambling, restricted entertainment, medicine etc.
Countries wouldn’t adopt it nationally or federally, they’d copy it.
Maybe online games or communities that want to keep age of users above a set amount? I don’t see them paying for this though.
Am I missing something?
"How is this any different from outsourcing attestation to a third-party?"
There are thousands of identity verification companies around the world. The difference is we use Changefly ID.
"Considering most regulations require the party reliant on validating the data to store the source or proof, it seems like the only plausible mass-deployment of this approach would be US state-based ID systems specifically for drinking/anonymous patrons. That excludes driving, gambling, restricted entertainment, medicine etc."
A growing number of services around the world are requiring identity (are you a real person, or age verification). Changefly ID + Anonymized Identity and Age Verification processes government ID's from over 100 countries.
"Countries wouldn’t adopt it nationally or federally, they’d copy it."
I encourage you to check out the links below to learn how the Changefly ID authentication process works and how Changefly is truly changing the game for privacy and security:
Changefly Anonymous Authentication FAQ: https://www.changefly.com/security
Changefly ID white paper: https://www.changefly.com/our-research
Changefly US Patent 12,301,546 B2: https://patents.google.com/patent/US12301546B2/en
1. User gets their Changefly ID through the Changefly app (free)
2. User verifies their identity anonymously (https://www.changefly.com/account/verify)
For developers:
https://www.changefly.com/developer
Just have a simple video on the homepage like https://heyblue.com showing someone new to the product start using it. Montage with a few examples would be nice.
The app screenshots could be improved.
Edit: clarity
1. User gets their Changefly ID through the Changefly app (free)
2. User verifies their identity anonymously (https://www.changefly.com/account/verify)
For developers:
https://www.changefly.com/developer
There is no acceptable amount of PII a business should hold unless required to by the government for extremely limited industries (ie, banking or medicine or the act of employment).
Every single government that is requiring age verification is not also legally indemnifying companies that are performing this. Every single company that is trying to provide this will be hung out to dry when this blows up in their face: the company will be heavily fined under the existing laws in that country.
In many countries, banks that have to follow KYC or similar laws or hospitals that have to follow HIPPA or similar laws are given at least some form of partial legal indemnification as long as they can prove they were following the law. This is why they almost uniquely keep getting away with it with a slap on the wrist when they inevitably fuck up.
This will never be offered to companies like yours. You are taking on, essentially, infinite legal risk to make a quick buck.
If your legal council is telling you they can defend you from this, I suggest finding new legal council. IANAL, IANYL, but proceed very carefully. This is not a technological problem, this is a legal problem, and you cannot solve this with technology.
For identity verification, Stripe is our current data processor and undergoes annual audits. Your identity is first verified by Stripe, secondly reprocessed for privacy on Changefly, then immediately deleted.
I encourage you to check out the links below to learn how the Changefly ID authentication process works and how Changefly is truly changing the game for privacy and security:
Changefly Anonymous Authentication FAQ: https://www.changefly.com/security
Changefly ID white paper: https://www.changefly.com/our-research
Changefly US Patent 12,301,546 B2: https://patents.google.com/patent/US12301546B2/en
They want visual proof for future prosecution.
Any company that attempts to provide services to verify identification in a way that complies with government laws is a future collaborator and also a future PII leak. They will throw you under the bus for leaking PII, and the people will throw you under the bus for collaborating.
Are you sure you want to be in that position?
You're in the trust business. You haven't earned it yet.
If you can't really do the privacy bit with 100% absolute guaranteed certainty using technical means, you could also do a third party audit you daily. Yep, daily. That would be fine by me too.
Spot on, Coeur! My sentiments exactly. My name is Lukas Dickie and I'm the founder of Changefly. You can verify this by looking up our business registration with Washington State or contacting Troy Foster at Perkins Coie (https://perkinscoie.com/professionals/troy-foster). I have a long track record of working with governments and companies around the world.
For identity verification, Stripe is our current data processor and undergoes annual audits. Your identity is first verified by Stripe, secondly reprocessed for privacy on Changefly, then immediately deleted.
I encourage you to check out the links below to learn how the Changefly ID authentication process works and how Changefly is truly changing the game for privacy and security:
Changefly Anonymous Authentication FAQ: https://www.changefly.com/security
Changefly ID white paper: https://www.changefly.com/our-research
Changefly US Patent 12,301,546 B2: https://patents.google.com/patent/US12301546B2/en
Anonymized identity requires some entity to certify that a given token proves what it says it does. That is an awesome power, and given the abuse of that power by private companies who have gained it in the past, I'm not going to give it to ChangeFly, whoever they are.
Which begs the question of who we DO trust enough to do provide this service. Perhaps our banks?
My name is Lukas Dickie and I'm the founder of Changefly. You can verify this by looking up our business registration with Washington State or contacting Troy Foster at Perkins Coie (https://perkinscoie.com/professionals/troy-foster). I have a long track record of working with governments and companies around the world.
For identity verification, Stripe is our current data processor and undergoes annual audits. Your identity is first verified by Stripe, secondly reprocessed for privacy on Changefly, then immediately deleted.
I encourage you to check out the links below to learn how the Changefly ID works and how Changefly is truly changing the game for privacy and security:
Changefly Anonymous Authentication FAQ: https://www.changefly.com/security
Changefly ID white paper: https://www.changefly.com/our-research
Changefly US Patent 12,301,546 B2: https://patents.google.com/patent/US12301546B2/en
Changefly Anonymous Authentication FAQ: https://www.changefly.com/security
Changefly ID white paper: https://www.changefly.com/our-research
Changefly US Patent 12,301,546 B2: https://patents.google.com/patent/US12301546B2/en
Sure, the third-party identity vault companies could be hacked, but I would prefer one of those over a million various sites of dubious quality taking my PII themselves.
Changefly Anonymous Authentication FAQ: https://www.changefly.com/security
Changefly ID white paper: https://www.changefly.com/our-research
Changefly US Patent 12,301,546 B2: https://patents.google.com/patent/US12301546B2/en