- Joined
- Jul 13, 2017
Firstly, Tea app isn't representative of anything in the wider world. It was clearly vibe coded or done using LLMs and had no concept of security. I'm pretty sure that even if a data breach never happened they probably violated a bunch of privacy related laws anyway. The idea that they promised to delete photos after they were verified may not have even technically been true and was just a result of them copy/pasting text from an LLM. As you already mentioned it was designed by a retard.Presuming that KYC is capable of a zero knowledge proof (which I find to be unlikely, in large part because any kind of KYC is the opposite of NP hard, everyone knows the solution in advance and the difficult part is finding out whether the solution is truthful, or in other words, if Kiwifarms.net gives the user a prompt asking "are you 18 or older", everyone knows the solution is yes, but it's very difficult to verify that the user is telling the truth) there are two big problems with this. 1 it's unlikely that you can actually get people to trust the science that it serves as proof, and in fact it's very unlikely that anyone will understand the algorithms well enough to have a rational belief that it can actually prove that someone is 18 or older and that the proof remains valid under a zero knowledge scenario. 2 they actually want the data, as is proven by the Tea app leak, since Tea promised to delete ID photos after they are verified (since Tea was literally made by a faggot it's likely he actually wanted people to find the public bucket).
It is of course possible and even likely that some services to actually want to get large amounts of user ID data - however, most companies, even the "evil" ones like Google/Meta really don't because it creates huge liabilities and in particular trust issues. All it takes is a major data leak and they lose tons of customers and end up with lawsuits all over the place - they would rather just take your money and be done with it and do the bare minimum when it comes to ID shit. In fact, most of these services specifically hate having to deal with ID because when you ask customers for it you get user churn (as in many customers will just close the webpage instead of scanning their penis using their webcam)
Secondly, zero knowledge proofs for KYC and similar are mostly an idea that is coming together from the internet and not really from governments. Therefore, the government or users actually understanding how it works doesn't matter at all - just the same way as users have no idea how Discord works at a server/system level or how signing on to a 3rd party website using your google account works.