A rather technical deep dive into verification systems run by #Persona, followed by some interesting questions that deserve answers.

Persona seems to use the same code base for a #KYC system that verifies potential customers that want to sign up with #OpenAI to use GPT-5; as well as for another system that does #FedRAMP security assessments for #US government agencies (including automated notifications of agencies in special cases).

(Read "0x11 - the architecture" first)

https://vmfunc.re/blog/persona/

via @raptor

#security #privacy #ageverification

A rather technical deep dive into verification systems run by #Persona, followed by some interesting questions that deserve answers.

Persona seems to use the same code base for a #KYC system that verifies potential customers that want to sign up with #OpenAI to use GPT-5; as well as for another system that does #FedRAMP security assessments for #US government agencies (including automated notifications of agencies in special cases).

(Read "0x11 - the architecture" first)

https://vmfunc.re/blog/persona/

via @raptor

#security #privacy #ageverification

Why FedRAMP Authorization and CMMC Level 2 Are Now Table Stakes for GovCon AI

https://blog.procurementsciences.com/psci_blogs/why-fedramp-authorization-and-cmmc-level-2-are-now-table-stakes-for-govcon-ai

#HackerNews #FedRAMP #CMMC #GovCon #AI #Compliance #Cybersecurity

@ProPublica FedRAMP does not technically require workers on US Federal projects to be US Persons (citizens or residents), but if they aren't a US Person it means they can't touch basically any meaningful data. Being a citizen (but not necessarily within US borders) is required for most data types, and for certain agencies it requires being a US Citizen specifically within the US.

#fedramp