But there are ~20 fake Mark Hamill accounts already The site is currentlly less than 1/10 of Twitter What happens when there are 200 Mark Hamill accounts, many with markhamill.redhour.com or markhamill.redguy.com or markhammill.redhat.com or markhammill.redfan.com etc? - ThreadSky

peter-butler.bsky.social • 109 days ago

But there are ~20 fake Mark Hamill accounts already

The site is currentlly less than 1/10 of Twitter

What happens when there are 200 Mark Hamill accounts, many with https://markhamill.redhour.com or https://markhamill.redguy.com or https://markhammill.redhat.com or https://markhammill.redfan.com etc?

Comments

ursa.solar•109 days ago

A good way to unfalsifiably link an identity to an account is tying it to a domain name. Nobody in the world but me can have just "ursa.solar" or any variation of "something.ursa.solar" as a handle because I own the domain name. We just have to train people to understand and look for that.

peter-butler.bsky.social•109 days ago

Yeah, that's fair, I just think it might take a *while* to get there

ursa.solar•109 days ago

Oh it will take ages, most people don't understand websites or domains on a basic level and don't even know that Bluesky offers that feature, let alone what it means. It's an uphill battle, but it's better than basically anything else anybody has tried so far.

peter-butler.bsky.social•109 days ago

ngl, I like the Mastodon approach of putting *code* on your website that sends a signal to the site to verify it

Might be a comme ci, comme ca issue, but it seems like that code on the site is important?

https://fedi.tips/how-do-i-verify-my-account/

ursa.solar•109 days ago

It's effectively the same thing with more steps. With bluesky's implementation they only have to pull the DNS record, with mastodon's approach you do that but also have to connect to a server; but that doesn't actually validate anything new. If I control the DNS record, I can point it to any server.

ursa.solar•109 days ago

In both cases what you're really validating is control of the domain anyways, so it makes more sense to just store the data in the DNS record and skip the extra traffic and requirement of running a server.

ursa.solar•109 days ago

Most famous people have websites. Just link that domain to your bsky account, and teach people what that means. That should solve the issue for the most part.

peter-butler.bsky.social•109 days ago

Right, I guess the example I was using was Ben Stiller, whose official URL is https://benstiller.redhour.com ... c'mon, that looks fake. Why not https://benstiller.com? (because it's been squatted!)

ursa.solar•109 days ago

It can look fake, but a quick google for a Wikipedia article on the person or company will 99.9% of the time give you the real address to compare it to. No system works perfectly at a glance, but this one would be really damn hard to fool if people knew how to use it

Comments

Posting Rules

Reply