Profile avatar
malwaretech.com
Cybersecurity person, ok at computers, one time domain buyer. https://marcushutchins.com
1,294 posts 30,901 followers 208 following
Getting Started
Active Commenter

I was wondering why my stock portfolio was down today. Turns out most of the EU exchanges are closed on Easter Monday, so there's nothing to balance out the burning dumpster fire that is the US.

The best argument I've seen for not having real verification and using domains as verification is "people have been verifying domains since the internet was created". We can just ignore the part where they haven't and phishing has been the most common way people get hacked for decades.

This is why I get paid so much. People with technical skills are plentiful, but people with technical skills who actually understand the reality of being a less/non-technical product user are almost non-existent.

Bluesky needed a verification system, which is why they made one. I've been saying this from the start. Domains as handles is a cool feature because it guarantees a way of having a globally unique username which people can't preemptively register, but it's not suitable as a means of verification.

Domain verification is stupid as hell. You're just replacing "how do I know if this account is real?" to "how do I know if this domain is real?". Domain verification isn't verification of anything other than the fact the account owner can set up a website, which the average person can't.

Verification was never a "prize", it was a way to differentiate between notable accounts and potential impersonators. It was users who decided that because notable accounts get verified, verification is a symbol of notability, and thus a "prize". There is no reason to verify non-notable accounts.