Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I think the pay-for-verification might solve those problems ship sailed when Twitter decided that a symbol which had previously meant they'd attempted verification could be given to pretty much anyone who paid them $8 a month...

Impersonation-at-scale depends on scale, not verification of individual accounts as authentic people with authentic notability and opinions, and impersonation not at scale sometimes feels more motivated to pay the $8 than the person or position being impersonated.



I get the "i hate Twitter/elon" attitude, but the truth is that the CA system has been dependent on pay-to-verify for some time now and despite whatever grievances you have against verisign or whoever it's brought us to today safely enough.


I think the problem was not that Twitter started charging $8/month ago much as that they gave up the expensive-to-perform ID verification workflow that had been in place.

The CA system, on the other hand, has more or less abandoned the expensive, manual "extended verification" process in favor of the zero marginal cost "domain verification" process. This switchover drove the cost of a new cert to $0 for almost all users.

So I'm really not following your analogy, since Twitter gave up the workflow and started charging (aka, a cash grab), whereas CAs gave up charging and adopted a more efficient workflow (aka the expected behavior of efficient markets).


Maybe Twitter Blue was a cash grab, but for me as a light user (and not a Blue) it’s way more transparent and sensible now.

“Paid account with extra features” is just far easier to parse than “someone at Twitter thinks this person/company is both authentic and important.”


I have to disagree that it was more transparent and sensible when it meant the person had been verified. I only ever used twitter to follow bands and writers, it was useful to know it was them behind the account (or their social teams).

They muddied that water, I just don't bother with the site much anymore. I never gave a shit about the gen pop on there and it's just amplified a bunch of strangers and nobodies - I'm sure their friends and families love them, but I didn't come on the internet to see them and since twitter blue all kinds of stupid shit from nobodies with blue checks magically makes it into my feed. It's just a garbage website now.


But now (with Twitter) I can't trust anything I read without double-checking carefully it is not a fake account (and even then I cannot be sure). At least beforehand I was able to trust that Twitter has done the basic KYC.

The Meta implementation therefore seems smarter (depends on gov ID).


Why did you ever trust anything on twitter without double-checking? Consider how much misinformation you have processed over the years because of too much faith in a platform to disseminate facts over fiction.


I don't think he's talking about the information in the tweets, but the source. If I'm a fan of X and I go find X on twitter, I used to be able to more or less trust that X with a blue checkmark was the twitter account representing X. Before the hilarious shift to the gold marks, it was a lot of sifting through stupid meme accounts.

People were doing verified accounts for my ISP support twitter that day, lol


If we accept the logic that we should not trust anything posted by anyone on Twitter, then Twitter would no longer be a viable source of information whatsoever. Do you see the problem? It is poisoning the well.


Twitter seems like a perfectly reasonable venue to hear EA, computer game company behind Madden 2023, announce that they're working on Madden 2024.

I don't need that information to pass via Bob Woodward for a hard-hitting journalistic enquiry into the truth of the claim.


consider pre Twitter blue:

someone created an account named USEmbassy_SaoTome and that had twitter verification = that was indeed the official account of the US Embassy there.

consider after Twitter Blue

someone creates an account named USEmbassy_Kiribati and has the twitter blue mark. You dont really know this is an official account. anyone can pay for this

PS: this is just hypothetical I dont really know if those embassies exists.


100%


And the problem with pay for identity is you can buy other people's identities. The news was full impersonations right after Twitter initiated it's pay for blue check marks. That we don't here about it now may just be a matter that the news stopped caring. URL squatting was a problem for a long time - the decision that trademark holder could seize domains helped but a web address today isn't considered a solid identity at this point so "the system working" is a bit of an exaggeration.

Also, I'd note the gp didn't bad-mouth Elon or Verisign so your comment is a kind of riding a trolly false accusation.


The pay-to-verify is the reason why a significant chunk of the Internet didn't have HTTPS. It was the inception of free CAs like Lets Encrypt that made 90+% HTTPS penetration.


I'd argue laziness is the reason most of the internet didn't have HTTPS. Browsers putting a scary checkmark next to the site is what made it happen.


Once/if consumers value identity this might change.

If everyone on twitter were paying for verification, I think twitter would be much more interested in defending the sanctity of said system.

As it stands, they are currently just trying to get the feature out there and get people to pay. Getting it deployed trumps making it perfect.


They already had a verification feature deployed which wasn't perfect but was reasonably strict. Then they debased it for a new revenue stream.

I don't see them making the now that we've got a bunch of people paying for it, lets reduce our revenue by suddenly becoming strict on it again decision. Or people taking the badge more seriously now it just means someone subscribed to Twitter Blue


> a symbol which had previously meant they'd attempted verification

That's not what it meant. It was an award for being notable. $8 is a fee that you pay to get verified.


It was an award for being an authentic notable person or entity, on the basis that the notable people and entities were most likely to be parodied or faked. Now it's an award for people that pay up


It started out as “this is who you expect it is” for things like Obama or Trump, then it became “this is a person who speaks with authority of some sort, listen to them” and now it is just “someone pays eightbux”


> “this is who you expect it is”

Very useful.

> “this is a person who speaks with authority of some sort, listen to them”

Rather, "this is a person that people at Twitter have blessed with authority. It's astounding that you care what we think."

> “someone pays eightbux”

To have their identity verified. This is where I pretend to be shocked that a certain class of people prefer arbitrary credential grants by unelected authorities, and that they look at a simple identity verification service that accepts anyone who is willing to show their papers and pay with absolute contempt.

$8 cheapens their pageant award.


> This is where I pretend to be shocked that a certain class of people prefer arbitrary credential grants by unelected authorities, and that they look at a simple identity verification service that accepts anyone who is willing to show their papers and pay with absolute contempt.

No, they think arbitrary credential grants by unelected authorities that attempted to verify people were who they said they were represented a more useful verification service than one which initially made anyone who was willing to pay $8 a "verified" account in the name of a famous person and still doesn't actually check identity.

This is where I pretend to be shocked that a certain class of people will insist a clusterfuck of such epic proportions they had to suspend it for a month after launch was actually a genius move.


It was never a pageant. It was a way for people to know they were following the famous person they wanted to follow and interact with. You're kind of scaring me that there's an actual contingent of humans that felt slighted by the notion nobody cared who they were, but people would like to know they're actually following taylor swift.


> $8 cheapens their pageant award.

did you care about the so-called "pageant award"?


The tried and true Lowtax approach to monetization. Bon chance, Elon.


Now I’m imagining a Twitter where you can purchase big red custom titles for your posting enemies.


Didn’t end terribly well for Lowtax.


It was an award for being an authentic notable person or entity

Using an arbitrary and biased determinant of who is notable.

https://www.wbur.org/cognoscenti/2021/06/28/twitter-verifica...


Maybe, but at least the verification seemed meaningful. And it feels like a meaningful verification doesn't generalise well: it's easy to pick a few people (arbitrarily) and truly verify them. But verifying millions of people... that's hard, unless you don't truly verify (in which case it's meaningless).


Elon turning a $8 subscription into a culture war artifact doesn’t invalidate the idea of a subscribing for legitimacy altogether.


Agreed it doesn't completely invalidate it as a concept, but Elon turning the highest profile somewhat reliable implementation of an authenticity badge into a culture war artifact doesn't exactly bode well for it being a social media must-pay-for. The fact Facebook once aspired to be the platform where everyone used their real name and now can't be bothered to deactivate friendspamming sexbots without most users caring suggests that ordinary people won't exactly be queueing up to pay them $144 per annum because of their inherent trustworthiness as a verifier either.

It'd probably work a bit on LinkedIn because of the nature of the user base and lots of people already expensing Premium accounts, but funnily enough I'm not sure LinkedIn actually has that much of a fake account problem...


> but funnily enough I'm not sure LinkedIn actually has that much of a fake account problem...

Oh it does for sure, unfortunately many people are more than happy to connect with anyone who wants to connect with them because “LinkedIn doesn’t have a fake account problem”. And many people post resumes, entire employment history, all professional social connections, etc. and so all you need to do is pretend to be a student of your targets alma mater and now you have all of that personal info with the click of a Connect button. I’ve noticed trends where someone would try to connect with me and they’d be connected with some acquaintances of mine, but not once have I ever heard of that person. Those types of accounts exist, are fake, and steal information.

If you haven’t 1-1 met someone before in person or via actual business relationship you should definitely not connect with them on LinkedIn.


Most of those accounts are actual people registered with their actual name using spamming tools (some of them LinkedIn approved) to connect with as many people as possible though, usually to boost the appearance of their personal profile and have as wide a possible audience for promotional messages they share rather than to circumvent LinkedIn's information paywalls. Spamming people loosely connected with your industry with what you're doing at work is, after all, LinkedIn's intended purpose...


Oh no doubt, but I would put that in the same categorization as "fake accounts" in the sense that the intended purpose is general malfeasance. I.e. connecting not just to boost their own profile potentially but also to try and harvest any personal information you have published on the site.


> turning a $8 subscription into a culture war artifact

"Culture war artifact" is not a real term. I've never had what looks like a reasonable combination of three words come up with zero hits in a search engine.

What happened is that Musk decided to charge for identity verification instead of granting it to favored media people, and other people already involved in a culture war where Musk plays the villain added that to their long list of incomprehensible grievances.


>'"Culture war artifact" is not a real term. I've never had what looks like a reasonable combination of three words come up with zero hits in a search engine.'

Is this really your barometer for discussion, that all grammatical phrases must first exist in Google search results for them to be considered valid self-expression? If so that's pretty out there.

There's a wonderful irony here in that this a discussion about a Megacorp validating people's identity and here you are telling someone that their words are not valid because they haven't been validated by some other Megacorp.

The phrase "culture war" itself wasn't in use in English before it was used in the title of a book in the early 90s [1]. There were no search engines then.

[1] https://archive.is/TS6mn


It helps because the cost of impersonating wont make sense for a lot of people


This is a huge part of it. Shitposting for $0 is a lot different than shitposting for $8. Some will bust out the card to do so, but not many.


The problem is that those who are willing to break out the $8 are probably the same ones who have the most to gain from it.


More importantly, $8 includes an identity check




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: