5 ms·

What if it cost $2 a month plus a scanned copy of a government-issued ID?

sangnoir 5y ago
Governments can generate IDs for thier sock-puppets for online influence campaigns. Non-government actors can get in on the action by procuring IDs in other ways ("Make money by scanning your late maw-maws ID"[1]), or large scale phishing campaigns (fake jobs or college admissions abroad with 100% applicant success rate, the only catch is scanned IDs and qualifications are required). Electronic forgeries are likely the best way to do it at scale; just the other day, therr was a top story ok faking as if your document was scanned. Do the fine people handling verifications at Twitter know what a legit Madagascan ID looks like? 1. Or "Get $10,000 funeral assistance from this new Biden admin relief program"
- Jensson 5y ago
  Now you are committing extremely serious crimes instead of just spamming though, few would risk that. So this might not solve all spam, but it would probably solve 99.9% of it. > Do the people at Twitter know what a legit Madagascan ID looks like? Yes, there are guides for checking ID cards, how do you think that they check ID cards in real life?
  - sangnoir 5y ago
    > Now you are committing extremely serious crimes instead of just spamming though, few would risk that. Oh no, I've broken the ID forgery laws of Burkina Faso and am in big trouble now. Isn't it a rule of low-level scamming to always target jurisdictions away from your own? State-actors don't care about commiting crimes against themselves, only the mid-level, "semi-pro" threat actors care about avoiding major crimes.
nindalf 5y ago
It’s possible to generate realistic looking IDs. It’s not that hard, any person reading this comment can do it. Get a face from a thispersondoesnotexist.com like generator. Get the format of the ID in a template, fill in random but realistic data. Like for example, 1000 names for each race-gender combo. Realistic zip codes and addresses from another source. It’s about a weeks work to get it working to production quality, but it can be easily done. For bonus credit, see if you can generate an image of the same person holding up this ID. Harder, but not impossible. What’s frustrating is, those of us who work or have worked in Integrity have already discussed all of this for years. We know the easy solutions, the low hanging fruit. It’s not that helpful when a bunch of people say “why don’t you just charge $2 a month”

Governments can generate IDs for thier sock-puppets for online influence campaigns. Non-government actors can get in on the action by procuring IDs in other ways ("Make money by scanning your late maw-maws ID"[1]), or large scale phishing campaigns (fake jobs or college admissions abroad with 100% applicant success rate, the only catch is scanned IDs and qualifications are required). Electronic forgeries are likely the best way to do it at scale; just the other day, therr was a top story ok faking as if your document was scanned. Do the fine people handling verifications at Twitter know what a legit Madagascan ID looks like? 1. Or "Get $10,000 funeral assistance from this new Biden admin relief program"

Jensson 5y ago
Now you are committing extremely serious crimes instead of just spamming though, few would risk that. So this might not solve all spam, but it would probably solve 99.9% of it. > Do the people at Twitter know what a legit Madagascan ID looks like? Yes, there are guides for checking ID cards, how do you think that they check ID cards in real life?
- sangnoir 5y ago
  > Now you are committing extremely serious crimes instead of just spamming though, few would risk that. Oh no, I've broken the ID forgery laws of Burkina Faso and am in big trouble now. Isn't it a rule of low-level scamming to always target jurisdictions away from your own? State-actors don't care about commiting crimes against themselves, only the mid-level, "semi-pro" threat actors care about avoiding major crimes.

nindalf 5y ago

It’s possible to generate realistic looking IDs. It’s not that hard, any person reading this comment can do it. Get a face from a thispersondoesnotexist.com like generator. Get the format of the ID in a template, fill in random but realistic data. Like for example, 1000 names for each race-gender combo. Realistic zip codes and addresses from another source. It’s about a weeks work to get it working to production quality, but it can be easily done. For bonus credit, see if you can generate an image of the same person holding up this ID. Harder, but not impossible. What’s frustrating is, those of us who work or have worked in Integrity have already discussed all of this for years. We know the easy solutions, the low hanging fruit. It’s not that helpful when a bunch of people say “why don’t you just charge $2 a month”