6 ms·

Facebook and Twitter are basically closed to new users. If you've gone this far without an account, your new one will be shut down for being a bot within hours

Facebook and Twitter are basically closed to new users. If you've gone this far without an account, your new one will be shut down for being a bot within hours of creating a new account, or flagged for "extra verification" which requires sending a government ID to these companies so they can verify that you didn't photoshop a fake government ID. This new approach seeks to extend this feature to the entire internet. What could possibly go wrong?

Buffout 4y ago
> so they can verify that you didn't photoshop a fake government ID. Huh. How?
- MonkeyClub 4y ago
  By taking a publicly available template, and putting in your details and mugshot.
  - Buffout 4y ago
    I mean how can Facebook check government ID if it is legit? ( not how to photoshop ID. )
    - Diggsey 4y ago
      You generally can't actually check the government databases directly, but you can still determine this. First, companies can catch most fraudulent documents simply by looking at the document (eg. are the fonts all correct, does the checksum on the MRZ add up, does the data in the MRZ match the data on the face of the document, does the data on the document match previously collected data about the individual, etc.) Some will go further by combining this with a "liveness" check (eg. they might ask you to take a picture of yourself in a certain pose, or to record a short video looking side to side) Second, companies can use a soft credit check (if authorised by the user, which would need to be in the fine print when you sign up or when you are asked for such a document). Such a credit check won't affect your credit score, but can be used by companies to see if an individual with your details exists. Companies which offer such credit data in the UK/US/other western countries typically boast of 90-95% match rates across a population, but obviously younger people are less likely to be found since they are less likely to have a credit history. This is typically aggregated with data from non credit sources (electoral roll information, county court judgements, etc.) to reach those high match rates. They might also geo-locate the IP address from which you accessed their site and compare it against any address information they have on you (which could come from you providing it on sign up, it could be extracted from the document if it's a driving license or something, or it could come from any credit records they found relating to you) For Facebook specifically, they might look at other online activity - other social media accounts they can link to you, etc. And throw all of that into the mix. If at the end of all that they don't have a clear answer, they might fall back to a manual process, or allow the account to be created but have content posted by the account flagged for manual review.
      - jpmattia 4y ago
        > eg. are the fonts all correct, does the checksum on the MRZ add up, ... Is that hard? A quick googling shows websites that will generate a California driver's license for virtually no money, so I'd assume with decent programming skills should be able to put together a generator. See eg https://www.verif.tools/en/dl_ca/ https://www.verif.tools/en/dl_ca/
        Buffout 4y ago
        That's the easy part. Checksum algorithms are public knowledge.
  - htrp 4y ago
    thete are actual id lookup verification services......
dustedcodes 4y ago
> If you've gone this far without an account So they admit that new generations are not interested in FB or Twitter and they will die with the boomer generation? If not then this logic makes little sense :)
71bw 4y ago
I create a new account every 6 months or so on Facebook when my old one gets banned for "violating the community guidelines" and I haven't been asked for an ID ever since 2019. Twitter, though, is way worse and I had to give up and I'm currently just buying aged accounts. Violates even more parts of the ToS than just ban evasion but at least the accounts last for years instead of weeks.
- ridgered4 4y ago
  I gave up on facebook (but I wasn't trying that hard) but it seemed to be using the extortion practices a lot of services use now. At first it appears to let you create an account but upon logging in for the first time it demands a phone number for 'verification'. Microsoft was even worse when they migrated my mojang account, it let me use it for a little while before demanding the number. Back when I had a facebook account I recall it suddenly up and demanding I scan my drivers license one day or I couldn't log in again...on the same and only machine I actually had used facebook on.
- thorin 4y ago
  What do you have to do to get banned? I've seen people getting banned temporarily but I haven't heard of anyone getting banned permanently.
  - pookha 4y ago
    If you don't like somebody on Facebook you can report them for offensive content. I posted something that some asshole facebook friend didn't appreciate and they dug through my facebook feed and found one image that was borderline (somebody in politics in their drawers) and sent in a complaint to facebook. Got my account banned for a first strike. Same douche could have sent in more complaints and facebook would have happily given me three strikes. It's a Stasi system. Don't like your boss or your neighbor, report them...
    - dncornholio 4y ago
      What if my boss or neighbour didn't post anything that's against the TOS?
ezfe 4y ago
I created a Facebook account a few months ago to use Marketplace. The profile has only a name and unique-to-facebook email. I always use it in Firefox Containers. Still active, and I've sold a handful of things with it.

Buffout 4y ago

> so they can verify that you didn't photoshop a fake government ID. Huh. How?

MonkeyClub 4y ago
By taking a publicly available template, and putting in your details and mugshot.
- Buffout 4y ago
  I mean how can Facebook check government ID if it is legit? ( not how to photoshop ID. )
  - Diggsey 4y ago
    You generally can't actually check the government databases directly, but you can still determine this. First, companies can catch most fraudulent documents simply by looking at the document (eg. are the fonts all correct, does the checksum on the MRZ add up, does the data in the MRZ match the data on the face of the document, does the data on the document match previously collected data about the individual, etc.) Some will go further by combining this with a "liveness" check (eg. they might ask you to take a picture of yourself in a certain pose, or to record a short video looking side to side) Second, companies can use a soft credit check (if authorised by the user, which would need to be in the fine print when you sign up or when you are asked for such a document). Such a credit check won't affect your credit score, but can be used by companies to see if an individual with your details exists. Companies which offer such credit data in the UK/US/other western countries typically boast of 90-95% match rates across a population, but obviously younger people are less likely to be found since they are less likely to have a credit history. This is typically aggregated with data from non credit sources (electoral roll information, county court judgements, etc.) to reach those high match rates. They might also geo-locate the IP address from which you accessed their site and compare it against any address information they have on you (which could come from you providing it on sign up, it could be extracted from the document if it's a driving license or something, or it could come from any credit records they found relating to you) For Facebook specifically, they might look at other online activity - other social media accounts they can link to you, etc. And throw all of that into the mix. If at the end of all that they don't have a clear answer, they might fall back to a manual process, or allow the account to be created but have content posted by the account flagged for manual review.
    - jpmattia 4y ago
      > eg. are the fonts all correct, does the checksum on the MRZ add up, ... Is that hard? A quick googling shows websites that will generate a California driver's license for virtually no money, so I'd assume with decent programming skills should be able to put together a generator. See eg https://www.verif.tools/en/dl_ca/ https://www.verif.tools/en/dl_ca/
      - Buffout 4y ago
        That's the easy part. Checksum algorithms are public knowledge.
- htrp 4y ago
  thete are actual id lookup verification services......

dustedcodes 4y ago

> If you've gone this far without an account So they admit that new generations are not interested in FB or Twitter and they will die with the boomer generation? If not then this logic makes little sense :)

71bw 4y ago

I create a new account every 6 months or so on Facebook when my old one gets banned for "violating the community guidelines" and I haven't been asked for an ID ever since 2019. Twitter, though, is way worse and I had to give up and I'm currently just buying aged accounts. Violates even more parts of the ToS than just ban evasion but at least the accounts last for years instead of weeks.

ridgered4 4y ago
I gave up on facebook (but I wasn't trying that hard) but it seemed to be using the extortion practices a lot of services use now. At first it appears to let you create an account but upon logging in for the first time it demands a phone number for 'verification'. Microsoft was even worse when they migrated my mojang account, it let me use it for a little while before demanding the number. Back when I had a facebook account I recall it suddenly up and demanding I scan my drivers license one day or I couldn't log in again...on the same and only machine I actually had used facebook on.
thorin 4y ago
What do you have to do to get banned? I've seen people getting banned temporarily but I haven't heard of anyone getting banned permanently.
- pookha 4y ago
  If you don't like somebody on Facebook you can report them for offensive content. I posted something that some asshole facebook friend didn't appreciate and they dug through my facebook feed and found one image that was borderline (somebody in politics in their drawers) and sent in a complaint to facebook. Got my account banned for a first strike. Same douche could have sent in more complaints and facebook would have happily given me three strikes. It's a Stasi system. Don't like your boss or your neighbor, report them...
  - dncornholio 4y ago
    What if my boss or neighbour didn't post anything that's against the TOS?

ezfe 4y ago

I created a Facebook account a few months ago to use Marketplace. The profile has only a name and unique-to-facebook email. I always use it in Firefox Containers. Still active, and I've sold a handful of things with it.