5 ms·

If you attempt to use a credit card that you haven't used in years, the bank will similarly ask you to verify your identity. I don't think it's weird that unuse

If you attempt to use a credit card that you haven't used in years, the bank will similarly ask you to verify your identity. I don't think it's weird that unused valuable accounts need re-identification when you start to use them again. I don't mind anti-spam measures in cases which are common spam techniques. Hijacking unused accounts is common enough to warrant an approach like this.

comboy 3y ago
But instagram is not a bank. I understand not wanting yet another company to have my photo (which nowadays is pretty much knowing who you are) + phone number. Plus it shouldn't require personal identification to post a photo online, especially given how easy it has became to filter out illegal content automatically.
- tinus_hn 3y ago
  Both sides are reasonable, a common form of spam uses hacked accounts that have grown organically, the normal way, and have then been abandoned. Because they have been used the normal way they are ranked higher than accounts created by bots. So it isn’t that strange that the account is flagged if it suddenly starts posting and the first post is some product. It’s also reasonable not to want to provide Instagram not to have too much information because after all it is Meta, however it’s debatable whether sharing a photo with a photo sharing service is too much information.
  - Beldin 3y ago
    > > I might as well let them delete my account that only follows a bunch of people I know without ever looking at their pictures. > Both sides are reasonable, a common form of spam uses hacked accounts that have grown organically, the normal way, and have then been abandoned. That does not seem to be the case here. When it comes to money, sure, take caution. When it comes to a dozen-or-so followers+followees, abandoned a decade ago with hardly any posts... congratulations, your marketing efforts or network effects were successful and they're back. Now stop trying to steal their personal data under the guise of "security". If you must, feel free to make a password recovery via their emergency mail or something, but don't try to steal personal data.
    - tinus_hn 3y ago
      If you want to complain, complain about Meta abusing recovery mechanisms for spam. The rest just doesn’t work; the accounts get hacked using the recovery mechanism because the email accounts get hacked or expire and they get used for spam.
- flagrant_taco 3y ago
  Posting to Instagram really isn't the same as posting a photo to the internet in general though. That for-profit business is running the software, hosting the servers, and writing their own terms of service, they can block what they want at that point. The real fundamental change after the dot om bubble was that the open web effectively died and was replaced with a handful of walled gardens. If you have your own site and post pictures to it there are very few that can stop you, posting to Instagram and you're effectively politely requesting a company to take rights to your photo and host or online if they would be so kind.
  - JohnFen 3y ago
    This. You're putting yourself at the mercy of these companies, and they have no mercy.
- jasonlotito 3y ago
  [flagged]
  - comboy 3y ago
    Then please explain my wrongness levels. Apart from data grab, what is the issue? Could company be accountable if somebody logged in with correct username and password and posted legal pictures? Because if it doesn't matter if it's bank or not, my bank clearly states that it is not accountable in such scenario.
smcl 3y ago
Wait so if you have a "backup" card in case of emergency, the chances are it'll fail anyway? I kinda hate this stuff where we have to guess at how some company's internal mystery processes work to actually use their service :-/
- phpisthebest 3y ago
  I have this problem all the time with the HSA card (or did until i changed providers) I would rarely use it, but then I would try to pay for something with it and it would be declined, when I called they always said it was "suspended due to inactivity"
  - JKCalhoun 3y ago
    So Yogi Berra works in the security department, not letting you use your card because you never use your card. I love the self-reinforcing nature of it.
  - danaris 3y ago
    That's particularly egregious—what percentage of people with an HSA or similar is likely to be spending money from it more than once every few months??
    - MereInterest 3y ago
      If you have a periodic prescription, then that may require the HSA every time you pick up the prescription.
- bombcar 3y ago
  Yes, if you want to have a "backup" card make sure you use it somewhat regularly. So for example, a backup card you use for gas only, or a store-branded Mastercard that you only usually use at that store. You still run the risk of a block, but it's reduced.
- pasc1878 3y ago
  Yes but it is not hard to get it back - you have to contact the bank In emergency you need to contact your bank. I have had my card declined several times Once on travel to USA - I probably should have told them before - in this case I had to phone them an international call and it was immediately reinstated. They also denied a payment when it was in a place accross the country from my normal use, which wa good as it was not me trying to use it. Basically if your spending is abnormal - e.g. in a different place or for a large amount then you might have to confirm the payment. The benefit is the bank is able to stop more fraud.
Semaphor 3y ago
> the bank will similarly ask you to verify your identity I doubt that. The bank will either cancel my account long before that, or it will work. > Hijacking unused accounts is common enough Ah, yes, for all my 20 or 30 followers, can’t have them see a single image, and of course, the hijackers also hijack the computer those accounts are from, so the IP belongs to the same entity it always did.
- unreal37 3y ago
  Credit card companies run sophisticated anti-fraud operations in real time. Visa "analyzes more than 500 unique risk attributes" the moment you attempt to make a purchase with a card. They make decisions in milliseconds on each purchase to determine whether it might be fraud. This includes looking at past purchase history to see if this transaction is unusual.[1] [1] https://usa.visa.com/visa-everywhere/security/outsmarting-fraudsters-with-advanced-analytics.html https://usa.visa.com/visa-everywhere/security/outsmarting-fr...
  - CyberDildonics 3y ago
    This looks like you copy and pasted an ad from somewhere. Anyone who has used a credit card for a while knows their 'anti fraud' is not very sophisticated and anyone who has used a computer should know that whatever they do happens 'in milliseconds'.
junon 3y ago
There's a difference between a bank's threat model and a social media company's.

comboy 3y ago

But instagram is not a bank. I understand not wanting yet another company to have my photo (which nowadays is pretty much knowing who you are) + phone number. Plus it shouldn't require personal identification to post a photo online, especially given how easy it has became to filter out illegal content automatically.

tinus_hn 3y ago
Both sides are reasonable, a common form of spam uses hacked accounts that have grown organically, the normal way, and have then been abandoned. Because they have been used the normal way they are ranked higher than accounts created by bots. So it isn’t that strange that the account is flagged if it suddenly starts posting and the first post is some product. It’s also reasonable not to want to provide Instagram not to have too much information because after all it is Meta, however it’s debatable whether sharing a photo with a photo sharing service is too much information.
- Beldin 3y ago
  > > I might as well let them delete my account that only follows a bunch of people I know without ever looking at their pictures. > Both sides are reasonable, a common form of spam uses hacked accounts that have grown organically, the normal way, and have then been abandoned. That does not seem to be the case here. When it comes to money, sure, take caution. When it comes to a dozen-or-so followers+followees, abandoned a decade ago with hardly any posts... congratulations, your marketing efforts or network effects were successful and they're back. Now stop trying to steal their personal data under the guise of "security". If you must, feel free to make a password recovery via their emergency mail or something, but don't try to steal personal data.
  - tinus_hn 3y ago
    If you want to complain, complain about Meta abusing recovery mechanisms for spam. The rest just doesn’t work; the accounts get hacked using the recovery mechanism because the email accounts get hacked or expire and they get used for spam.
flagrant_taco 3y ago
Posting to Instagram really isn't the same as posting a photo to the internet in general though. That for-profit business is running the software, hosting the servers, and writing their own terms of service, they can block what they want at that point. The real fundamental change after the dot om bubble was that the open web effectively died and was replaced with a handful of walled gardens. If you have your own site and post pictures to it there are very few that can stop you, posting to Instagram and you're effectively politely requesting a company to take rights to your photo and host or online if they would be so kind.
- JohnFen 3y ago
  This. You're putting yourself at the mercy of these companies, and they have no mercy.
jasonlotito 3y ago
[flagged]
- comboy 3y ago
  Then please explain my wrongness levels. Apart from data grab, what is the issue? Could company be accountable if somebody logged in with correct username and password and posted legal pictures? Because if it doesn't matter if it's bank or not, my bank clearly states that it is not accountable in such scenario.

smcl 3y ago

Wait so if you have a "backup" card in case of emergency, the chances are it'll fail anyway? I kinda hate this stuff where we have to guess at how some company's internal mystery processes work to actually use their service :-/

phpisthebest 3y ago
I have this problem all the time with the HSA card (or did until i changed providers) I would rarely use it, but then I would try to pay for something with it and it would be declined, when I called they always said it was "suspended due to inactivity"
- JKCalhoun 3y ago
  So Yogi Berra works in the security department, not letting you use your card because you never use your card. I love the self-reinforcing nature of it.
- danaris 3y ago
  That's particularly egregious—what percentage of people with an HSA or similar is likely to be spending money from it more than once every few months??
  - MereInterest 3y ago
    If you have a periodic prescription, then that may require the HSA every time you pick up the prescription.
bombcar 3y ago
Yes, if you want to have a "backup" card make sure you use it somewhat regularly. So for example, a backup card you use for gas only, or a store-branded Mastercard that you only usually use at that store. You still run the risk of a block, but it's reduced.
pasc1878 3y ago
Yes but it is not hard to get it back - you have to contact the bank In emergency you need to contact your bank. I have had my card declined several times Once on travel to USA - I probably should have told them before - in this case I had to phone them an international call and it was immediately reinstated. They also denied a payment when it was in a place accross the country from my normal use, which wa good as it was not me trying to use it. Basically if your spending is abnormal - e.g. in a different place or for a large amount then you might have to confirm the payment. The benefit is the bank is able to stop more fraud.

Semaphor 3y ago

> the bank will similarly ask you to verify your identity I doubt that. The bank will either cancel my account long before that, or it will work. > Hijacking unused accounts is common enough Ah, yes, for all my 20 or 30 followers, can’t have them see a single image, and of course, the hijackers also hijack the computer those accounts are from, so the IP belongs to the same entity it always did.

unreal37 3y ago
Credit card companies run sophisticated anti-fraud operations in real time. Visa "analyzes more than 500 unique risk attributes" the moment you attempt to make a purchase with a card. They make decisions in milliseconds on each purchase to determine whether it might be fraud. This includes looking at past purchase history to see if this transaction is unusual.[1] [1] https://usa.visa.com/visa-everywhere/security/outsmarting-fraudsters-with-advanced-analytics.html https://usa.visa.com/visa-everywhere/security/outsmarting-fr...
- CyberDildonics 3y ago
  This looks like you copy and pasted an ad from somewhere. Anyone who has used a credit card for a while knows their 'anti fraud' is not very sophisticated and anyone who has used a computer should know that whatever they do happens 'in milliseconds'.

junon 3y ago

There's a difference between a bank's threat model and a social media company's.