4 ms·
It's a bit different when someone is being intentionally deceptive. None of the major social platforms or protocols guard effectively against someone making a d
by Zak 2y ago
It's a bit different when someone is being intentionally deceptive. None of the major social platforms or protocols guard effectively against someone making a deceptively similar username to impersonate someone.
I bet the vast majority of non-technical people who use email would correctly answer that the two email addresses might belong to different people if asked. That doesn't mean they'll be checking closely while using email every time.
Something similar is possible on Bluesky since usernames are domain names.
- eichin 2y agoIt looks like bluesky only just figured out (in the last couple of weeks, I think?) that even if you authenticate foo.example.com they need to keep foo.bsky.social reserved, because otherwise they immediately get snapped up for impersonation. So, yeah, possible and already happening, but at least they're trying to mitigate the worst case of it.