5 ms·

W – The European social network for verified humans

43 points by layer8 6mo ago

recursivecaveat 5mo ago
I appreciate the sentiment I guess, but you can't really verify the human-ness of a poster. At best you can validate that at some point(s) they completed a human-is-present check. Doesn't necessarily mean anything about a given post. Moltbook (wow that feels like forever ago) has the inverse problem: you can just larp as a kooky bot. At best maybe you can do something like limit the number of bots to the number of people who are willing to set aside their personal credentials, which is probably way more bots than you can stand.
- perching_aix 5mo ago
  They could tie the identities to governmental identities in a blind manner. The pitfalls are as follows: - the governments can just arbitrarily manufacture identities - identities (govt and this) can be stolen - identities can be misused (coercively or consensually, e.g. by passing on access to another person or automation) Still would beat the current state of affairs, which is piss-all identity attestation, but then they're not actually doing this. They're scanning official documents and go LGTM + pinky promise. Hard skip.
  - pixel_popping 5mo ago
    When sending identity to a remote server in cleartext, you must assume that you are giving away the data associated with it, it's just basic security principles, if the engineers behind this don't care enough to KYC using cryptographic ways which already exists, then you can be sure there is some sort of incompetency and/or malice :) If I browse an http website, then I know that someone could be using the data, if I put my passport somewhere, then I know someone could as well, apparently having thousand of leaks every year isn't enough of a proof to people :/
sakjur 5mo ago
There's a C-suite of five people and a board of advisors I couldn't be bothered to count before their public beta for an AtProto instance. That just seems too heavy an operation for my taste. Seems prone to either infighting or raising too much early capital.
quiet35 5mo ago
I am just gonna leave it here. Privacy Policy: 3.2. Identity verification through W Identity. To create a W Social account, you must first verify your identity through W Identity. W Identity operates an independent identity verification service that allows you to verify your identity once and then selectively share verified attributes with third-party applications under your control. 3.3. During the W Identity verification process, you will be asked to provide your phone number, email address, and date of birth, and to verify your identity using an official passport (via photo or NFC scan) and a selfie. This process is governed by W Identity’s own terms of service and privacy notice [...] From the "W Identity" Play Store page: Data that may be shared with other companies or organizations: Personal info: Name, Email address, User IDs, and Other info Photos and videos: Photos Location: Approximate location Messages: Other in-app messages Device or other IDs
- lxgr 5mo ago
  Wow, they’re collecting a bunch of PII instead of using the zero-knowledge proof of humanity thing that the EU ID wallet is supposed to support? How uneuropean.
  - perching_aix 5mo ago
    This but unsarcastically, much to your dismay I'm sure, as usual.
  - pixel_popping 5mo ago
    Weak developers, weak leaders, no talent. All of those including the location can be recorded anonymously and securely.
- andrewstuart 5mo ago
  They should just hand all that stuff directly to criminals. Cut out the middle man of when their systems are hacked, saving everyone time and stress.
- InterlooperX 5mo ago
  Wow. Is that all? And here I though, iris scans, dna sample and the promise of my eventual first born would be in there. What a bargain. Can't wait to do this and then get to use my "W account" to log into pornhub...
tardedmeme 5mo ago
Signed up several accounts for the beta. Let's see how much of a photoshop they'll accept as verification.
- Paradigm2020 5mo ago
  Do share later as a post :)
- pixel_popping 5mo ago
  It's flawed as well, all KYC-accounts are available for sale in many places, example Wise accounts, FB KYC verified accounts and so on, can buy by the thousands. You can also just pay people to KYC (very easy) or do a "KYC Proxy with some DOM mirroring" with a fake service, ton of ways if you are a bit creative and have talent. It does absolutely NOT prove that you are seeing human-made posts but incompetent users might believe so, I give them that.
metalman 5mo ago
please take this, as part tounge in cheek and legitimate comment what, exactly, has "european" got to do with bieng a "verified human" maybe I should ask a dog
- hoppyhoppy2 5mo ago
  Users can be from anywhere in the world, but they're making a selling point of it being built in Europe, hosted on European infrastructure, and governed by European law. The linked page shows this pretty clearly, I think.
zoobab 5mo ago
Boycott. My social network is IRC, never needed to reveal my ID behind my nickname.
- wolvoleo 5mo ago
  Even here it's not necessary to give even an email address. Greatly appreciated.
severine 5mo ago
Some points raised here seem worth pointing out: https://blog.elenarossini.com/w-social-uncovered-the-reality-behind-the-hype/ https://blog.elenarossini.com/w-social-uncovered-the-reality...
dddaria 5mo ago
Nobody should trust the EU
- deleted 5mo ago
  [deleted]
- geek_at 5mo ago
  Unless you're not blind to all things we have because of them
- extraduder_ire 5mo ago
  What does this have to do with the EU?
rie_t 5mo ago
This website is so laggy I can barely even scroll.
ktallett 5mo ago
On the day I have deleted all social network accounts bar Mastodon, as I have realised I just don't care anymore. Any one I want in my life, I have the phone number of, any one I can take or leave I don't. Mastodon is more than enough for exploring and finding interesting projects that I otherwise wouldn't have learned about.
lgcmo 5mo ago
The website performance is not confidence inspiring

43 points by layer8 6mo ago

I appreciate the sentiment I guess, but you can't really verify the human-ness of a poster. At best you can validate that at some point(s) they completed a human-is-present check. Doesn't necessarily mean anything about a given post. Moltbook (wow that feels like forever ago) has the inverse problem: you can just larp as a kooky bot. At best maybe you can do something like limit the number of bots to the number of people who are willing to set aside their personal credentials, which is probably way more bots than you can stand.

perching_aix 5mo ago
They could tie the identities to governmental identities in a blind manner. The pitfalls are as follows: - the governments can just arbitrarily manufacture identities - identities (govt and this) can be stolen - identities can be misused (coercively or consensually, e.g. by passing on access to another person or automation) Still would beat the current state of affairs, which is piss-all identity attestation, but then they're not actually doing this. They're scanning official documents and go LGTM + pinky promise. Hard skip.
- pixel_popping 5mo ago
  When sending identity to a remote server in cleartext, you must assume that you are giving away the data associated with it, it's just basic security principles, if the engineers behind this don't care enough to KYC using cryptographic ways which already exists, then you can be sure there is some sort of incompetency and/or malice :) If I browse an http website, then I know that someone could be using the data, if I put my passport somewhere, then I know someone could as well, apparently having thousand of leaks every year isn't enough of a proof to people :/

sakjur 5mo ago

There's a C-suite of five people and a board of advisors I couldn't be bothered to count before their public beta for an AtProto instance. That just seems too heavy an operation for my taste. Seems prone to either infighting or raising too much early capital.

quiet35 5mo ago

I am just gonna leave it here. Privacy Policy: 3.2. Identity verification through W Identity. To create a W Social account, you must first verify your identity through W Identity. W Identity operates an independent identity verification service that allows you to verify your identity once and then selectively share verified attributes with third-party applications under your control. 3.3. During the W Identity verification process, you will be asked to provide your phone number, email address, and date of birth, and to verify your identity using an official passport (via photo or NFC scan) and a selfie. This process is governed by W Identity’s own terms of service and privacy notice [...] From the "W Identity" Play Store page: Data that may be shared with other companies or organizations: Personal info: Name, Email address, User IDs, and Other info Photos and videos: Photos Location: Approximate location Messages: Other in-app messages Device or other IDs

lxgr 5mo ago
Wow, they’re collecting a bunch of PII instead of using the zero-knowledge proof of humanity thing that the EU ID wallet is supposed to support? How uneuropean.
- perching_aix 5mo ago
  This but unsarcastically, much to your dismay I'm sure, as usual.
- pixel_popping 5mo ago
  Weak developers, weak leaders, no talent. All of those including the location can be recorded anonymously and securely.
andrewstuart 5mo ago
They should just hand all that stuff directly to criminals. Cut out the middle man of when their systems are hacked, saving everyone time and stress.
InterlooperX 5mo ago
Wow. Is that all? And here I though, iris scans, dna sample and the promise of my eventual first born would be in there. What a bargain. Can't wait to do this and then get to use my "W account" to log into pornhub...

tardedmeme 5mo ago

Signed up several accounts for the beta. Let's see how much of a photoshop they'll accept as verification.

Paradigm2020 5mo ago
Do share later as a post :)
pixel_popping 5mo ago
It's flawed as well, all KYC-accounts are available for sale in many places, example Wise accounts, FB KYC verified accounts and so on, can buy by the thousands. You can also just pay people to KYC (very easy) or do a "KYC Proxy with some DOM mirroring" with a fake service, ton of ways if you are a bit creative and have talent. It does absolutely NOT prove that you are seeing human-made posts but incompetent users might believe so, I give them that.

metalman 5mo ago

please take this, as part tounge in cheek and legitimate comment what, exactly, has "european" got to do with bieng a "verified human" maybe I should ask a dog

hoppyhoppy2 5mo ago
Users can be from anywhere in the world, but they're making a selling point of it being built in Europe, hosted on European infrastructure, and governed by European law. The linked page shows this pretty clearly, I think.

zoobab 5mo ago

Boycott. My social network is IRC, never needed to reveal my ID behind my nickname.

wolvoleo 5mo ago
Even here it's not necessary to give even an email address. Greatly appreciated.

severine 5mo ago

Some points raised here seem worth pointing out: https://blog.elenarossini.com/w-social-uncovered-the-reality-behind-the-hype/ https://blog.elenarossini.com/w-social-uncovered-the-reality...

dddaria 5mo ago

Nobody should trust the EU

deleted 5mo ago
[deleted]
geek_at 5mo ago
Unless you're not blind to all things we have because of them
extraduder_ire 5mo ago
What does this have to do with the EU?

rie_t 5mo ago

This website is so laggy I can barely even scroll.

ktallett 5mo ago

On the day I have deleted all social network accounts bar Mastodon, as I have realised I just don't care anymore. Any one I want in my life, I have the phone number of, any one I can take or leave I don't. Mastodon is more than enough for exploring and finding interesting projects that I otherwise wouldn't have learned about.

lgcmo 5mo ago

The website performance is not confidence inspiring