Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

How Hypothes.is is going to fix online Identity and Reputation

readwriteweb.com

Post reply on HN
Print view View original

11–20 of 22 posts

Re: How Hypothes.is is going to fix online Identity and Reputation

#11

Post by tilgovi »

droithomme wrote: post #10

Yet another horrific police state nightmare under construction.

Quite the opposite, actually. I will be seriously considering the privacy implications of everything we do. One of our core principles is a commitment to pseudonymous accounts. To the extent we allow multiple identities to be linked to one account, it will be in your control to do so (or not) as suits your multi-faceted persona, tin foil hat paranoias, or legitimate privacy concerns. While we understand there is a social cost to cheap pseudonyms (see Friedman, Resnick (2001) http://www.si.umich.edu/~presnick/papers/identifiers/081199....), we believe we can develop a reputation system and a user community that resists gaming attempts without significant barriers to entry or privacy-invading personal information mining.

The goal of Hypothes.is is, on the contrary, to be a forum where you can voice your opposition to policies you find to be ushering in a police state and have the community weigh in on an informed discussion.

Re: How Hypothes.is is going to fix online Identity and Reputation

#12

Post by tilgovi »

18pfsmt wrote: post #9
Adaptive wrote: post #6

Very excited to see this move forward. Look at this project and compare it to something like diaspora, and you see some significant differences which give hope that this can achieve traction, notably the extensive, deep market research done up front.

Have you ever looked at the number of Diaspora-like (AKA distributed/ federated) social networking projects? http://en.wikipedia.org/wiki/Distributed_social_network

We're not trying to compete for attention in the social web. Part of that is reflected in our involvement with the W3C Open Annotation Working Group (http://www.w3.org/community/openannotation/). While Hypothes.is may be one place to publish, the goal is to provide better linking and referencing tools to facilitate aggregators and plugins that can bring the conversation back to the source material. In other words, to bring this conversation on HN into the RWW frame and vice versa and to allow better quoting and transclusion between these content silos.

Re: How Hypothes.is is going to fix online Identity and Reputation

#13

Post by kijin »

> Real people are multi-faceted. We want to be able to express different aspects of ourselves in different contexts. [links to Chris Poole's "identity is prismatic" interview]

So far, sounds OK. But then,

> A pseudonym could also be privately verified with a government-issued ID or some other standard, so the user remains pseudonymous to the world, but the reputation system knows who it is.

Really? Seriously? Government ID is about as far away from multi-faceted identity as you can get. The consequence of a database compromise is also going to be orders of magnitude more catastrophic than the average password leak.

Not even Google knows my driver's license number, and I'm sure a lot of us would like to keep it that way. If you want to know what happens when you tie all online identities to Government IDs, just look at South Korea.

Re: How Hypothes.is is going to fix online Identity and Reputation

#14

Post by tilgovi »

kijin wrote: post #13

> Real people are multi-faceted. We want to be able to express different aspects of ourselves in different contexts. [links to Chris Poole's "identity is prismatic" interview] So far, sounds OK. But then, > A pseudonym could also be privately verified with a government-issued ID or some other standard, so the user remains pseudonymous to the world, but the reputation system knows who it is. Really? Seriously? Governm…

I think Jon was just trying to provide some information on the spectrum of possible identity solutions one can choose from. At Hypothes.is, it's extremely unlikely we would try to do anything like this. However, it does represent a form of "verified pseudonymous" identity, in which your uniqueness as an entity is verified by a central authority, but that identity is never exposed. See my comment below for more information about what we might actually implement.

Re: How Hypothes.is is going to fix online Identity and Reputation

#16

Post by kijin »

tilgovi wrote: post #14
kijin wrote: post #13

> Real people are multi-faceted. We want to be able to express different aspects of ourselves in different contexts. [links to Chris Poole's "identity is prismatic" interview] So far, sounds OK. But then, > A pseudonym could also be privately verified with a government-issued ID or some other standard, so the user remains pseudonymous to the world, but the reputation system knows who it is. Really? Seriously? Governm…

I think Jon was just trying to provide some information on the spectrum of possible identity solutions one can choose from. At Hypothes.is, it's extremely unlikely we would try to do anything like this. However, it does represent a form of "verified pseudonymous" identity, in which your uniqueness as an entity is verified by a central authority, but that identity is never exposed. See my comment below for more inform…

Thanks for the clarification. But the concern remains that a single "central authority", namely hypothes.is, gets to maintain a huge database that links online pseudonyms to verified real-world identities. That's going to make hypothes.is one hell of a target, not only for identity thieves but also for government authorities of all stripes. Meanwhile you'll need to convince people that they should trust you with that information.

Sure, any large online identity provider that possesses enough data to link online identities to real-world identities (such as Facebook) will face the same problem. If this takes off, Chinese hackers will be crawling under your mattress and your PO Box will be overflowing with subpoenas and national security letters before you can say eff-bee-eye. But ideally I'd like to see this problem fixed in some creative way, not merely repeated and exacerbated in a centralized form.

Honestly, I have no idea how one might achieve both verification and pseudonymity without cutting corners somewhere else. But I do have some hope for you guys because it seems that EFF is involved. Those people really know how to play with pseudonyms.

/tinfoil hat

Re: How Hypothes.is is going to fix online Identity and Reputation

#17

Post by tilgovi »

kijin wrote: post #16
tilgovi wrote: post #14

Earlier quoted context omitted.

I think Jon was just trying to provide some information on the spectrum of possible identity solutions one can choose from. At Hypothes.is, it's extremely unlikely we would try to do anything like this. However, it does represent a form of "verified pseudonymous" identity, in which your uniqueness as an entity is verified by a central authority, but that identity is never exposed. See my comment below for more inform…

Thanks for the clarification. But the concern remains that a single "central authority", namely hypothes.is, gets to maintain a huge database that links online pseudonyms to verified real-world identities. That's going to make hypothes.is one hell of a target, not only for identity thieves but also for government authorities of all stripes. Meanwhile you'll need to convince people that they should trust you with that…

Thanks! Wherever possible I'd like to ditch the personal information after signup and just keep a hash or something that we can use to prevent multiple accounts using the same Twitter, OpenID, etc, linking only these opaque tokens to user IDs in our database. I'm trying to put together our user tables and login system in the next day or so and welcome any comments or concerns you have with the implementation. Feel free to jump into our dev list or #hypothes.is on Freenode.

Re: How Hypothes.is is going to fix online Identity and Reputation

#18

Post by notatoad »

tilgovi wrote: post #14
kijin wrote: post #13

> Real people are multi-faceted. We want to be able to express different aspects of ourselves in different contexts. [links to Chris Poole's "identity is prismatic" interview] So far, sounds OK. But then, > A pseudonym could also be privately verified with a government-issued ID or some other standard, so the user remains pseudonymous to the world, but the reputation system knows who it is. Really? Seriously? Governm…

I think Jon was just trying to provide some information on the spectrum of possible identity solutions one can choose from. At Hypothes.is, it's extremely unlikely we would try to do anything like this. However, it does represent a form of "verified pseudonymous" identity, in which your uniqueness as an entity is verified by a central authority, but that identity is never exposed. See my comment below for more inform…

This reply still seems to indicate a fundamental misunderstanding of multifaceted identity. The fact that i am one physical person should be irrelevant to a reputation service. If I have one identity that I use to post jokes on reddit and another identity that I use to post serious content, those identities should have different reputations. What I do with one should not affect the other. My uniqueness should not have to be verified, the only thing that should matter towards my reputation is what the persona I am currently acting as has done before.

Re: How Hypothes.is is going to fix online Identity and Reputation

#19

Post by tilgovi »

notatoad wrote: post #18
tilgovi wrote: post #14

Earlier quoted context omitted.

I think Jon was just trying to provide some information on the spectrum of possible identity solutions one can choose from. At Hypothes.is, it's extremely unlikely we would try to do anything like this. However, it does represent a form of "verified pseudonymous" identity, in which your uniqueness as an entity is verified by a central authority, but that identity is never exposed. See my comment below for more inform…

This reply still seems to indicate a fundamental misunderstanding of multifaceted identity. The fact that i am one physical person should be irrelevant to a reputation service. If I have one identity that I use to post jokes on reddit and another identity that I use to post serious content, those identities should have different reputations. What I do with one should not affect the other. My uniqueness should not hav…

Yes. I totally agree. I would certainly love to support multiple distinct personas. There is an open question of how to do that while mitigating the damage potential. There are also cases where multiple personas might usefully be linked. For example, when commenting on programming issues you might want to link your persona to your stackoverflow identity or your HN account. Honestly, the biggest mistake I could make would be to assume I know what the community wants before we have a community. I think it's probably wise to err on the side of less friction and more prismatic identity and deal with restricting multiple signups if/when we need to. For now I plan to enforce uniqueness for outside identities (only one pseudonym per Twitter account) but also allow a basic reCAPTCHA username/password signup. If someone wants to contribute code to manage multiple personas within one account that would be fabulous, but annotation functionality feels more priority for me. If you think there's still a fundamental misunderstanding please continue, but I totally agree with your comment and don't think there's anything about it that's incompatible with my current vision.
Post reply on HN