Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Twitter starts to require login to view tweets

reddit.com

Post reply on HN
Print view View original

241–250 of 643 posts

Re: Twitter starts to require login to view tweets

#241

Post by dijit »

throw6746 wrote: post #213
dijit wrote: post #201

Earlier quoted context omitted.

I see a lot of spam on Reddit. That does nothing to speak of “auto moderator”, fragmented rules/guidelines and ilk and the sheer effort involved by volunteers. Even then: the spam gets through. But I agree that PII is not solving this.

>I see a lot of spam on Reddit. Where? I've seens a couple of ghost subreddits with spam, but then you see the same with ghost fb groups, weird twitter profiles, youtube, etc On even moderately sized subs I've seen any that wasn't removed quickly by the mods. People can say mods are too expensive for fb and twitter, but there is the dishonesty, instead of paying mods they pass on that cost to us with our pii while pr…

uptimeporn, for a very specific example from today. I wont link it because the spam is NSFW and probably removed by now, but- I saw it, so moderation effort is obviously not effective.

Re: Twitter starts to require login to view tweets

#242

Post by nick__m »

IX-103 wrote: post #222
rkeene2 wrote: post #121

Earlier quoted context omitted.

One option might be to allow people to view tweets if they have accounts from reputable federated identity providers, then you have an identity of an individual person without having to do the validation yourself. You can then rate-limit based on that individual ID. Another option might be to rate-limit by things which don't require accounts, which won't strictly rate-limit individuals, but it's unlikely that's the t…

Currently federated identity providers do not provide a separate identity to each site you are authenticated on. At that point any collaborating sites can pull together all the information you give to any one of them. Hell, in most cases your "identity" is your email address, so every site you authenticate with can spam you directly. "Trust tokens" was built to deal with these issues just for this use case: https://d…

The Shibboleth Idp also support per SP opaque nameID but nobody like SAML based protocol and as far as I know outside the academical identity federations, no one deploys Shibboleth ...

Re: Twitter starts to require login to view tweets

#243

Post by JadeNB »

VWWHFSfQ wrote: post #225
eurasiantiger wrote: post #218

Earlier quoted context omitted.

Remind me again, why did we leave IRC?

Because IRC hasn't meaningfully improved in about 30 years. There have been attempts to make it friendlier with things like IRCCloud, but then the beards just scoff at the idea of a $5/month bouncer-as-a-service and go right back to wondering why the protocol is dying.

> Because IRC hasn't meaningfully improved in about 30 years.

I'd way rather have something that doesn't improve for 30 years than something that actively gets worse at a rapid clip.

Re: Twitter starts to require login to view tweets

#244

Post by tomc1985 »

est31 wrote: post #106
Spivak wrote: post #95

Earlier quoted context omitted.

I mean what do you want them to actually do instead? Like seriously I’ve implemented at a company I worked for and it’s the least invasive thing to actually rate limit people. Alternatives included: - pay a small fee but that requires a credit card - send us government documents which is worse - mine crypto for a while but it doesn’t stop people who are actually motivated - send a selfie and then do some face matchin…

Personally I'm a fan of the fee idea. You can quickly outstrip the yearly revenue per user with even a small fee, and the fee payment could e.g. happen via PayPal which doesn't require credit cards, to give one example. The issue with fees though is that you might need a billable address for tax purposes which renders this entire exercise pointless.

MetaFilter's been doing this for decades and it seems to be working well for them

Re: Twitter starts to require login to view tweets

#246

Post by JadeNB »

queuebert wrote: post #81
_dujt wrote: post #80

Earlier quoted context omitted.

Of course, in order to help out the unfortunate website operators, people should willingly give up pii that the same companies have shown they don’t give a damn about protecting. /s

"For your protection." The most abused and dishonest phrase of the 21st century.

> The most abused and dishonest phrase of the 21st century.

The T&C equivalent of "your call is very important to us"?

Re: Twitter starts to require login to view tweets

#247

Post by turminal »

hk__2 wrote: post #226
eurasiantiger wrote: post #218

Earlier quoted context omitted.

Remind me again, why did we leave IRC?

IRC is just a protocol; it’s not immune to these issues (see the last Freenode debacle).

It is immune, precisely because it's a protocol. Freenode is dead but switching to another network is literally as simple as pointing the client to a different domain name.

Re: Twitter starts to require login to view tweets

#248

Post by rkeene2 »

nick__m wrote: post #242
IX-103 wrote: post #222

Earlier quoted context omitted.

Currently federated identity providers do not provide a separate identity to each site you are authenticated on. At that point any collaborating sites can pull together all the information you give to any one of them. Hell, in most cases your "identity" is your email address, so every site you authenticate with can spam you directly. "Trust tokens" was built to deal with these issues just for this use case: https://d…

The Shibboleth Idp also support per SP opaque nameID but nobody like SAML based protocol and as far as I know outside the academical identity federations, no one deploys Shibboleth ...

Shibboleth is terrible -- so terrible it was easier for me to write my own SAML IdP from the specification than try to make it useful. Lots of people use Active Directory Federated Services (ADFS), which has a SAML IdP.

Re: Twitter starts to require login to view tweets

#249

Post by bityard »

eurasiantiger wrote: post #218
sneak wrote: post #196

Earlier quoted context omitted.

It's worse: Twitter staff sold private user PII to the Saudi government (the one that assassinates journalists): https://www.buzzfeednews.com/article/alexkantrowitz/how-saud...

Remind me again, why did we leave IRC?

I don't understand the question. IRC is a real-time chat protocol and twitter is a proprietary micro-blogging website. I don't see how the two are related, other than they are both something to do with the Internet.

Re: Twitter starts to require login to view tweets

#250

Post by Jnr »

miohtama wrote: post #72
wildpeaks wrote: post #64

On top of it, it's not just a matter of creating an account because they get blocked within two minutes until you also give them your phone number, despite the registration pretends it's not required (because once you signed up, it's easier to trick people into giving up yet more information than asking for it upfront).

Here is a research how much phone number verification decreases account fraud a.k.a. spam bots http://static.googleusercontent.com/media/research.google.co...

~10 years ago I made about 10k Twitter accounts just for fun. I never used them. They still exist, no one deleted them. A while ago I lost the script and password for them.

Back then you could bypass captchas and other checks by changing Tor endpoint (some endpoints required captchas, some didn’t). Made a script that did just that.

It also worked for Facebook and I still receive facebook spam for those accounts daily.

I have no problem with asking for a phone number during registration, it complicates automated account registration and makes it quite expensive. But I dislike the idea of hiding content behind login page, internet should not be a walled garden.

Post reply on HN