Live data from Hacker News

Fury at Facebook as login requests “Government ID”

thedrum.com

71–80 of 233 posts

Re: Fury at Facebook as login requests “Government ID”

#71

I am going to get a lot of downvotes for this but I am still curious to hear what solutions the HN community could come up with for the problem Facebook is facing: Some of the accounts have been hacked. You locked the accounts as a security measure. Now you need to validate that some person is the actual owner of the account. How would you solve this problem? (Sending a code via text message to the owners mobile devi…

First, I don't believe these accounts have been hacked. The most common hack is the owner left a computer with his account logged in. Eithet that or the owner tried to log from a different location than those facebook associated with the account.

Have a look at how websites which don't require real name and identities do it and there you have your answer. (Or just look at how facebook does it other than requiring ID).

Re: Fury at Facebook as login requests “Government ID”

#72

Earlier quoted context omitted.

People think those who don't use Facebook are lunatics? Why?

For younger generations who grew up with this kind of tech, it's just not conceivable. For them, Facebook is a synonym for having contact with their friends. In a discussion we once had in class, I mentioned that an option that hadn't been listed besides Facebook, Google+, Diaspora, etc was "none of the above". I got bewildered stares of disbelief in return.

Actually Facebook is most likely going to erode from the younger generation/s upwards. They don't need Facebook at all, their social network is new and can be formed on other services.

Over the coming decade, Facebook will become an older person's social network (35+). They'll completely lose the youth demographic.

The least cool thing is to be where everybody else is, your parents and teachers included. This effect is already hitting Facebook.

Re: Fury at Facebook as login requests “Government ID”

#73
post #45
post #29

Earlier quoted context omitted.

Yes definitely. People who doesn't use facebook by choice are thought of being crazy. I use facebook, for me its a great to keep in touch with my friends and family members who are all over the world. I have a friend who doesn't want to jump in to the facebook bandwagon and our mutual friends thinks he is crazy for not using facebook. The side effect is he almost never gets invited if there is a get together and have…

Have a look at Diaspora

don't waste your time with this, it's an overhyped attempt at being facebook which is not what it should.

have a look at the freedom box instead: https://www.freedomboxfoundation.org/

Re: Fury at Facebook as login requests “Government ID”

#74
They should get you to pick 2-3 friends from the subset of your closest contacts that they trust[1] to receive a multi-part[2] password so that you can prove you're you by your contact with your friends.

[1] i.e. Facebook believe they are real people who could verify your identity.

[2] It could be a form of n of m authentication so you wouldn't need to get all of them.

Re: Fury at Facebook as login requests “Government ID”

#75
post #52
post #2

With each passing day, I look less and less like a lunatic for avoiding facebook (and its ilk) like the plague. You should try it.

Google will do the same thing soon. It wants one google account per person, and using real ID is the best way to do that.

Didn't they already ask for ID back during the whole "real name" debacle?

Re: Fury at Facebook as login requests “Government ID”

#76
post #45
post #29

Earlier quoted context omitted.

Yes definitely. People who doesn't use facebook by choice are thought of being crazy. I use facebook, for me its a great to keep in touch with my friends and family members who are all over the world. I have a friend who doesn't want to jump in to the facebook bandwagon and our mutual friends thinks he is crazy for not using facebook. The side effect is he almost never gets invited if there is a get together and have…

Have a look at Diaspora

trying to make your non tech friends and family use diaspora is quite problematic. Its a chicken egg problem: social networks need people. people wont join if peoole is not already there

Re: Fury at Facebook as login requests “Government ID”

#77
post #45
post #29

Earlier quoted context omitted.

Yes definitely. People who doesn't use facebook by choice are thought of being crazy. I use facebook, for me its a great to keep in touch with my friends and family members who are all over the world. I have a friend who doesn't want to jump in to the facebook bandwagon and our mutual friends thinks he is crazy for not using facebook. The side effect is he almost never gets invited if there is a get together and have…

Have a look at Diaspora

trying to make your non tech friends and family use diaspora is quite problematic. Its a chicken egg problem: social networks need people. people wont join if peoole is not already there

Re: Fury at Facebook as login requests “Government ID”

#78

I am going to get a lot of downvotes for this but I am still curious to hear what solutions the HN community could come up with for the problem Facebook is facing: Some of the accounts have been hacked. You locked the accounts as a security measure. Now you need to validate that some person is the actual owner of the account. How would you solve this problem? (Sending a code via text message to the owners mobile devi…

You cannot. You can only use the facts that the original account creator provided (mail address? postal address?) and nothing else. You never had a government id to begin with. Maybe my government id doesn't match my account name (I know.. I violated the rules in that case.. Oh I am sooo bad). Maybe there are people with similar/the same name. How would you make sure that 'government id' presenting person A is really…

I agree with you, in some cases the account would be absolutely unrecoverable and I am sure this happened to some users.

Still, in some cases it could be a quick solution to unlock an account. (account name matches id, no telephone number available, email validation unsafe for some reason)

Re: Fury at Facebook as login requests “Government ID”

#79
GOSPEL ARTIST POSES NUDE!

Evon Latrail is the author of a children's book "When Mommy Went to Heaven". She wrote/recorded a few songs; "Lord Bless My Enemies. And, even has a song entitled, "Can't You See (Abortion Is Murder). She went Pro-life after having a abortion! Really???? Now here is a photo of her posing in chocolate as a "Swamp Girl". The word Hypocrite is floating around somewhere. This story has made front page news in the local paper. Go to Google or YouTube and search, Evon Latrail.

Re: Fury at Facebook as login requests “Government ID”

#80
post #40

I am going to get a lot of downvotes for this but I am still curious to hear what solutions the HN community could come up with for the problem Facebook is facing: Some of the accounts have been hacked. You locked the accounts as a security measure. Now you need to validate that some person is the actual owner of the account. How would you solve this problem? (Sending a code via text message to the owners mobile devi…

I'll take a stab at this. Before I get in to it, we need to correct a misconception on your part: using a government ID doesn't work in every case. It turns out hackers know how to forge government ID images, and some of FB's users don't have government IDs (for instance, before I turned 16 all I had was a private school id). With that out of the way, I think they should do what you suggested: sms verification. Email…

I do not think that every mechanism you proposed is viable, but generally I think you nailed it with this:

> Facebook should look closely at whatever attacker they are trying to lock out, and make several methods of ownership verification available. Maybe require two?

We might already see that, at least I have been prompted to validate once via email and once via text message before.

And then there are those questions Facebook asked me about some of my friends (do you know this person, is he/she real) which are obviously related to account verification in some way.

I also agree that it isn't smart to ask for IDs after all those NSA revelations.

Post reply on HN