←back to thread

101 points eleye | 2 comments | | HN request time: 0.401s | source
Show context
JimDabell ◴[] No.45790549[source]
This is something I’ve been saying for a while[0,1]:

Services need the ability to obtain an identifier that:

- Belongs to exactly one real person.

- That a person cannot own more than one of.

- That is unique per-service.

- That cannot be tied to a real-world identity.

- That can be used by the person to optionally disclose attributes like whether they are an adult or not.

Services generally don’t care about knowing your exact identity but being able to ban a person and not have them simply register a new account, and being able to stop people from registering thousands of accounts would go a long way towards wiping out inauthentic and abusive behaviour.

[0] https://news.ycombinator.com/item?id=41709792

[1] https://news.ycombinator.com/item?id=44378709

The ability to “reset” your identity is the underlying hole that enables a vast amount of abuse. It’s possible to have persistent, pseudonymous access to the Internet without disclosing real-world identity. Being able to permanently ban abusers from a service would have a hugely positive effect on the Internet.

replies(6): >>45790613 #>>45790646 #>>45790899 #>>45791291 #>>45791379 #>>45791692 #
1. eqvinox ◴[] No.45790899[source]
https://en.wikipedia.org/wiki/Sybil_attack

This is generally considered an unsolvable problem when trying to fulfill all of these requirements (cf. sibling post). Most subsets are easy, but not the full list.

replies(1): >>45797642 #
2. JimDabell ◴[] No.45797642[source]
Sybil attacks are when you attack something with a vast number of identities. The whole point of what I am suggesting is that you limit the number of identities to one.