▲ 637 ▼ Signal introduces usernames and phone number privacy. (signal.org) submitted 2 years ago by 7eter@feddit.de to c/privacy@lemmy.ml 93 comments fedilink hide all child comments
[–] shortwavesurfer@monero.town 19 points 2 years ago* (1 child) Proof of work. Example, bitcoin permalink fedilink source parent hideshow 2 child comments replies: [–] just_another_person@lemmy.world 31 points 2 years ago* (2 children) How does this prove anything if using an emulator to bulk register bot accounts? Also, Signal Desktop is a thing. permalink fedilink source parent hideshow 4 child comments replies: [–] RobotToaster@mander.xyz 27 points 2 years ago* (4 children) It was the original purpose of the bitcoin algorithm to limit spam. If you have to do a lot of maths that takes your computer (for example) 30 seconds, that means it costs 30 seconds of compute to create an account. Nothing to an average user, for a spammer that wants thousands of accounts it gets expensive. Several captcha[0] libraries already use this and it's great for accessibility (normal captchas are terrible for it) [0] I know, it's not technically a captcha. permalink fedilink source parent hideshow 8 child comments replies: [–] shortwavesurfer@monero.town 14 points 2 years ago (1 child) Accessibility is very important to me as a blind user, and this helps tremendously. permalink fedilink source parent hideshow 2 child comments replies: [–] brbposting@sh.itjust.works 1 point 2 years ago (1 child) Anything you use to autotranscribe images or are image uploads without alt text a nightmare? permalink fedilink source parent hideshow 2 child comments replies: [–] shortwavesurfer@monero.town 3 points 2 years ago (1 child) Images w/o alt text suck permalink fedilink source parent hideshow 2 child comments replies: [–] brbposting@sh.itjust.works 3 points 2 years ago Ah bummer… I’ll do better! permalink fedilink source parent [–] BearOfaTime@lemm.ee 10 points 2 years ago Oh, neat. I was unfamiliar with PoW. Thanks! permalink fedilink source parent [–] pedroapero@lemmy.ml 5 points 2 years ago Pow does not limit spam in bitcoin. Fees do. Pow is used as a decentralized election mecanism to distribute the block production. permalink fedilink source parent [+] just_another_person@lemmy.world -6 points 2 years ago (1 child) I know what it is. It is not a barrier to entry though. permalink fedilink source parent hideshow 2 child comments replies: [–] null@slrpnk.net 6 points 2 years ago (1 child) He explained why it is, so can you elaborate on why it's not? permalink fedilink source parent hideshow 2 child comments replies: [–] just_another_person@lemmy.world 1 point 2 years ago* (4 children) Because it's not. I can spin any number of emulators or VMs that do any amount of work with a simple script, but that's all it does. How does it prove I'm anything but a scripted, virtual instance of a person with a device? There's a reason why Telegram is flooded with bots, Signal as of now has not been. permalink fedilink source parent hideshow 8 child comments replies: [–] null@slrpnk.net 8 points 2 years ago* (1 child) It's a time and resource gate, not a way to prove that you're a human. Also doesn't Telegram require a phone number too? permalink fedilink source parent hideshow 2 child comments replies: [+] just_another_person@lemmy.world -7 points 2 years ago (1 child) You're in the wrong thread. permalink fedilink source parent hideshow 2 child comments replies: [–] null@slrpnk.net 6 points 2 years ago* (1 child) I'm really not. Did you want to try making a coherent point again? Or are you all tapped out? permalink fedilink source parent hideshow 2 child comments replies: [–] just_another_person@lemmy.world -3 points 2 years ago (1 child) Yes. Please explain again how compute == human permalink fedilink source parent hideshow 2 child comments replies: [–] null@slrpnk.net 7 points 2 years ago It doesn't... No one was claiming that... Are you lost? permalink fedilink source parent [–] GustavoFring@lemmy.world 8 points 2 years ago (1 child) Sure, if you had unlimited gpus with unlimited electricity then it wouldn't keep you from spinning up unlimited bots permalink fedilink source parent hideshow 2 child comments replies: [+] just_another_person@lemmy.world -7 points 2 years ago (1 child) Bruh. No GPU needed. I build multiplatform apps daily on GitHub Actions. Dafuq you talking about? permalink fedilink source parent hideshow 2 child comments replies: [–] hoosierHillPowderedCheese@midwest.social 1 point 2 years ago how do you produce unique hashes with the correctly sized nonce? permalink fedilink source parent [–] THE_MASTERMIND@feddit.ch 4 points 2 years ago (1 child) Dafuq are you talking about ? Telegram does need phone numbers for sign up permalink fedilink source parent hideshow 2 child comments replies: [–] just_another_person@lemmy.world 0 points 2 years ago (1 child) Check that permalink fedilink source parent hideshow 2 child comments replies: [–] null@slrpnk.net 1 point 2 years ago Of course it does. permalink fedilink source parent [–] RobotToaster@mander.xyz 3 points 2 years ago Bots can buy phone numbers, hell, they can solve most captchas better than humans. There’s a reason why Telegram is flooded with bots, Signal as of now has not been. Telegram requires a phone number, so it clearly isn't working. permalink fedilink source parent [–] shortwavesurfer@monero.town 13 points 2 years ago (2 children) For each account you register, you have to do 30 seconds worth of work. So to register one account, you do 30 seconds worth of work. To register 100 accounts, you do 100*30 or 3000 seconds (50 minutes) worth of work. Registering tens of thousands of accounts then becomes unfeasible. permalink fedilink source parent hideshow 4 child comments replies: [+] madis@lemm.ee 2 points 2 years ago [deleted] permalink fedilink source parent [+] just_another_person@lemmy.world -13 points 2 years ago (1 child) And how can a VM or emulator NOT do this? permalink fedilink source parent hideshow 2 child comments replies: [–] amju_wolf@pawb.social 15 points 2 years ago (1 child) Anything that can compute can do it. The important part is that it has an associated non-insignificant cost. permalink fedilink source parent hideshow 2 child comments replies: [+] just_another_person@lemmy.world -14 points 2 years ago (4 children) Exactly! ANYTHING THAT CAN COMPUTE CAN DO IT. Few things have a uniquely identifying piece of information with other levels that are barriers to entry...like a phone number. The idea is to STOP bots from signing up to Signal. Are you missing the point maybe? permalink fedilink source parent hideshow 8 child comments replies: [–] pixelscript@lemmy.ml 11 points 2 years ago It stops bot FARMS from being feasible. If preventing Jimmy Bumfuck from spinning up a couple sock puppets is your fear, yeah, PoW systems don't help. But those are rarely the problem. For a phishing scam or astroturf operation to be worth it, you need tens of thousands of accounts all running the same script. Those get filtered hard by PoW systems. Phone validation works just as well, and stops Jimmy Bumfuck from making sock accounts. But now every user must be stapled to a phone number. Maybe that's a worthwhile trade to you, but it sure doesn't seem to be to everyone replying to you. permalink fedilink source parent [–] DarkDarkHouse@lemmy.sdf.org 9 points 2 years ago (1 child) It makes bots more expensive to create, therefore fewer will be created. permalink fedilink source parent hideshow 2 child comments replies: [–] just_another_person@lemmy.world -5 points 2 years ago It doesn't stop anyone though. Expensive is relative when you convince a Grandma to give you her $1000 check for a $5 phone number. permalink fedilink source parent [–] admiralteal@kbin.social 7 points 2 years ago* Nah bro, you are. It's ALSO possible to generate virtual phone numbers for a small cost. Using a cryptographic PoW is a different small cost. Either way, it only takes a small cost to prevent mass bot registration. You're treating processing power and time as if it is 100% free just because it can be done in a VM. But it doesn't matter if it is a VM. It is still going to require at least some certain threshold of processor time, and that processor time has a real cost. For the kind of place that can just spin up thousands of VMs and use it to do massive bot registration... they could just be mining bitcoins instead. It's not just whether you can do this. It's how much value it has vs what ELSE you could be doing with the time and energy. A Signal account is already worth vanishingly little as a spam tool, they just need to give it enough of a cost to make it not worthwhile. permalink fedilink source parent [–] PlzGivHugs@sh.itjust.works 5 points 2 years ago (1 child) By that standard, whats to stop people from just getting more phone numbers? Its just an additional cost. permalink fedilink source parent hideshow 2 child comments replies: [+] just_another_person@lemmy.world -7 points 2 years ago Are you unfamiliar with the market? I can buy 100 numbers right now, but they will be hit or miss from landline known numbers. permalink fedilink source parent
[–] just_another_person@lemmy.world 31 points 2 years ago* (2 children) How does this prove anything if using an emulator to bulk register bot accounts? Also, Signal Desktop is a thing. permalink fedilink source parent hideshow 4 child comments replies: [–] RobotToaster@mander.xyz 27 points 2 years ago* (4 children) It was the original purpose of the bitcoin algorithm to limit spam. If you have to do a lot of maths that takes your computer (for example) 30 seconds, that means it costs 30 seconds of compute to create an account. Nothing to an average user, for a spammer that wants thousands of accounts it gets expensive. Several captcha[0] libraries already use this and it's great for accessibility (normal captchas are terrible for it) [0] I know, it's not technically a captcha. permalink fedilink source parent hideshow 8 child comments replies: [–] shortwavesurfer@monero.town 14 points 2 years ago (1 child) Accessibility is very important to me as a blind user, and this helps tremendously. permalink fedilink source parent hideshow 2 child comments replies: [–] brbposting@sh.itjust.works 1 point 2 years ago (1 child) Anything you use to autotranscribe images or are image uploads without alt text a nightmare? permalink fedilink source parent hideshow 2 child comments replies: [–] shortwavesurfer@monero.town 3 points 2 years ago (1 child) Images w/o alt text suck permalink fedilink source parent hideshow 2 child comments replies: [–] brbposting@sh.itjust.works 3 points 2 years ago Ah bummer… I’ll do better! permalink fedilink source parent [–] BearOfaTime@lemm.ee 10 points 2 years ago Oh, neat. I was unfamiliar with PoW. Thanks! permalink fedilink source parent [–] pedroapero@lemmy.ml 5 points 2 years ago Pow does not limit spam in bitcoin. Fees do. Pow is used as a decentralized election mecanism to distribute the block production. permalink fedilink source parent [+] just_another_person@lemmy.world -6 points 2 years ago (1 child) I know what it is. It is not a barrier to entry though. permalink fedilink source parent hideshow 2 child comments replies: [–] null@slrpnk.net 6 points 2 years ago (1 child) He explained why it is, so can you elaborate on why it's not? permalink fedilink source parent hideshow 2 child comments replies: [–] just_another_person@lemmy.world 1 point 2 years ago* (4 children) Because it's not. I can spin any number of emulators or VMs that do any amount of work with a simple script, but that's all it does. How does it prove I'm anything but a scripted, virtual instance of a person with a device? There's a reason why Telegram is flooded with bots, Signal as of now has not been. permalink fedilink source parent hideshow 8 child comments replies: [–] null@slrpnk.net 8 points 2 years ago* (1 child) It's a time and resource gate, not a way to prove that you're a human. Also doesn't Telegram require a phone number too? permalink fedilink source parent hideshow 2 child comments replies: [+] just_another_person@lemmy.world -7 points 2 years ago (1 child) You're in the wrong thread. permalink fedilink source parent hideshow 2 child comments replies: [–] null@slrpnk.net 6 points 2 years ago* (1 child) I'm really not. Did you want to try making a coherent point again? Or are you all tapped out? permalink fedilink source parent hideshow 2 child comments replies: [–] just_another_person@lemmy.world -3 points 2 years ago (1 child) Yes. Please explain again how compute == human permalink fedilink source parent hideshow 2 child comments replies: [–] null@slrpnk.net 7 points 2 years ago It doesn't... No one was claiming that... Are you lost? permalink fedilink source parent [–] GustavoFring@lemmy.world 8 points 2 years ago (1 child) Sure, if you had unlimited gpus with unlimited electricity then it wouldn't keep you from spinning up unlimited bots permalink fedilink source parent hideshow 2 child comments replies: [+] just_another_person@lemmy.world -7 points 2 years ago (1 child) Bruh. No GPU needed. I build multiplatform apps daily on GitHub Actions. Dafuq you talking about? permalink fedilink source parent hideshow 2 child comments replies: [–] hoosierHillPowderedCheese@midwest.social 1 point 2 years ago how do you produce unique hashes with the correctly sized nonce? permalink fedilink source parent [–] THE_MASTERMIND@feddit.ch 4 points 2 years ago (1 child) Dafuq are you talking about ? Telegram does need phone numbers for sign up permalink fedilink source parent hideshow 2 child comments replies: [–] just_another_person@lemmy.world 0 points 2 years ago (1 child) Check that permalink fedilink source parent hideshow 2 child comments replies: [–] null@slrpnk.net 1 point 2 years ago Of course it does. permalink fedilink source parent [–] RobotToaster@mander.xyz 3 points 2 years ago Bots can buy phone numbers, hell, they can solve most captchas better than humans. There’s a reason why Telegram is flooded with bots, Signal as of now has not been. Telegram requires a phone number, so it clearly isn't working. permalink fedilink source parent [–] shortwavesurfer@monero.town 13 points 2 years ago (2 children) For each account you register, you have to do 30 seconds worth of work. So to register one account, you do 30 seconds worth of work. To register 100 accounts, you do 100*30 or 3000 seconds (50 minutes) worth of work. Registering tens of thousands of accounts then becomes unfeasible. permalink fedilink source parent hideshow 4 child comments replies: [+] madis@lemm.ee 2 points 2 years ago [deleted] permalink fedilink source parent [+] just_another_person@lemmy.world -13 points 2 years ago (1 child) And how can a VM or emulator NOT do this? permalink fedilink source parent hideshow 2 child comments replies: [–] amju_wolf@pawb.social 15 points 2 years ago (1 child) Anything that can compute can do it. The important part is that it has an associated non-insignificant cost. permalink fedilink source parent hideshow 2 child comments replies: [+] just_another_person@lemmy.world -14 points 2 years ago (4 children) Exactly! ANYTHING THAT CAN COMPUTE CAN DO IT. Few things have a uniquely identifying piece of information with other levels that are barriers to entry...like a phone number. The idea is to STOP bots from signing up to Signal. Are you missing the point maybe? permalink fedilink source parent hideshow 8 child comments replies: [–] pixelscript@lemmy.ml 11 points 2 years ago It stops bot FARMS from being feasible. If preventing Jimmy Bumfuck from spinning up a couple sock puppets is your fear, yeah, PoW systems don't help. But those are rarely the problem. For a phishing scam or astroturf operation to be worth it, you need tens of thousands of accounts all running the same script. Those get filtered hard by PoW systems. Phone validation works just as well, and stops Jimmy Bumfuck from making sock accounts. But now every user must be stapled to a phone number. Maybe that's a worthwhile trade to you, but it sure doesn't seem to be to everyone replying to you. permalink fedilink source parent [–] DarkDarkHouse@lemmy.sdf.org 9 points 2 years ago (1 child) It makes bots more expensive to create, therefore fewer will be created. permalink fedilink source parent hideshow 2 child comments replies: [–] just_another_person@lemmy.world -5 points 2 years ago It doesn't stop anyone though. Expensive is relative when you convince a Grandma to give you her $1000 check for a $5 phone number. permalink fedilink source parent [–] admiralteal@kbin.social 7 points 2 years ago* Nah bro, you are. It's ALSO possible to generate virtual phone numbers for a small cost. Using a cryptographic PoW is a different small cost. Either way, it only takes a small cost to prevent mass bot registration. You're treating processing power and time as if it is 100% free just because it can be done in a VM. But it doesn't matter if it is a VM. It is still going to require at least some certain threshold of processor time, and that processor time has a real cost. For the kind of place that can just spin up thousands of VMs and use it to do massive bot registration... they could just be mining bitcoins instead. It's not just whether you can do this. It's how much value it has vs what ELSE you could be doing with the time and energy. A Signal account is already worth vanishingly little as a spam tool, they just need to give it enough of a cost to make it not worthwhile. permalink fedilink source parent [–] PlzGivHugs@sh.itjust.works 5 points 2 years ago (1 child) By that standard, whats to stop people from just getting more phone numbers? Its just an additional cost. permalink fedilink source parent hideshow 2 child comments replies: [+] just_another_person@lemmy.world -7 points 2 years ago Are you unfamiliar with the market? I can buy 100 numbers right now, but they will be hit or miss from landline known numbers. permalink fedilink source parent
[–] RobotToaster@mander.xyz 27 points 2 years ago* (4 children) It was the original purpose of the bitcoin algorithm to limit spam. If you have to do a lot of maths that takes your computer (for example) 30 seconds, that means it costs 30 seconds of compute to create an account. Nothing to an average user, for a spammer that wants thousands of accounts it gets expensive. Several captcha[0] libraries already use this and it's great for accessibility (normal captchas are terrible for it) [0] I know, it's not technically a captcha. permalink fedilink source parent hideshow 8 child comments replies: [–] shortwavesurfer@monero.town 14 points 2 years ago (1 child) Accessibility is very important to me as a blind user, and this helps tremendously. permalink fedilink source parent hideshow 2 child comments replies: [–] brbposting@sh.itjust.works 1 point 2 years ago (1 child) Anything you use to autotranscribe images or are image uploads without alt text a nightmare? permalink fedilink source parent hideshow 2 child comments replies: [–] shortwavesurfer@monero.town 3 points 2 years ago (1 child) Images w/o alt text suck permalink fedilink source parent hideshow 2 child comments replies: [–] brbposting@sh.itjust.works 3 points 2 years ago Ah bummer… I’ll do better! permalink fedilink source parent [–] BearOfaTime@lemm.ee 10 points 2 years ago Oh, neat. I was unfamiliar with PoW. Thanks! permalink fedilink source parent [–] pedroapero@lemmy.ml 5 points 2 years ago Pow does not limit spam in bitcoin. Fees do. Pow is used as a decentralized election mecanism to distribute the block production. permalink fedilink source parent [+] just_another_person@lemmy.world -6 points 2 years ago (1 child) I know what it is. It is not a barrier to entry though. permalink fedilink source parent hideshow 2 child comments replies: [–] null@slrpnk.net 6 points 2 years ago (1 child) He explained why it is, so can you elaborate on why it's not? permalink fedilink source parent hideshow 2 child comments replies: [–] just_another_person@lemmy.world 1 point 2 years ago* (4 children) Because it's not. I can spin any number of emulators or VMs that do any amount of work with a simple script, but that's all it does. How does it prove I'm anything but a scripted, virtual instance of a person with a device? There's a reason why Telegram is flooded with bots, Signal as of now has not been. permalink fedilink source parent hideshow 8 child comments replies: [–] null@slrpnk.net 8 points 2 years ago* (1 child) It's a time and resource gate, not a way to prove that you're a human. Also doesn't Telegram require a phone number too? permalink fedilink source parent hideshow 2 child comments replies: [+] just_another_person@lemmy.world -7 points 2 years ago (1 child) You're in the wrong thread. permalink fedilink source parent hideshow 2 child comments replies: [–] null@slrpnk.net 6 points 2 years ago* (1 child) I'm really not. Did you want to try making a coherent point again? Or are you all tapped out? permalink fedilink source parent hideshow 2 child comments replies: [–] just_another_person@lemmy.world -3 points 2 years ago (1 child) Yes. Please explain again how compute == human permalink fedilink source parent hideshow 2 child comments replies: [–] null@slrpnk.net 7 points 2 years ago It doesn't... No one was claiming that... Are you lost? permalink fedilink source parent [–] GustavoFring@lemmy.world 8 points 2 years ago (1 child) Sure, if you had unlimited gpus with unlimited electricity then it wouldn't keep you from spinning up unlimited bots permalink fedilink source parent hideshow 2 child comments replies: [+] just_another_person@lemmy.world -7 points 2 years ago (1 child) Bruh. No GPU needed. I build multiplatform apps daily on GitHub Actions. Dafuq you talking about? permalink fedilink source parent hideshow 2 child comments replies: [–] hoosierHillPowderedCheese@midwest.social 1 point 2 years ago how do you produce unique hashes with the correctly sized nonce? permalink fedilink source parent [–] THE_MASTERMIND@feddit.ch 4 points 2 years ago (1 child) Dafuq are you talking about ? Telegram does need phone numbers for sign up permalink fedilink source parent hideshow 2 child comments replies: [–] just_another_person@lemmy.world 0 points 2 years ago (1 child) Check that permalink fedilink source parent hideshow 2 child comments replies: [–] null@slrpnk.net 1 point 2 years ago Of course it does. permalink fedilink source parent [–] RobotToaster@mander.xyz 3 points 2 years ago Bots can buy phone numbers, hell, they can solve most captchas better than humans. There’s a reason why Telegram is flooded with bots, Signal as of now has not been. Telegram requires a phone number, so it clearly isn't working. permalink fedilink source parent
[–] shortwavesurfer@monero.town 14 points 2 years ago (1 child) Accessibility is very important to me as a blind user, and this helps tremendously. permalink fedilink source parent hideshow 2 child comments replies: [–] brbposting@sh.itjust.works 1 point 2 years ago (1 child) Anything you use to autotranscribe images or are image uploads without alt text a nightmare? permalink fedilink source parent hideshow 2 child comments replies: [–] shortwavesurfer@monero.town 3 points 2 years ago (1 child) Images w/o alt text suck permalink fedilink source parent hideshow 2 child comments replies: [–] brbposting@sh.itjust.works 3 points 2 years ago Ah bummer… I’ll do better! permalink fedilink source parent
[–] brbposting@sh.itjust.works 1 point 2 years ago (1 child) Anything you use to autotranscribe images or are image uploads without alt text a nightmare? permalink fedilink source parent hideshow 2 child comments replies: [–] shortwavesurfer@monero.town 3 points 2 years ago (1 child) Images w/o alt text suck permalink fedilink source parent hideshow 2 child comments replies: [–] brbposting@sh.itjust.works 3 points 2 years ago Ah bummer… I’ll do better! permalink fedilink source parent
[–] shortwavesurfer@monero.town 3 points 2 years ago (1 child) Images w/o alt text suck permalink fedilink source parent hideshow 2 child comments replies: [–] brbposting@sh.itjust.works 3 points 2 years ago Ah bummer… I’ll do better! permalink fedilink source parent
[–] brbposting@sh.itjust.works 3 points 2 years ago Ah bummer… I’ll do better! permalink fedilink source parent
[–] BearOfaTime@lemm.ee 10 points 2 years ago Oh, neat. I was unfamiliar with PoW. Thanks! permalink fedilink source parent
[–] pedroapero@lemmy.ml 5 points 2 years ago Pow does not limit spam in bitcoin. Fees do. Pow is used as a decentralized election mecanism to distribute the block production. permalink fedilink source parent
[+] just_another_person@lemmy.world -6 points 2 years ago (1 child) I know what it is. It is not a barrier to entry though. permalink fedilink source parent hideshow 2 child comments replies: [–] null@slrpnk.net 6 points 2 years ago (1 child) He explained why it is, so can you elaborate on why it's not? permalink fedilink source parent hideshow 2 child comments replies: [–] just_another_person@lemmy.world 1 point 2 years ago* (4 children) Because it's not. I can spin any number of emulators or VMs that do any amount of work with a simple script, but that's all it does. How does it prove I'm anything but a scripted, virtual instance of a person with a device? There's a reason why Telegram is flooded with bots, Signal as of now has not been. permalink fedilink source parent hideshow 8 child comments replies: [–] null@slrpnk.net 8 points 2 years ago* (1 child) It's a time and resource gate, not a way to prove that you're a human. Also doesn't Telegram require a phone number too? permalink fedilink source parent hideshow 2 child comments replies: [+] just_another_person@lemmy.world -7 points 2 years ago (1 child) You're in the wrong thread. permalink fedilink source parent hideshow 2 child comments replies: [–] null@slrpnk.net 6 points 2 years ago* (1 child) I'm really not. Did you want to try making a coherent point again? Or are you all tapped out? permalink fedilink source parent hideshow 2 child comments replies: [–] just_another_person@lemmy.world -3 points 2 years ago (1 child) Yes. Please explain again how compute == human permalink fedilink source parent hideshow 2 child comments replies: [–] null@slrpnk.net 7 points 2 years ago It doesn't... No one was claiming that... Are you lost? permalink fedilink source parent [–] GustavoFring@lemmy.world 8 points 2 years ago (1 child) Sure, if you had unlimited gpus with unlimited electricity then it wouldn't keep you from spinning up unlimited bots permalink fedilink source parent hideshow 2 child comments replies: [+] just_another_person@lemmy.world -7 points 2 years ago (1 child) Bruh. No GPU needed. I build multiplatform apps daily on GitHub Actions. Dafuq you talking about? permalink fedilink source parent hideshow 2 child comments replies: [–] hoosierHillPowderedCheese@midwest.social 1 point 2 years ago how do you produce unique hashes with the correctly sized nonce? permalink fedilink source parent [–] THE_MASTERMIND@feddit.ch 4 points 2 years ago (1 child) Dafuq are you talking about ? Telegram does need phone numbers for sign up permalink fedilink source parent hideshow 2 child comments replies: [–] just_another_person@lemmy.world 0 points 2 years ago (1 child) Check that permalink fedilink source parent hideshow 2 child comments replies: [–] null@slrpnk.net 1 point 2 years ago Of course it does. permalink fedilink source parent [–] RobotToaster@mander.xyz 3 points 2 years ago Bots can buy phone numbers, hell, they can solve most captchas better than humans. There’s a reason why Telegram is flooded with bots, Signal as of now has not been. Telegram requires a phone number, so it clearly isn't working. permalink fedilink source parent
[–] null@slrpnk.net 6 points 2 years ago (1 child) He explained why it is, so can you elaborate on why it's not? permalink fedilink source parent hideshow 2 child comments replies: [–] just_another_person@lemmy.world 1 point 2 years ago* (4 children) Because it's not. I can spin any number of emulators or VMs that do any amount of work with a simple script, but that's all it does. How does it prove I'm anything but a scripted, virtual instance of a person with a device? There's a reason why Telegram is flooded with bots, Signal as of now has not been. permalink fedilink source parent hideshow 8 child comments replies: [–] null@slrpnk.net 8 points 2 years ago* (1 child) It's a time and resource gate, not a way to prove that you're a human. Also doesn't Telegram require a phone number too? permalink fedilink source parent hideshow 2 child comments replies: [+] just_another_person@lemmy.world -7 points 2 years ago (1 child) You're in the wrong thread. permalink fedilink source parent hideshow 2 child comments replies: [–] null@slrpnk.net 6 points 2 years ago* (1 child) I'm really not. Did you want to try making a coherent point again? Or are you all tapped out? permalink fedilink source parent hideshow 2 child comments replies: [–] just_another_person@lemmy.world -3 points 2 years ago (1 child) Yes. Please explain again how compute == human permalink fedilink source parent hideshow 2 child comments replies: [–] null@slrpnk.net 7 points 2 years ago It doesn't... No one was claiming that... Are you lost? permalink fedilink source parent [–] GustavoFring@lemmy.world 8 points 2 years ago (1 child) Sure, if you had unlimited gpus with unlimited electricity then it wouldn't keep you from spinning up unlimited bots permalink fedilink source parent hideshow 2 child comments replies: [+] just_another_person@lemmy.world -7 points 2 years ago (1 child) Bruh. No GPU needed. I build multiplatform apps daily on GitHub Actions. Dafuq you talking about? permalink fedilink source parent hideshow 2 child comments replies: [–] hoosierHillPowderedCheese@midwest.social 1 point 2 years ago how do you produce unique hashes with the correctly sized nonce? permalink fedilink source parent [–] THE_MASTERMIND@feddit.ch 4 points 2 years ago (1 child) Dafuq are you talking about ? Telegram does need phone numbers for sign up permalink fedilink source parent hideshow 2 child comments replies: [–] just_another_person@lemmy.world 0 points 2 years ago (1 child) Check that permalink fedilink source parent hideshow 2 child comments replies: [–] null@slrpnk.net 1 point 2 years ago Of course it does. permalink fedilink source parent [–] RobotToaster@mander.xyz 3 points 2 years ago Bots can buy phone numbers, hell, they can solve most captchas better than humans. There’s a reason why Telegram is flooded with bots, Signal as of now has not been. Telegram requires a phone number, so it clearly isn't working. permalink fedilink source parent
[–] just_another_person@lemmy.world 1 point 2 years ago* (4 children) Because it's not. I can spin any number of emulators or VMs that do any amount of work with a simple script, but that's all it does. How does it prove I'm anything but a scripted, virtual instance of a person with a device? There's a reason why Telegram is flooded with bots, Signal as of now has not been. permalink fedilink source parent hideshow 8 child comments replies: [–] null@slrpnk.net 8 points 2 years ago* (1 child) It's a time and resource gate, not a way to prove that you're a human. Also doesn't Telegram require a phone number too? permalink fedilink source parent hideshow 2 child comments replies: [+] just_another_person@lemmy.world -7 points 2 years ago (1 child) You're in the wrong thread. permalink fedilink source parent hideshow 2 child comments replies: [–] null@slrpnk.net 6 points 2 years ago* (1 child) I'm really not. Did you want to try making a coherent point again? Or are you all tapped out? permalink fedilink source parent hideshow 2 child comments replies: [–] just_another_person@lemmy.world -3 points 2 years ago (1 child) Yes. Please explain again how compute == human permalink fedilink source parent hideshow 2 child comments replies: [–] null@slrpnk.net 7 points 2 years ago It doesn't... No one was claiming that... Are you lost? permalink fedilink source parent [–] GustavoFring@lemmy.world 8 points 2 years ago (1 child) Sure, if you had unlimited gpus with unlimited electricity then it wouldn't keep you from spinning up unlimited bots permalink fedilink source parent hideshow 2 child comments replies: [+] just_another_person@lemmy.world -7 points 2 years ago (1 child) Bruh. No GPU needed. I build multiplatform apps daily on GitHub Actions. Dafuq you talking about? permalink fedilink source parent hideshow 2 child comments replies: [–] hoosierHillPowderedCheese@midwest.social 1 point 2 years ago how do you produce unique hashes with the correctly sized nonce? permalink fedilink source parent [–] THE_MASTERMIND@feddit.ch 4 points 2 years ago (1 child) Dafuq are you talking about ? Telegram does need phone numbers for sign up permalink fedilink source parent hideshow 2 child comments replies: [–] just_another_person@lemmy.world 0 points 2 years ago (1 child) Check that permalink fedilink source parent hideshow 2 child comments replies: [–] null@slrpnk.net 1 point 2 years ago Of course it does. permalink fedilink source parent [–] RobotToaster@mander.xyz 3 points 2 years ago Bots can buy phone numbers, hell, they can solve most captchas better than humans. There’s a reason why Telegram is flooded with bots, Signal as of now has not been. Telegram requires a phone number, so it clearly isn't working. permalink fedilink source parent
[–] null@slrpnk.net 8 points 2 years ago* (1 child) It's a time and resource gate, not a way to prove that you're a human. Also doesn't Telegram require a phone number too? permalink fedilink source parent hideshow 2 child comments replies: [+] just_another_person@lemmy.world -7 points 2 years ago (1 child) You're in the wrong thread. permalink fedilink source parent hideshow 2 child comments replies: [–] null@slrpnk.net 6 points 2 years ago* (1 child) I'm really not. Did you want to try making a coherent point again? Or are you all tapped out? permalink fedilink source parent hideshow 2 child comments replies: [–] just_another_person@lemmy.world -3 points 2 years ago (1 child) Yes. Please explain again how compute == human permalink fedilink source parent hideshow 2 child comments replies: [–] null@slrpnk.net 7 points 2 years ago It doesn't... No one was claiming that... Are you lost? permalink fedilink source parent
[+] just_another_person@lemmy.world -7 points 2 years ago (1 child) You're in the wrong thread. permalink fedilink source parent hideshow 2 child comments replies: [–] null@slrpnk.net 6 points 2 years ago* (1 child) I'm really not. Did you want to try making a coherent point again? Or are you all tapped out? permalink fedilink source parent hideshow 2 child comments replies: [–] just_another_person@lemmy.world -3 points 2 years ago (1 child) Yes. Please explain again how compute == human permalink fedilink source parent hideshow 2 child comments replies: [–] null@slrpnk.net 7 points 2 years ago It doesn't... No one was claiming that... Are you lost? permalink fedilink source parent
[–] null@slrpnk.net 6 points 2 years ago* (1 child) I'm really not. Did you want to try making a coherent point again? Or are you all tapped out? permalink fedilink source parent hideshow 2 child comments replies: [–] just_another_person@lemmy.world -3 points 2 years ago (1 child) Yes. Please explain again how compute == human permalink fedilink source parent hideshow 2 child comments replies: [–] null@slrpnk.net 7 points 2 years ago It doesn't... No one was claiming that... Are you lost? permalink fedilink source parent
[–] just_another_person@lemmy.world -3 points 2 years ago (1 child) Yes. Please explain again how compute == human permalink fedilink source parent hideshow 2 child comments replies: [–] null@slrpnk.net 7 points 2 years ago It doesn't... No one was claiming that... Are you lost? permalink fedilink source parent
[–] null@slrpnk.net 7 points 2 years ago It doesn't... No one was claiming that... Are you lost? permalink fedilink source parent
[–] GustavoFring@lemmy.world 8 points 2 years ago (1 child) Sure, if you had unlimited gpus with unlimited electricity then it wouldn't keep you from spinning up unlimited bots permalink fedilink source parent hideshow 2 child comments replies: [+] just_another_person@lemmy.world -7 points 2 years ago (1 child) Bruh. No GPU needed. I build multiplatform apps daily on GitHub Actions. Dafuq you talking about? permalink fedilink source parent hideshow 2 child comments replies: [–] hoosierHillPowderedCheese@midwest.social 1 point 2 years ago how do you produce unique hashes with the correctly sized nonce? permalink fedilink source parent
[+] just_another_person@lemmy.world -7 points 2 years ago (1 child) Bruh. No GPU needed. I build multiplatform apps daily on GitHub Actions. Dafuq you talking about? permalink fedilink source parent hideshow 2 child comments replies: [–] hoosierHillPowderedCheese@midwest.social 1 point 2 years ago how do you produce unique hashes with the correctly sized nonce? permalink fedilink source parent
[–] hoosierHillPowderedCheese@midwest.social 1 point 2 years ago how do you produce unique hashes with the correctly sized nonce? permalink fedilink source parent
[–] THE_MASTERMIND@feddit.ch 4 points 2 years ago (1 child) Dafuq are you talking about ? Telegram does need phone numbers for sign up permalink fedilink source parent hideshow 2 child comments replies: [–] just_another_person@lemmy.world 0 points 2 years ago (1 child) Check that permalink fedilink source parent hideshow 2 child comments replies: [–] null@slrpnk.net 1 point 2 years ago Of course it does. permalink fedilink source parent
[–] just_another_person@lemmy.world 0 points 2 years ago (1 child) Check that permalink fedilink source parent hideshow 2 child comments replies: [–] null@slrpnk.net 1 point 2 years ago Of course it does. permalink fedilink source parent
[–] RobotToaster@mander.xyz 3 points 2 years ago Bots can buy phone numbers, hell, they can solve most captchas better than humans. There’s a reason why Telegram is flooded with bots, Signal as of now has not been. Telegram requires a phone number, so it clearly isn't working. permalink fedilink source parent
[–] shortwavesurfer@monero.town 13 points 2 years ago (2 children) For each account you register, you have to do 30 seconds worth of work. So to register one account, you do 30 seconds worth of work. To register 100 accounts, you do 100*30 or 3000 seconds (50 minutes) worth of work. Registering tens of thousands of accounts then becomes unfeasible. permalink fedilink source parent hideshow 4 child comments replies: [+] madis@lemm.ee 2 points 2 years ago [deleted] permalink fedilink source parent [+] just_another_person@lemmy.world -13 points 2 years ago (1 child) And how can a VM or emulator NOT do this? permalink fedilink source parent hideshow 2 child comments replies: [–] amju_wolf@pawb.social 15 points 2 years ago (1 child) Anything that can compute can do it. The important part is that it has an associated non-insignificant cost. permalink fedilink source parent hideshow 2 child comments replies: [+] just_another_person@lemmy.world -14 points 2 years ago (4 children) Exactly! ANYTHING THAT CAN COMPUTE CAN DO IT. Few things have a uniquely identifying piece of information with other levels that are barriers to entry...like a phone number. The idea is to STOP bots from signing up to Signal. Are you missing the point maybe? permalink fedilink source parent hideshow 8 child comments replies: [–] pixelscript@lemmy.ml 11 points 2 years ago It stops bot FARMS from being feasible. If preventing Jimmy Bumfuck from spinning up a couple sock puppets is your fear, yeah, PoW systems don't help. But those are rarely the problem. For a phishing scam or astroturf operation to be worth it, you need tens of thousands of accounts all running the same script. Those get filtered hard by PoW systems. Phone validation works just as well, and stops Jimmy Bumfuck from making sock accounts. But now every user must be stapled to a phone number. Maybe that's a worthwhile trade to you, but it sure doesn't seem to be to everyone replying to you. permalink fedilink source parent [–] DarkDarkHouse@lemmy.sdf.org 9 points 2 years ago (1 child) It makes bots more expensive to create, therefore fewer will be created. permalink fedilink source parent hideshow 2 child comments replies: [–] just_another_person@lemmy.world -5 points 2 years ago It doesn't stop anyone though. Expensive is relative when you convince a Grandma to give you her $1000 check for a $5 phone number. permalink fedilink source parent [–] admiralteal@kbin.social 7 points 2 years ago* Nah bro, you are. It's ALSO possible to generate virtual phone numbers for a small cost. Using a cryptographic PoW is a different small cost. Either way, it only takes a small cost to prevent mass bot registration. You're treating processing power and time as if it is 100% free just because it can be done in a VM. But it doesn't matter if it is a VM. It is still going to require at least some certain threshold of processor time, and that processor time has a real cost. For the kind of place that can just spin up thousands of VMs and use it to do massive bot registration... they could just be mining bitcoins instead. It's not just whether you can do this. It's how much value it has vs what ELSE you could be doing with the time and energy. A Signal account is already worth vanishingly little as a spam tool, they just need to give it enough of a cost to make it not worthwhile. permalink fedilink source parent [–] PlzGivHugs@sh.itjust.works 5 points 2 years ago (1 child) By that standard, whats to stop people from just getting more phone numbers? Its just an additional cost. permalink fedilink source parent hideshow 2 child comments replies: [+] just_another_person@lemmy.world -7 points 2 years ago Are you unfamiliar with the market? I can buy 100 numbers right now, but they will be hit or miss from landline known numbers. permalink fedilink source parent
[+] just_another_person@lemmy.world -13 points 2 years ago (1 child) And how can a VM or emulator NOT do this? permalink fedilink source parent hideshow 2 child comments replies: [–] amju_wolf@pawb.social 15 points 2 years ago (1 child) Anything that can compute can do it. The important part is that it has an associated non-insignificant cost. permalink fedilink source parent hideshow 2 child comments replies: [+] just_another_person@lemmy.world -14 points 2 years ago (4 children) Exactly! ANYTHING THAT CAN COMPUTE CAN DO IT. Few things have a uniquely identifying piece of information with other levels that are barriers to entry...like a phone number. The idea is to STOP bots from signing up to Signal. Are you missing the point maybe? permalink fedilink source parent hideshow 8 child comments replies: [–] pixelscript@lemmy.ml 11 points 2 years ago It stops bot FARMS from being feasible. If preventing Jimmy Bumfuck from spinning up a couple sock puppets is your fear, yeah, PoW systems don't help. But those are rarely the problem. For a phishing scam or astroturf operation to be worth it, you need tens of thousands of accounts all running the same script. Those get filtered hard by PoW systems. Phone validation works just as well, and stops Jimmy Bumfuck from making sock accounts. But now every user must be stapled to a phone number. Maybe that's a worthwhile trade to you, but it sure doesn't seem to be to everyone replying to you. permalink fedilink source parent [–] DarkDarkHouse@lemmy.sdf.org 9 points 2 years ago (1 child) It makes bots more expensive to create, therefore fewer will be created. permalink fedilink source parent hideshow 2 child comments replies: [–] just_another_person@lemmy.world -5 points 2 years ago It doesn't stop anyone though. Expensive is relative when you convince a Grandma to give you her $1000 check for a $5 phone number. permalink fedilink source parent [–] admiralteal@kbin.social 7 points 2 years ago* Nah bro, you are. It's ALSO possible to generate virtual phone numbers for a small cost. Using a cryptographic PoW is a different small cost. Either way, it only takes a small cost to prevent mass bot registration. You're treating processing power and time as if it is 100% free just because it can be done in a VM. But it doesn't matter if it is a VM. It is still going to require at least some certain threshold of processor time, and that processor time has a real cost. For the kind of place that can just spin up thousands of VMs and use it to do massive bot registration... they could just be mining bitcoins instead. It's not just whether you can do this. It's how much value it has vs what ELSE you could be doing with the time and energy. A Signal account is already worth vanishingly little as a spam tool, they just need to give it enough of a cost to make it not worthwhile. permalink fedilink source parent [–] PlzGivHugs@sh.itjust.works 5 points 2 years ago (1 child) By that standard, whats to stop people from just getting more phone numbers? Its just an additional cost. permalink fedilink source parent hideshow 2 child comments replies: [+] just_another_person@lemmy.world -7 points 2 years ago Are you unfamiliar with the market? I can buy 100 numbers right now, but they will be hit or miss from landline known numbers. permalink fedilink source parent
[–] amju_wolf@pawb.social 15 points 2 years ago (1 child) Anything that can compute can do it. The important part is that it has an associated non-insignificant cost. permalink fedilink source parent hideshow 2 child comments replies: [+] just_another_person@lemmy.world -14 points 2 years ago (4 children) Exactly! ANYTHING THAT CAN COMPUTE CAN DO IT. Few things have a uniquely identifying piece of information with other levels that are barriers to entry...like a phone number. The idea is to STOP bots from signing up to Signal. Are you missing the point maybe? permalink fedilink source parent hideshow 8 child comments replies: [–] pixelscript@lemmy.ml 11 points 2 years ago It stops bot FARMS from being feasible. If preventing Jimmy Bumfuck from spinning up a couple sock puppets is your fear, yeah, PoW systems don't help. But those are rarely the problem. For a phishing scam or astroturf operation to be worth it, you need tens of thousands of accounts all running the same script. Those get filtered hard by PoW systems. Phone validation works just as well, and stops Jimmy Bumfuck from making sock accounts. But now every user must be stapled to a phone number. Maybe that's a worthwhile trade to you, but it sure doesn't seem to be to everyone replying to you. permalink fedilink source parent [–] DarkDarkHouse@lemmy.sdf.org 9 points 2 years ago (1 child) It makes bots more expensive to create, therefore fewer will be created. permalink fedilink source parent hideshow 2 child comments replies: [–] just_another_person@lemmy.world -5 points 2 years ago It doesn't stop anyone though. Expensive is relative when you convince a Grandma to give you her $1000 check for a $5 phone number. permalink fedilink source parent [–] admiralteal@kbin.social 7 points 2 years ago* Nah bro, you are. It's ALSO possible to generate virtual phone numbers for a small cost. Using a cryptographic PoW is a different small cost. Either way, it only takes a small cost to prevent mass bot registration. You're treating processing power and time as if it is 100% free just because it can be done in a VM. But it doesn't matter if it is a VM. It is still going to require at least some certain threshold of processor time, and that processor time has a real cost. For the kind of place that can just spin up thousands of VMs and use it to do massive bot registration... they could just be mining bitcoins instead. It's not just whether you can do this. It's how much value it has vs what ELSE you could be doing with the time and energy. A Signal account is already worth vanishingly little as a spam tool, they just need to give it enough of a cost to make it not worthwhile. permalink fedilink source parent [–] PlzGivHugs@sh.itjust.works 5 points 2 years ago (1 child) By that standard, whats to stop people from just getting more phone numbers? Its just an additional cost. permalink fedilink source parent hideshow 2 child comments replies: [+] just_another_person@lemmy.world -7 points 2 years ago Are you unfamiliar with the market? I can buy 100 numbers right now, but they will be hit or miss from landline known numbers. permalink fedilink source parent
[+] just_another_person@lemmy.world -14 points 2 years ago (4 children) Exactly! ANYTHING THAT CAN COMPUTE CAN DO IT. Few things have a uniquely identifying piece of information with other levels that are barriers to entry...like a phone number. The idea is to STOP bots from signing up to Signal. Are you missing the point maybe? permalink fedilink source parent hideshow 8 child comments replies: [–] pixelscript@lemmy.ml 11 points 2 years ago It stops bot FARMS from being feasible. If preventing Jimmy Bumfuck from spinning up a couple sock puppets is your fear, yeah, PoW systems don't help. But those are rarely the problem. For a phishing scam or astroturf operation to be worth it, you need tens of thousands of accounts all running the same script. Those get filtered hard by PoW systems. Phone validation works just as well, and stops Jimmy Bumfuck from making sock accounts. But now every user must be stapled to a phone number. Maybe that's a worthwhile trade to you, but it sure doesn't seem to be to everyone replying to you. permalink fedilink source parent [–] DarkDarkHouse@lemmy.sdf.org 9 points 2 years ago (1 child) It makes bots more expensive to create, therefore fewer will be created. permalink fedilink source parent hideshow 2 child comments replies: [–] just_another_person@lemmy.world -5 points 2 years ago It doesn't stop anyone though. Expensive is relative when you convince a Grandma to give you her $1000 check for a $5 phone number. permalink fedilink source parent [–] admiralteal@kbin.social 7 points 2 years ago* Nah bro, you are. It's ALSO possible to generate virtual phone numbers for a small cost. Using a cryptographic PoW is a different small cost. Either way, it only takes a small cost to prevent mass bot registration. You're treating processing power and time as if it is 100% free just because it can be done in a VM. But it doesn't matter if it is a VM. It is still going to require at least some certain threshold of processor time, and that processor time has a real cost. For the kind of place that can just spin up thousands of VMs and use it to do massive bot registration... they could just be mining bitcoins instead. It's not just whether you can do this. It's how much value it has vs what ELSE you could be doing with the time and energy. A Signal account is already worth vanishingly little as a spam tool, they just need to give it enough of a cost to make it not worthwhile. permalink fedilink source parent [–] PlzGivHugs@sh.itjust.works 5 points 2 years ago (1 child) By that standard, whats to stop people from just getting more phone numbers? Its just an additional cost. permalink fedilink source parent hideshow 2 child comments replies: [+] just_another_person@lemmy.world -7 points 2 years ago Are you unfamiliar with the market? I can buy 100 numbers right now, but they will be hit or miss from landline known numbers. permalink fedilink source parent
[–] pixelscript@lemmy.ml 11 points 2 years ago It stops bot FARMS from being feasible. If preventing Jimmy Bumfuck from spinning up a couple sock puppets is your fear, yeah, PoW systems don't help. But those are rarely the problem. For a phishing scam or astroturf operation to be worth it, you need tens of thousands of accounts all running the same script. Those get filtered hard by PoW systems. Phone validation works just as well, and stops Jimmy Bumfuck from making sock accounts. But now every user must be stapled to a phone number. Maybe that's a worthwhile trade to you, but it sure doesn't seem to be to everyone replying to you. permalink fedilink source parent
[–] DarkDarkHouse@lemmy.sdf.org 9 points 2 years ago (1 child) It makes bots more expensive to create, therefore fewer will be created. permalink fedilink source parent hideshow 2 child comments replies: [–] just_another_person@lemmy.world -5 points 2 years ago It doesn't stop anyone though. Expensive is relative when you convince a Grandma to give you her $1000 check for a $5 phone number. permalink fedilink source parent
[–] just_another_person@lemmy.world -5 points 2 years ago It doesn't stop anyone though. Expensive is relative when you convince a Grandma to give you her $1000 check for a $5 phone number. permalink fedilink source parent
[–] admiralteal@kbin.social 7 points 2 years ago* Nah bro, you are. It's ALSO possible to generate virtual phone numbers for a small cost. Using a cryptographic PoW is a different small cost. Either way, it only takes a small cost to prevent mass bot registration. You're treating processing power and time as if it is 100% free just because it can be done in a VM. But it doesn't matter if it is a VM. It is still going to require at least some certain threshold of processor time, and that processor time has a real cost. For the kind of place that can just spin up thousands of VMs and use it to do massive bot registration... they could just be mining bitcoins instead. It's not just whether you can do this. It's how much value it has vs what ELSE you could be doing with the time and energy. A Signal account is already worth vanishingly little as a spam tool, they just need to give it enough of a cost to make it not worthwhile. permalink fedilink source parent
[–] PlzGivHugs@sh.itjust.works 5 points 2 years ago (1 child) By that standard, whats to stop people from just getting more phone numbers? Its just an additional cost. permalink fedilink source parent hideshow 2 child comments replies: [+] just_another_person@lemmy.world -7 points 2 years ago Are you unfamiliar with the market? I can buy 100 numbers right now, but they will be hit or miss from landline known numbers. permalink fedilink source parent
[+] just_another_person@lemmy.world -7 points 2 years ago Are you unfamiliar with the market? I can buy 100 numbers right now, but they will be hit or miss from landline known numbers. permalink fedilink source parent