Reddit Is Weighing Identity Verification Methods To Combat Its Bot Problem (engadget.com) 116
An anonymous reader quotes a report from Engadget: There could be one more step required before creating an account and posting on Reddit in the future. According to Reddit's CEO, Steve Huffman, the social media platform is exploring different ways to verify a user is human and not a bot. When asked by the TBPN podcast how to confirm that it's a human using Reddit, Huffman responded with several verification methods with varying degrees of heavy-handedness.
"The most lightweight way is with something like Face ID or Touch ID," Huffman said during the interview. "They actually require a human presence, like a human has to touch, or do or look at something, so that actually just proves there's a person there or gets you pretty far." Besides these passkey methods that use biometrics data, Huffman said there are other options like relying on third-party services that are decentralized or don't require ID. On the other end of the spectrum, Huffman also mentioned more burdensome options, like ID-checking services.
[...] "Part of our promise for our users is we don't know your name but we do want to know you're a person," Huffman said. "It'll be an evolution for us for a while, and probably every platform to find the right middle ground here." Reddit co-founder and former executive chair, Alexis Ohanian, said on X that Reddit requiring Face ID wasn't something he expected but agreed that something had to be done about the fake content from bots, adding that, "I just don't know how to sell face-scanning to Redditors or even lurkers." We reached out to Reddit's communications team and will update the story when we hear back. The Digg beta shut down earlier this month after failing to fight the overwhelming influx of AI-driven bots and spam. "The internet is now populated, in meaningful part, by sophisticated AI agents and automated accounts," said CEO Justin Mezzell. "We knew bots were part of the landscape, but we didn't appreciate the scale, sophistication, or speed at which they'd find us."
"We banned tens of thousands of accounts. We deployed internal tooling and industry-standard external vendors. None of it was enough. When you can't trust that the votes, the comments, and the engagement you're seeing are real, you've lost the foundation a community platform is built on."
"The most lightweight way is with something like Face ID or Touch ID," Huffman said during the interview. "They actually require a human presence, like a human has to touch, or do or look at something, so that actually just proves there's a person there or gets you pretty far." Besides these passkey methods that use biometrics data, Huffman said there are other options like relying on third-party services that are decentralized or don't require ID. On the other end of the spectrum, Huffman also mentioned more burdensome options, like ID-checking services.
[...] "Part of our promise for our users is we don't know your name but we do want to know you're a person," Huffman said. "It'll be an evolution for us for a while, and probably every platform to find the right middle ground here." Reddit co-founder and former executive chair, Alexis Ohanian, said on X that Reddit requiring Face ID wasn't something he expected but agreed that something had to be done about the fake content from bots, adding that, "I just don't know how to sell face-scanning to Redditors or even lurkers." We reached out to Reddit's communications team and will update the story when we hear back. The Digg beta shut down earlier this month after failing to fight the overwhelming influx of AI-driven bots and spam. "The internet is now populated, in meaningful part, by sophisticated AI agents and automated accounts," said CEO Justin Mezzell. "We knew bots were part of the landscape, but we didn't appreciate the scale, sophistication, or speed at which they'd find us."
"We banned tens of thousands of accounts. We deployed internal tooling and industry-standard external vendors. None of it was enough. When you can't trust that the votes, the comments, and the engagement you're seeing are real, you've lost the foundation a community platform is built on."
Question (Score:5, Insightful)
When you can't trust that the votes, the comments, and the engagement you're seeing are real, you've lost the foundation a community platform is built on.
This doesn't seem to hurt Meta at all. As a recent poll showed, 50% of people don't care if their content is AI-generated. I suspect that number is actually much higher.
Was this whole AI craze engineered purely to de-anonymize the Internet?
Re:Question (Score:5, Insightful)
I think there's a very different expectation between "content that's AI-generated" and the expectation that comments sections, review scores, etc. are human. There's a difference between someone posting an AI video and the comment section of said video being nothing but AI bots. Furthermore, it's even more of a problem when those AI bots are dressed up as "real average joes". Hell, it was already a problem before with troll farms in south east Asia, let alone the scale of which AI allows you to build a troll farm. Absolutely unprecedented.
Re: (Score:3)
And it's a tough problem to solve without de-anonymizing everybody in the process.
de-anonymizing will just mean that bots will use false/fake identities. one would hope that another far more effective approach would be considered: educate people in critical thinking, rendering bots, fake news and propaganda merely a nuisance. my hope is slim though not because it would also be a (very) tough endeavour but because a population able to think critically and resilient to misdirection is the last thing that powers that be want. can't have it both ways, and de-anonymization definitely isn't ab
Re: (Score:2)
What ever has happened to the Voight-Kampff-test?
Why we don't polygraph people anymore (Score:3)
I can think of a few things leading to Voight-Kampff-style polygraph tests being phased out in this timeline
1. Several U.S. states have banned reliance on polygraph test results by employers. "Polygraph" on Wikipedia [wikipedia.org] lists Rhode Island, Massachusetts, Maryland, New Jersey, Oregon, Delaware and Iowa. In addition, the federal Employee Polygraph Protection Act 1998 generally bans polygraphing by employers outside the rent-a-cop industry.
2. Autism advocacy organizations raised a stink about false positive resul
Re:Question (Score:4)
Yeah, I don't belive facial recognition holds up as it is vs people trying to trick it. In the future it will become even more difficult, as there will be more platforms that use it and thus more incentive to break it.
So: they'll start requiring us to show more stuff. Our IDs, our SSNs, etc. Even though I think bots are a big problem, there's no way I'll ever be giving them that kind of information just to use reddit.
Re:Question (Score:4, Interesting)
... the bot problem has gotten significantly worse than what it ever was. And it's a tough problem to solve without de-anonymizing everybody in the process.
Really? I think the old internet 1.0 had several solutions that worked just fine, depending on the venue. Just off the top of my head:
* trust network, like pgp. Bunch of bots shows up, just walk up the tree to who trusted them into the network and snip off that branch.
* paid networks - let the bots come, but they have to pay too. And if there is abuse, you ban the bot and payment method. You can also add a delay before they can participate, so you get that first month in fees with little to no risk from the bot.
* authenticated networks - not good for Reddit's goals, but these have their uses.
* participation networks[^1] - I think stack overflow does stuff like this, where you have to participate on so many things before you can engage directly. If some AI bot gets in, good - it's doing well.
* proof of work networks - prove stuff by doing stuff. I'm not a fan, and I expect AI to wind up better than people at these in many cases, but there are ways to use this effectively.
* anonymous networks - wild west, hold on tight.
* etc...
IMO, it seems less of a tough problem to solve and more of a situation with solutions that are tough to accept. Do they need to be one giant network with a shared user base that must all conform to the same identify requirements?
Just rambling, but they could build on the trusted networks thing. One has a big list of contacts and a smaller list of trusted contacts; One trusts the trusted contacts of their trusted contacts, and maybe opts to partially trust the rest of their contacts. Then use that to adjust weights on posts for visibility. Add in meta-moderation ala Slashdot. Allow people to report/score others and posts, and have the impact of scoring weighted by their connection (Eg: bots not in your trusted network won't be able to effect change on your score). Want to wade into a channel where you don't know anyone? It'll be a shitshow, much like in the real world, but you'll come to know who you want to associate with and can build out your trust network.
IMO, Mastodon has the foundation to support all this, especially since each server in the network can set their own rules. So you can join a server with strongly authenticated identities, or one where only those with invites can join, or one where anyone can join, etc.. And you can still see and post in relation to things on other servers. Downside for Reddit - they'd just be one of many many servers in the network.
[^1] I don't know if "participation networks" is a known term or not. If it means something else, sorry - feel free to advise.
Re: Question (Score:2)
Mod parent up
Re: (Score:1)
Reddit would need to actually do some sort of 'user management' to do any of these things - and that has always seemed beyond them. SO does it quite effectively (although they've pissed a lot of people off in the process). Reddit lets any fool who can't really string a sentence together get on and say stuff.
Personally, I think the trust network is where this is going. Everyone, and everything has a 'trust' score. Your posts gain trust by being liked or interacted with, you gain trust by having more 'liked'
Re: (Score:2)
Re:Question (Score:4)
Re: (Score:1)
Jeez thats depressing 8(
Re: (Score:3, Insightful)
don't ever EVER let conservatives gaslight you into thinking they give two fucking shits about election integrity. its a motte and bailey all the way down.
we can have voter ID when republicans stop being racist about it (North Carolina!) and when they can agree to a FREE easy to aquire national ID or standard rules for state IDs
just look at the SAVE act for their true intentions, bad faith to skew the electorate to their favor because they know they cannot win on the issues.
Re: (Score:2)
don't ever EVER let conservatives gaslight you into thinking they give two fucking shits about election integrity.
What does this have to do with conservatives or gaslighting? I'm in Canada and providing our ID when voting in federal, provincial, or municipal elections isn't an issue here and it has nothing to do with a political alignment, it's just the standard way to vote and has been for as long as I've been voting in Canada... or any other country for that matter.
Re:Priorities (Score:4, Informative)
Does Canada have a situation where people of a specific skin colour were effectively locked out of standard hospitals before the 1970s, and thus a sizable proportion of people do not have easy access to birth certificates and by extension ways to get IDs?
Regardess, while it's entirely possible it's changed in the last 25 years, when I lived in Britain I didn't have to show ID. Why would you? If two people turned up to vote claiming to be the same person, it'd become obvious as soon as the second person showed up. Chances of it being discovered there were bogus votes would be 100%, and the chances of you being caught illegally voting were 50%. Why is ID even necessary to do something when it clearly isn't going to do anything to prevent fraud, and will likely exclude swathes of people from exercising their civil rights?
Re: (Score:2)
Does Canada have a situation where people of a specific skin colour were effectively locked out of standard hospitals before the 1970s, and thus a sizable proportion of people do not have easy access to birth certificates and by extension ways to get IDs?
Regardess, while it's entirely possible it's changed in the last 25 years, when I lived in Britain I didn't have to show ID. Why would you? If two people turned up to vote claiming to be the same person, it'd become obvious as soon as the second person showed up. Chances of it being discovered there were bogus votes would be 100%, and the chances of you being caught illegally voting were 50%. Why is ID even necessary to do something when it clearly isn't going to do anything to prevent fraud, and will likely exclude swathes of people from exercising their civil rights?
Aside from airports, the only place I get asked to show ID is occasionally when I buy alcohol and at my age that is a complement.
The previous conservative government introduced the requirement for voter ID in the UK not because there was any voter fraud, repeated investigations found almost none, rather it was a half-arsed attempt at US style voter disenfranchisement and all it did was give the opposition a huge majority. Also this is how the British do non-compliance. People vote with any kind of ID, ba
Re: (Score:2)
Yeah, we Brits have to show photo ID to vote now - but you can hand over just about anything for ID, there's a long list of acceptable things here: https://www.electoralcommissio... [electoralc...ion.org.uk]
If you don't have any of them, you can get a free voter ID card - but of course you'd have to remember to do that some weeks in advance of an election.
If I'm honest, I wasn't convinced of the voter fraud problem when they introduced ID a couple of years back. They at least made is as easy to comply as possible though.
Re: Priorities (Score:2)
Make sure that the ids don't have any race idenifying data. Everyone is a mutt, there are no pure bred.
Re: (Score:2)
Neither side cares about election integrity. The only reason voter ID is bipartisan is that for some strange reason, requiring ID heavily favors R's over D's.
Re: (Score:1)
did the north carolina voter ID case happen or not? do you even know? of course you dont because those are facts and you are allergic to them
"your post made zero sense" and your only point is "other countries do it?" thats my point. you know what else they do? they offer easy to get national ID cards! they dont specifically attempt to disenfranchise (i know you'll have to look that word up!) women and minorities by purpose.
you actually want voter ID because you have a good faith concern about elections? b
Re: (Score:1)
Re: (Score:3)
Do you take the driver's license test every time you go out on a drive? Does the bartender make you show your ID after the first drink? Do you have to keep showing HR your Social Security card after the initial hiring?
Of course not. That'd be stupid, and in this case, an abject waste of taxpayer money. If there was fraud, it would've been proven in court. It hasn't been, and until THAT is addressed, any solutions to a problem tha
Re: (Score:2)
Do you carry your birth certificate with you because you needed it to get your passport?
The ID at voting is supposed to confirm that the person is a particular registered voter. If they are not allowed to vote then they would not be registered.
I do agree that people would feel more comfortable about the voting system if voters produced a physical object rather than the current scheme of saying a name that is registered and they can assume nobody else will say. If they allowed a few obvious things like Stude
Re: (Score:2)
In the United States, we have what is called a RealID. You've had 25! fucking years to get this handled. You can't even fly without one now. So it should be pretty darn easy for someone to show the RealID and off they go to vote.
Re: (Score:2)
RealID, on its own, would not be sufficient under the SAVE act, because RealID is not proof of citizenship.
The "Enhanced Driver's License" version of RealID would be sufficient, because it IS proof of citizenship - however only 5 states offer the EDL version of RealID.
Are you deliberately spreading lies here, or did you fall for the lies?
If you fell for the lies, I encourage you to think carefully about who lied to you. And then, avoid believing anything else that they told you in the past, or will tell you
Re: (Score:2)
I may be misinformed then, but when I got my Real ID, one of my documents used was indeed my birth certificate. This is why, apparently in error, I thought Real ID could be used as proof of citizenship.
Now that I think about it, I suppose I could of used other documents but birth certificate was easy for me since I already had that document.
My mistake. Thank you for pointing this out.
Re: (Score:2)
ReadID does not include an indication of citizenship and non-citizens can get them.
It is unfortunate that some of the items that can be used to get a RealID are also proof of citizenship and thus they could have added this information to the card at that time. I'm not sure what to do if somebody thinks they are a citizen but lack any of the acceptable proofs, they may have to get the RealID without the citizenship indicator if they need it soon, and there will have to have another option than a RealID to re
Re: (Score:2)
I think this is where I made my mistake. One of my documents I used to get my Real ID was indeed my birth certificate.
Re: (Score:2)
Some states are not allowing RealID that has an address outside the voting precinct. This is why Student IDs are needed. Certainly when I was at school my driver's license indicated I lived in a different state.
Re: (Score:2)
You need ID to register to vote. Stop lying.
Re: (Score:2)
Re: Priorities (Score:2)
I have a constitutional right to vote. I do *not* have a constitutional right to meet Mrs. Biden. Different situations altogether.
Re: (Score:2)
Couldn't they do that here ?
Re: (Score:1)
Re: (Score:2)
I agree, hence my comment.
Re: (Score:1)
Re: Start with the mods (Score:2)
You know, if you stop saying that about the mods, they might ban you less. :-)
Re: (Score:2)
And that is a terrible policy because no competing subreddit can ever hope to compete against the one that claims the obvious name for a subject. No one is going to check whether “r/knitting2” exists for knitting so whoever claims it first gets to dictate the policy around any specific subject. In some cases they're reasonable, in other cases they were terrible.
Also ironic because of how Reddit got its start (Score:3)
https://www.vice.com/en/articl... [vice.com]
> How Reddit Got Huge: Tons of Fake Accounts
You're Absolutely Right! (Score:2)
This marks a pivotal moment in online communities and trust. It's not only a mark of the erosion of trust — it's an evolution in what it means to critically evaluate an argument and its source. Identify verification depends on three key parts:
___
I was far too early on the reddit train and left after the APIs were locked down. I acknowledge that it's a hard problem, but I came to wonder if it's a problem that we need solved. Maybe we just need a lot of smaller communities that take a slightly higher ba
Re: (Score:3)
This debate has been going on for at least a couple of decades. I remember back in the Usenet days, when AOL and other early ISP users first started showing up in droves with whacked out untraceable bang paths that people were trying to sort out technical solutions, usually involving some servers tarpitting some domains, with the inevitable consequence that valid users (by whatever definition any given Usenet group had) were blocked.
In a way, AI bots aren't any different than the spam problem on fax machine
But where?! (Score:5, Funny)
Oh yeah, X.
Beep beep boop.
Fuck off, Spez (Score:5, Insightful)
Re:Fuck off, Spez (Score:5, Insightful)
There aren't any good solutions to this problem, just the choice of alternatives that are awful in their own different ways.
Re: (Score:3)
Nobody who's botting is running just ONE account. Nobody who wants to be seen is running just ONE account. That's what makes charging a $5/mo fee per account effective. The bigger the network, the more people competing for attention, the more they have to buy, and the less effective it becomes. So yes, making them pay really is a good solution. Also, if it "kills traffic" then good riddance. I for one w
Re: Fuck off, Spez (Score:2)
It's not a solution because it will kill drive by traffic. I'm not paying for that shit except with content, period.
Re: (Score:2)
Good. Screw "drive by traffic". If people aren't willing to pay then they were a net negative to begin with.
Re: (Score:3)
Good. Screw "drive by traffic". If people aren't willing to pay then they were a net negative to begin with.
That's not even vaguely close to how anything works, but thanks for making it clear you have no idea about anything. Without those users, you won't have a site to play with at all.
Re: (Score:2)
Re: (Score:2)
No promises, some other very stupid people could buy it and keep it going against all sanity.
Re: (Score:2)
Re: (Score:2)
They could card everybody and it wouldn't change the fact that the mods are absolute bastards and stifle all real discussion.
No lie detected.
I'd rather go to a rowdier web forum somewhere and have a real conversation with someone who isn't trying to sell me on imperialist politics (but might call me a bundle of sticks).
Well yeah, you're here, right?
Re: (Score:2)
Or make the browser mine a fraction of a bitcoin before the post goes through. Anyone who doesn't want to use their CPU/GPU in that way can pay by the post, or by the word like for classified ads. Something high enough to discourage bots but not so high that it discourages humans.
Re: (Score:1)
you know ... like this -
https://altcha.org/ [altcha.org]
Re: (Score:2)
A proof-of-work puzzle would disadvantage phone and tablet users. One targeted specifically toward GPUs would disadvantage users of older off-lease ThinkPad laptops with an Intel IGP.
Twitter proved that fees don't stop bots (Score:2)
You know what would really stop the bot problem? Throw up a paywall. If every account accrued a $5/mo fee then, miraculously, your AI problem would be solved simply because botting would be unprofitable.
This was literally Musk's idiotic pitch to stop the bot problem on Twitter, and despite the move to charging a fee for a blue checkmark, this unsurprisingly did not cut down bots on the platform. So not only are you pitching one of Musk's idiotic ideas -- which is embarrassing enough -- you're pitching one of Musk's idiotic ideas that already failed.
Re: (Score:2)
Uh huh. Hey, quick question: How many people are still posting to Twitter without paying for it? Do you think perhaps that might have something to do with the failure to stop bots?
Re: (Score:2)
That's quite the good point you made!
Bot with fingerprint coming in 3...2...1... (Score:2)
Face ID or Touch ID ... actually require a human presence
No, they don't. Or if they do today, they won't tomorrow.
Difficult (Score:1)
AI bots are a double negative for Reddit. (Score:2)
Where Will They Go? Bets? (Score:2)
An identity scheme will be the end of Reddit. This I can guarantee.
But if it were to happen, I'm taking bets on the replacement. Where will the Reddit users flock to? There are already at least a couple of similar sites even using the Reddit code.
Re: (Score:1)
Re: (Score:2)
Re: (Score:1)
I heard once of this old, ancient site....called Slashdot.
I wonder if they could find it once again.....?
Re: (Score:2)
to a Reddit clone like https://lemmy.ca/ [lemmy.ca] [lemmy]
That'd be a shame (Score:2)
The bots are the most interesting part of reddit. It's fascinating to me what foreign actors want us thinking or believing.
It's not like the organic reddit content has any value. This will be like the time onlyfans pretended they were going to get rid of porn.
Digital Driver's License (Score:2)
The token, at a bare minimum, should include a completely anonymized cryptographic identifier, and an issuing author
Governments will abuse it/slippery slope (Score:2)
If this were implemented today, by "tomorrow" users would effectively lose control because the governments would find a way to either legally change things so there is no control, or make it very inconvenient to live without giving up that control.
For the sake of maintaining some privacy it's best to not go down this path unless there is a way to prove to independent observers that it can't be hijacked or abused.
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
As in, "I'm from the government and I'm here to help?"
Explain to me why a reliable digital ID couldn't be open sourced and use blockchain.
Re: (Score:1)
and to make it even more convenient so that you won't risk losing your token(s)....they can be tattooed on your permanently,....like a bar code or QR code....
Ah...what a wonderful world we're heading for....
Hmmm, strange....much of this sounds like something I've heard about or read about before....?
All this will accomplish is shifting the target (Score:2)
That targeting could take a number of forms: an obvious one is to hack them and arrange for them to "verify" a selected set of identities. A less obvious o
Other issues (Score:2)
Maybe Reddit should worry about their overactive moderation community that reaches for a ban for people that says things they don't want to think about, justifying the ban under incredibly specious reasoning like "advocating for violence" when telling someone to "jump up their own ass and die" - clearly a sarcastic statement that would be impossible for someone to try for any number of physics reasons.
Reddit can go fuck themselves until they actually allow free speech with real ban review, rather than a wal
The most lightweight way.. (Score:2)
.. is with something like Face ID or Touch ID
This would filter out all desktop computer users
I don't need anything online that needs my ID (Score:1)
Compromise? (Score:2)
Re: (Score:1)
What's wrong with captcha? (Score:2)
Or are we officially admitting that doesn't really work and trying to decide if a quarter of a bicycle wheel in a tile counts as the bicycle or not?
I'd welcome almost anything at this point (Score:1)
Human Validation is not Identity Verification (Score:2)
"Identity Verification" is being thrown around too much and it's getting people whipped up into a frenzy when they don't need to be. Identity Verification establishes actual human uniqueness by recording and validating Personally Identifying Information (PII) (government ID, birth information, biometric data, etc.).
When California passed a law requiring operating systems to make available the self-designation of the primary user's age group so websites and application programmers can query for that informat
i gave up long ago. (Score:3)
Decades ago I tried to lobby officials and convince people we need solutions. It was utterly hopeless and people were not even ready to take measures to begin with.
They don't know what Identity is or Authentication or Certification or any of the specifics they should know to write laws. Not. that. interested. Certainly, in the USA we can't have government do anything productive and useful; that is forbidden by the libertarian morons.
Government can provide anonymous digital credentials of various sorts; inc
Reddit died with AI. (Score:2)
It's easy! (Score:2)
Hey should just call up Elon Musk. Musk has the solution.
Right?
Right?
Like 16th Century Americas (Score:2)
Just a bit more than five hundred years ago Cortes & Co. arrived in the Americas. They were riding horses, wearing steel armor, wielding firearms, and spreading diseases for which the natives of the western hemisphere had no defenses. When two previously unconnected networks of similar entities encounter each other, there is conflict, and one "giant component" emerges. The natives that are left are perhaps 1% of their former number and in general they subsist at the edges of a transplanted European soci
In my experience (Score:1)
....I'm curious how they'd tell the difference?
Reddit doesn't actually care (Score:3)
If they cared about bots, there are several obvious currently active bot campaigns right now that are actively supported by subreddits' moderators. You just have to have the right audience that the wrong people want to influence and sit back.
Reddit only cares about bots when it doesn't result in them getting a piece of the action, or worse, where it drives their own action away. When it profits them, they support the bot problem with deliberate indifference, and this has always been their core philosophy even for things like child porn - until it became front page news, they had a LOT of underage nudity forums and massive amounts of activity in them.
There isn't really a profitable way to ethically run a social media site. You still need too many professional human moderators to control the bad actors who will endlessly abuse your forum if it has enough traffic that you'll lose money trying to 'do it right'.
I'd be ok with verifying myself, IF.... (Score:2)
and only if I could hide literally every other trace of unverified content.
Knowing I was dealing with actual human beings might be kind of nice for a change.
The reality is that I'd probably just delete my reddit account and not think twice about it.
Reddit's other bot problem (Score:3)
The real Reddit problem (Score:2)
When bots collide (Score:2)
Who cares, really? (Score:1)
Re: (Score:2)
Fuck Reddit and "papers please" crack whores (Score:2)