this post was submitted on 07 Jul 2023
30 points (96.9% liked)

Fediverse

33337 readers
622 users here now

A community to talk about the Fediverse and all it's related services using ActivityPub (Mastodon, Lemmy, KBin, etc).

If you wanted to get help with moderating your own community then head over to !moderators@lemmy.world!

Rules

Learn more at these websites: Join The Fediverse Wiki, Fediverse.info, Wikipedia Page, The Federation Info (Stats), FediDB (Stats), Sub Rehab (Reddit Migration)

founded 2 years ago
MODERATORS
 

Since usernames are only unique to the instance it's created on, what's to stop someone from creating a copycat username in order to impersonate another user?

top 26 comments
sorted by: hot top controversial new old
[–] YourHuckleberry@lemm.ee 86 points 2 years ago* (last edited 2 years ago) (2 children)

What do you mean your username?

spoilerThis is obviously a joke. I have no intention to use this username for anything else.

[–] Dewbs84@lemmy.fmhy.ml 15 points 2 years ago (1 children)

Comrade, it is OUR username

[–] WhoRoger@lemmy.world 7 points 2 years ago (1 children)

On Reddit I'd link r/communism... Here I guess I just link lemmygrad?

[–] IverCoder@lemmy.world 3 points 2 years ago* (last edited 2 years ago) (1 children)

!genzedong@lemmygrad.ml (but take note that lemmy.world has defederated from them)

[–] WhoRoger@lemmy.world 4 points 2 years ago (1 children)

Wtf no they didn't https://lemmy.world/instances

Don't give me a heart attack like that again

[–] IverCoder@lemmy.world 2 points 2 years ago

Oh I was thinking about a different instance lol

[–] OtakuAltair@vlemmy.net 9 points 2 years ago

Chad behaviour

[–] 3rdBlueWizard@lemmy.world 53 points 2 years ago

No different than email. That's why domains should be displayed in clients for users.

[–] jalda@sopuli.xyz 26 points 2 years ago (1 children)

This "problem" isn't new or unique to the Fediverse, or even to the Internet. It's much much older. What's to prevent someone from hijacking your name?

Most societies converged to a simple solution: surnames. The Fediverse is not different. "YourHuckleberry" is your username and "@lemmy.world" your usersurname. It is impossible to hijack your name+surname.

[–] ram@lemmy.ramram.ink 19 points 2 years ago

"usersurname". I like that.

[–] irkli@lemmy.world 14 points 2 years ago

It's always been so. John@aol.com, john@outlook.com, john@foobar.com, ... What's the problem?

[–] remkit@lemmy.kya.moe 7 points 2 years ago

None. Lmao. This is by design.

[–] MyOpinion@lemm.ee 7 points 2 years ago

Welcome to freedom!

[–] dhork@lemmy.world 6 points 2 years ago* (last edited 2 years ago)

Nothing, really. Each instance is unique. Technically speaking, users will the same name on different instances are unique. You can always spin up your own instance and get whatever name you want. So it's natural to want to register a username in multiple instances, to avoid confusion. Eventually there will have to be some way to tie identities across instances. Like a GPG key that can be validated on all accounts belonging to the same person.

I think this is ultimately where Meta is going with their Fediverse stuff. They will operate as a low-key ID verification service. Instances are saying they won't federate with Threads right now, but as shitty as Meta and Instagram are they can guarantee that a Threads user is the same entity as an Intstagram user, which is currently more ID verification than exists right now in the Fediverse. Some instances may open themselves up to Threads in order to gain access to their userbase.

[–] breadsmasher@lemmy.world 5 points 2 years ago

Nothing at all

[–] SuperFola@programming.dev 5 points 2 years ago

Nothing, but keep in mind that maybe 95% or even 99% of the fediverse users are a bunch of nobodies. To have a stalker or someone trying to impersonate you, you would have to be extremely lucky (or unlucky)

[–] z0m_a@lemm.ee 5 points 2 years ago (1 children)
[–] jalda@sopuli.xyz 5 points 2 years ago

I'm Your Huckleberry and so's my wife

[–] MadgePickles@lemmy.dbzer0.com 4 points 2 years ago (1 children)

I'm sure this will happen. People do get crazy when Internet arguments occur. But what is the risk to you I wonder? If they do something that will get them banned, it will only affect that account. Do others really pay attention to usernames? I don't.. I could see someone coming into a contentious debate and trolling but ultimately do any of these debates really matter outside of just the sharing of knowledge and ideas? I'm trying to think how it could really negatively affect me other than just being rude and offensive to my ego.

[–] AeroBlue@lemmy.world 4 points 2 years ago* (last edited 2 years ago) (1 children)

I mean depending on how you look at it. Usernames are really your name + instance, and that is unique. To know you are actually talking to the right person you just have to make sure that matches up

[–] nitefox@lemmy.world 1 points 2 years ago

The username is structured as username@instanceurl so they will know it's you based on the instance url

[–] Die4Ever@programming.dev 3 points 2 years ago

Same thing as email addresses

[–] kukkurovaca@lemmy.blahaj.zone 3 points 2 years ago* (last edited 2 years ago) (1 children)

As others have said, nothing.

Mastodon has a sort of lightweight verification which just signifies that you are to some degree in control of the URLs linked to in your profile. So for example, if you have your own domain or something that people associate with you, then you can use that in your profile to show that it's you. Of course, that depends on that domain meaning something to the end user, and the end user being savvy enough to, for example, know that someone could get the .com version of your .net domain, etc. etc.

[–] Tag365@lemmy.world 2 points 2 years ago

Does that give a verification badge?

[–] MadgePickles@lemmy.dbzer0.com 1 points 2 years ago

I'm sure this will happen. People do get crazy when Internet arguments occur. But what is the risk to you I wonder? If they do something that will get them banned, it will only affect that account. Do others really pay attention to usernames? I don't.. I could see someone coming into a contentious debate and trolling but ultimately do any of these debates really matter outside of just the sharing of knowledge and ideas? I'm trying to think how it could really negatively affect me other than just being rude and offensive to my ego.

load more comments
view more: next ›