Comment by Majromax

5 years ago

> This is the reason behind a push for more KYC-like verification on these platforms (e.g. asking for IDs). But this comes at a huge privacy cost for legitimate users.

A way to square this circle is to have rights engage at the point of payment.

A truly pseudonymous account with no monetization (going either way) has little intrinsic value, and less need for KYC-like identification.

On the other hand, an account with some sort of payment history (either giving money in the case of purchases or receiving money in the case of developers/website hosts placing advertising) faces a higher standard. There's a reasonable probability of real economic harm if the account is nuked arbitrarily, and at the same time any money flow is open to theft or money laundering concerns, triggering moral if not legal KYC obligations.

The latter should also help prevent the proliferation of straw bad actors, since providing payment imposes a direct cost, while the KYC rules open up the possibility of more direct action for flagrant breaches of contract / use of the platform for other abuses.

The "spammer" can only pretend to be 10 million different people because e-mail is free. Paying a tenth of a penny per e-mail has been one of those long-standing impossible anti-spam measures, but walled gardens can implement something like this at their whim.

> The "spammer" can only pretend to be 10 million different people because e-mail is free. Paying a tenth of a penny per e-mail has been one of those long-standing impossible anti-spam measures, but walled gardens can implement something like this at their whim.

Maybe. A few problems here:

1. payments come with privacy concerns, unless maybe you're talking about zero-knowledge-based blockchains, but we're a LONG way from such functionality being widespread

2. $0.001/email is actually very reasonable for an attacker; they'd probably gladly pay even up to $1 or more, depending on their exact needs, especially if that comes with an elevated privileges account

3. all of this is easily defeated by fanouts. E.g. if they sign up with bob@gmail.com and then are able to use bob+1@gmail.com, bob+2@gmail.com etc. to sign up for a different service, this defeats the purpose