Hacker News Reader

The problem arises where an account gets verified as one thing and then changes to become another, this happens all the time with trolls who can make/buy/extort verified accounts.

They then spoof being the real person, and verification then means absolutely nothing cause they are functionally identical to a bypasser.

By having verification be really hard to get, trolls have a lot harder time getting accounts and the problem is smaller in scope.

View on HN

Allowing identity changes without requiring reverification to keep the "verified" status sounds like a problem with an obvious solution: Require revalidation, or remove the mark.

Having initial validation accessible is not the issue here.

Exactly: I am totally perplexed at all the "see what verifying anyone will result in", instead of "your verification is broken" claims.

It's like allowing verified emails to be changed to another address without reverifying.

I mean, doh.

Reply on news.ycombinator.com