Hacker News Reader

I keep no alternate accounts, but this tool reports best matches for me that appear to be Slavic or just Russian - and I am Russian. Best match score in my list is just above 0.5. There are some clearly alternate accounts on the list, their match scores with this tool are well above 0.7.

It is probable that persons of same cultural origin will have similar writing style and vocabulary. It is also probable that persons of same cultural origin would have same relationships with the world as a whole, they would like same things and dislike other same things.

So, in my opinion, it is possible that you have found not only alternate accounts (score above 0.7), but accounts of people with same cultural origin (ones that are around 0.6).

There're 19 other accounts this tool finds similar to me. Those are not my accounts. 0.46 - 0.56 are numbers.

I think people are sort of confused at what this tool is supposed to be which I will concede is partially my fault. The results of this tool are by themselves not indicative of having an alternative account. It generates the 20 most similar users for every single user on the site, regardless of whether they have an alt or not (there's obviously no way for me to know that for every single user). In your case further investigation would reveal that none of those accounts are yours.

It is a fun tool, I can assure you. It is just people have found use case you haven't foreseen yourself.

I think your tool should have internal embeddings for each of the user. Also, most probably your tool uses cosine similarity for a search.

Thus, I would like to suggest a feature: recognize simple arithmetic operations over user's embeddings, such as "thesz - 2 * patio11". It will make things even more fun, this way we can find users who are like me and much not like patio11. Even simple additions and subtractions would suffice.

(an idea is taken from properties of word2vec embeddings)

Your tool is thought provoking. What I discovered with it made me think about my use of language and what other languages (body, imagery, etc) I use differently because of who I am. Which made me think about my favorite underrated superhero Cypher [1] - would his innate ability to understand languages make him best detective ever?

[1] https://en.wikipedia.org/wiki/Cypher_(Marvel_Comics)

Thank you!

Really cool idea. I'd need to upgrade the VPS though so all the vectors would fit in memory but it probably wouldn't be too hard (right now I'm just storing a map of username string -> array of 20 username strings because my VPS only has 512mb RAM). I'll think about if I can do this in a way that is more resource conservative.

Fwiw, and as gp mentioned, > 0.7 seems more likely to be alt territory.

You are fools, one and all! This tool's only purpose, is to tag people who use it!

Now they know just who cares about which alternate accounts. They know!

They freaking know, man!

You have all fallen for their ploy. Fools!

I have no alternate accounts and visited the site out of curiosity, because I used to worked in the domain like this.

What I found was worth visiting the site. Somehow notably many accounts with (relatively) high similarity to mine's are sharing at least one of my personal traits.

Which is fascinating, to me.

And I think is worth to be noticed by others - what and how you write can disclose who you are.

It knows my IP now.

(Or does it?)

It offers no privacy policy, so can't tell.

My highest was 0.41 and the person writes nothing like me. I guess I'm a unique snowflake after all.

my second highest hit (ie, third in the list) is gwern at 0.45 who i'm fairly sure is not me.

I was actually just looking at near hits for gwern and found what's almost definitely a defunct alt for him.

Well is certainly NOT me, that's for sure.

On an unrelated topic, I'm starting a service to write comments in the style of others to provide plausible deniability for other alt accounts. Rates negotiable.

I have a few in the low 0.5's and, honestly, they seem cool and I want to meet them.

I was curious about this, my highest match was 0.47 and I have no alts, maybe I'm also a unique snowflake, or haven't said anything noteworthy enough to have been deepfaked yet ;).

I don't have any alternate accounts here either and my writing style is apparently nearly the same as a high profile account that I recognize and has many points. I wouldn't say this is a highly accurate thing.

.6 is high confidence? I did my own username, wondering what it would return, since I know I don’t have any alt accounts. The top results are in the .6-.7 range. If they aren’t alt accounts, is it just coincidence that we have similar writing styles?

I think so.

A funny thought — my “matches” cap out at around .56. Having false positives* in a tool like this might feel like a “bad result” but actually I think it just means that if someone were running this sort of tool across the whole internet, I’d be relatively easy to correlate, while your identity would be intermingled with your .6-.7 partners.

*actually they aren’t really even false positives because the tool doesn’t promise to detect alts in the first place, just find similar styles.

> but this functionality turned out way creepier than I thought the moment I tried it

Hopefully this raised awareness means that people who actually need anonymity will be more likely to know to take precautions.

Genuinely asking, what way is there to combat this? Is there a tool that takes out stylistic elements of your comment?

The site mentions a service called Quillbot which apparently does just that. https://stylometry.net/avoid

I wonder if gpt3 has a use case here?

One way would be to run such tool before posting and then based on the results, tweak the post and repeat until the similarities are not statistically significant. Or instead of tweaking, start posting under a new throwaway account. But this won't save you when some new way to analyze style appears in the future. Moreover there are other types of meta data which can be taken into account to narrow down the search space a bit such as timestamps. And obviously more you write, harder it is to control these things.

This is the million dollar question. I think the goal of "anonymity for most intents and purposes" is worthy, it's been how I've enjoyed HN and Reddit, but I also know that it was just a matter of time before stylometry and other meta-analysis of post history become 10 second tools for everyone. Now the cat is out of the box.

I've been thinking about this a bit, and I've landed in that having a stable identifier across ALL comments & posts is a poor default. We still probably want some coherence, at minimum within a thread, eg to follow a back-and-forth. The site itself may also use stable identifier for abuse prevention. But there's no reason one should have the same username externally traceable for posts about completely different topics.

In practice, this could be done with low friction pseudonym creation, which all ties to the same account privately.

0.6 isn't much. I have 3 matches above 0.6, and they're not me. 20 or so over 0.5.

That's why you manually evaluate the matches. And like I wrote in that comment, I did that manual eval, and these clearly are alts of that main account, not spurious. Narrowing down the pool of accounts you'd need to do this kind of manual evals for by a factor of 100000 is a pretty significant change in capabilities.

I get one 0.68 match, which... fair enough. It is an account I've abandoned some years ago, no secrets there.

No other hits above 0.5, so I guess that either makes me pretty unique as a commentator or my English is broken in a unique way.

Could you elaborate on why it's obvious why you won't name the account?

Maybe to avoid attracting any extra attention to this user? Also, as someone who’s read HN for a few years, it only took me 2 guesses to find an account that the above comment describes (and not necessarily the same person).

It was a classy move by jsnell, too. Thank you.

(I don’t know who the comment is talking about, which is how it should be. There’s no need to blow someone’s cover in a highly visible way. Even if they were satan, they’d still be welcome on HN as long as they’re writing substantive, interesting comments that follow the guidelines.)

Such quality comments would track with most thorough Satan representations.

They obviously don't want it to be known, seeing as they've got alts to post under and avoid going into too much detail. Being able to go out and do your own research is different than posting the information open for everyone to see at a glance.

I would say it's obvious why one might respect that wish (do unto others...), but I'm also aware that my and my culture's sense of privacy goes further than many others'.

MD5 of the username is 9abc27e93b7e3c04b7c599017c1cfe5f ? The top one seems an odd one out in that case?

Usernames aren't random enough to be safe as a simple MD5. Perhaps with a strong bcrypt, but similar to PIN codes, it might be better to give partial information like "is the second character an ...", assuming nobody else made similar statements. Or give the first ~two hex characters of the hash, so that it would match 1/(16²)rd of the usernames. I'm sure there's also a clever way for a zero-knowledge proof here, probably something with diffie-hellman using the name as your random integer or something, but I'm too sick to think about this stuff right now. Privately sharing data publicly is hard.

Good point - I've been running john on that md5 for a couple minutes :)

Why use John? Just run down the list of Hacker News usernames; it'll take less time. (Or, better still, don't; just because the privacy's theoretically compromised doesn't mean we have to exploit that.)

I don't think there's a public list of all HN usernames is there?

Found this, it includes 250k usernames, but it's not there. https://www.kaggle.com/datasets/hacker-news/hacker-news-corp...

The username in question isn't in this dataset but maybe it was created in the past 10 days, as the max(timestamp) is Nov 16th, 2022.

https://console.cloud.google.com/marketplace/details/y-combi...

It isn't there, and given the "story" it happened years ago so it should be there, so I guess we've been played.

Unintentionally played I might add... But I will leave it at that.

Another problem is that it's a small set. If you had a list of all HN users, you could compute md5 for all of them in seconds.

I think the intention of the post not mentioning the handle was just to prevent old discussions from flaring up or so? The post doesn't really contain any new information on the person that would be worth obscuring. So I just thought I'd hash it to prevent that. But it seems I actually screwed up the hashing so I will leave it at that.

> quick browse of the comments of the recently active ones, they look really likely to be alts.

Hmm isn't a spot check of comments somewhat tautological, since that is how the tool identifies alts (rather than something like IP address or time of day)? If this had been promoted as "find accounts with similar writing style to yours" would people immediately assume alts?

I would presume that OP is referring to the actual content of the comments. This just does stylometric analysis, which looks at word choice, but not what the arrangement of the words mean.

If some accounts are found to be stylometrically similar, and then a visual inspection also shows them all stating similar opinions, that latter piece of data is a strong signal.