this post was submitted on 05 Jul 2023
26 points (96.4% liked)

Asklemmy

43417 readers
1355 users here now

A loosely moderated place to ask open-ended questions

Search asklemmy 🔍

If your post meets the following criteria, it's welcome here!

  1. Open-ended question
  2. Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions. Assume best intent and be excellent to each other.
  3. Not regarding using or support for Lemmy: context, see the list of support communities and tools for finding communities below
  4. Not ad nauseam inducing: please make sure it is a question that would be new to most members
  5. An actual topic of discussion

Looking for support?

Looking for a community?

~Icon~ ~by~ ~@Double_[email protected]~

founded 5 years ago
MODERATORS
 

I mean, pretending to be someone in another instance, "stealing" the username, is trivial. I see the more likely targets being instance admins or high profile users. Should we worry somewhat about this?

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 20 points 1 year ago (3 children)

That's why instance is part of the username. It's no different than email addresses.

[–] [email protected] 5 points 1 year ago

Confusing similar domain names are a common thing with email. Micr0soft.com vs Microsoft.com. Same idea could be done with instances.

[–] [email protected] 3 points 1 year ago (1 children)

Setting a display name hides the instance bit. You have to check the URL or profile to see which instance they're on, which people definitely won't do every time. Especially if an impersonator just joins inside a thread mid-conversation, it won't be obvious at all that it's suddenly a different person writing.

[–] [email protected] 2 points 1 year ago* (last edited 1 year ago)

Just like emails, when people write something like ”Amazon Gift Cards” <[email protected]> in the From field.

[–] [email protected] 1 points 1 year ago (1 children)

His concern is probably that in comments etc. only username is displayed. You have to go to person's profile to discover their instance.

[–] [email protected] 1 points 1 year ago (1 children)

Instance is shown if it's different to the one you're on. I can see your instance is vlemmy.net

[–] [email protected] 1 points 1 year ago* (last edited 1 year ago)

Not if they set a display name. Many of the mobile apps are also bad about it even without a display name.