It took me less than 25 minutes to set up a fake anonymous Apple ID using a VPN and disposable email, attach a masked debit card to it (with the address being Twitter's HQ), and get a verified account for a prominent figure. Just think what a nation-state or bad actor could do...
Twitter wants to pass the verification steps off to Apple and card providers but Apple didn't check a single detail and you can easily find disposable cards with no links to you or even stolen/hacked card details if you're a particularly malicious actor. The policy is unworkable
Twitter claims they've raised costs for malicious actors but I think they've actually lowered them. Now anyone with $8 can buy a verified badge rather than having to hire someone to hack a verified's account or trawl through password leaks.
It's not impersonations of high-profile accounts that are the problem. It's the person impersonating a minor online celebrity, an obscure government functionary, or perhaps their ex. That's where the harm will be done and no one will notice or care until it's far too late
The problem with the argument that "the verification system now just means something different and we should accept that" is that the new system is very unintuitive and counter to what every other SM site does. If you're not terminally online you may not realise what's happened
There will be a few examples of big accounts doing big damage but I suspect the more common scenario we'll see is small to medium size accounts doing small to medium size damage (or big damage to a small number of people). It'll be death by a thousand cuts not a single blow
It’s even worse than this. Twitter will have no way to know which of the 7 accounts claiming to be Dr X is really Dr X. They may find fakes but they’ll ban many real users, too.
This is a really good point. If everyone can get verified (without anybody actually verifying their identity at any stage of the process) how will anyone - let alone twitter - know who the real Dr X is?
Earlier this year it was revealed that 57 UK MP’s didn’t have twitter accounts. What’s to stop someone starting up an account as one of them? As long as you don’t go overboard the impersonation could take a while to be detected. (h/t
@GidMK
My argument is not only that bad stuff might happen. It was also a response to twitter’s repeated claims that just because they’re not doing verification it doesn’t mean no one is. My experiment debunks this claim. No one checked my identity at any stage.
As I said earlier during the Elon Musk Twitter Space meeting with the advertisers: Twitter should focus on prevention rather than mitigation with the impersonation issue. As long as they only treat impersonation as their problem AFTER it’s happened I’m not sure they’ll get far