News for hackers. Stuff that matters.
Re:Your account is permanently suspended by IshKebab on Thursday October 20, 2022 @11:21AM (#33276101)
Offer reasonable options to get it reinstated of course.
Re:Your account is permanently suspended by shadowgovt on Thursday October 20, 2022 @11:27AM (#33276201)
I'm not sure what reasonable looks like when a system has 237 million daily active users and the reinstatement system itself would be intentionally gamed by adversaries.

Do we have any examples to draw from operating at that scale? Due to the Musk purchase, we have a rare public disclosure of a major tech giant's internal workings where Twitter claims (https://www.theguardian.com/technology/2022/jul/07/twitter-s...) it suspends half a million spam accounts a day. It's trivial to file an appeal, so (because the attackers are by no means disincentivized from appealing) that's probably on the order of 250,000 appeals a day if we assume even half the banned won't bother (and I think that assumption is low, since a reasonable system should probably make it trivial to file an appeal, therefore people will). How does one reasonably handle that? To scale up to thousands of humans handling it, you'd need strict rules to even approximate getting the same result across everyone, and if strict rules worked you could code them into the auto-ban system.

One solution might actually be "Stop having 'get every human being on the service' as a goal," but then sucks for the people who can't use the thing.

Re:Your account is permanently suspended by Multicomp on Thursday October 20, 2022 @01:00PM (#33277532)
How about an escrow-style thing?

"We charge $100 to have a human look at this case, if the suspension was incorrect we reinstate the account and your money. If not, we tell you what actions you can take that would un-violate our policies so you could be re-instated."

Spammers doing selenium powered spam would never pay for that, but the real folks who are not tight with large audiences would have an option.

Re:Your account is permanently suspended by shadowgovt on Thursday October 20, 2022 @01:11PM (#33277703)
I believe there's meat on these bones. This is the approach some states in the US use for allowing challenge to election integrity if the vote count isn't narrow enough to automatically trigger a recount... A candidate who complains can put up the money to have an individual polling district recount the votes, and if the vote count comes out different enough to change the results, the money is refunded.

I can't imagine Twitter could get away with this without it being interpreted by the regulatory bodies of various countries as a protection racket. Which is unfortunate, because I think there's potential here.

Re:Your account is permanently suspended by dzhiurgis on Thursday October 20, 2022 @01:39PM (#33278055)
Kinda agree, but small nitpick - $100 in places where most selenium scraping is done is a ton of money. To compare would average joe in US put 1k towards escrow?
Re:Your account is permanently suspended by IshKebab on Thursday October 20, 2022 @05:36PM (#33281128)
> It's trivial to file an appeal, so (because the attackers are by no means disincentivized from appealing)

Well yeah, it's trivial to file an appeal if you just have to click a button, but obviously that's not what I was talking about. Have they tried literally anything else?

Solve difficult CAPTCHAs, send a scan of your passport, pay a small amount of money (e.g. $1), put a large amount of money in escrow like someone else suggested, allow other well-known accounts to vouch for you, etc. etc. etc.

There's a ton of things you could do. It seems like they've given up without trying any of them.

Re:Your account is permanently suspended by freejazz on Thursday October 20, 2022 @01:06PM (#33277615)
Even lawyers don't hide behind the word "reasonable" this much!