Real selfies in the KYC thread.

[DireWolfM14]

The KYC thread started by theymos this morning is a real hoot.  But, I'm concerned about the security of those who are actually posting real selfies in that thread.  Some of these photos can be reverse image searched on google and lead to real social media profiles.  People are either posting their real selfies, or posting photos of other people which is even more concerning.  

Sure, the advent of the internet has made April Fools Day more widely known around the world, but it's still mostly a phenomenon in the Western World.  It's not as ubiquitous as we westerners might think.  It seems no matter how many obvious joke photos are posted, some think it's acceptable to post their real photos.  Spelling it out in that thread seems to have no affect, either.

@theymos, I hope you have a plan to address the security risk without canning the entire thread.  That would be a shame, but it's my opinion the bigger shame would be to allow those photos to remain.  

  

[1715086448]

1715086448

[1715086448]

1715086448

[1715086448]

1715086448

[1715086448]

1715086448

[1715086448]

1715086448

[1715086448]

1715086448

[suchmoon]

Here's one that made me somewhat less concerned about privacy issues of those users. I mean - these bounty hunters are used to whoring out their personal details (real or fake) so they probably don't see it as a problem at all. And yes, I edited personal info out. The original contains actual data.

Bitcointalk user name: csefarhad

Bitcointalk profile link: https://bitcointalk.org/index.php?action=profile;u=2195916

Email: [...]

Twitter & Telegram user name: [...]

Twitter profile link: [...]

Twitter audit link: [...]

Facebook user name : [...]

Facebook profile link: [...]

Medium user name: [...]

Medium profile link: [...]

LinkedIn profile link: [...]

Instagrame user name: [...]

Instagrame profile link: [...]

Reddit user name: [...]

Reddit profile link: [...]

Telegram profile link: [...]

ETH Address : 0xbc2240f8CA327d86D2143d680B3aa9e8957a2cA5

[Bitcoin_Arena]

They don't care about sharing the details because the probably have nothing to lose or probably they think they are somewhere unreachable.
If someone really fell for today's prank then that level of naivety is off the chats.

[Steamtyme]

Wait. I wasn't supposed to post my real photo, that damn thermos got me again.

Anyone who is posting real photos or their photo with I.D, unfortunately has a lot to learn about security. That thread is likely the best place to learn it if they can actually read another post, as I've seen several posts in the thread addressing that. I can't be positive but I think anything that had ID or something was being removed because I had noticed a lot of broken image tags.

If this is what triggers their brush with scammers/hackers I would be amazed as they likely post their info everywhere and anywhere they are promised a couple satoshis, unfortunately.

[TheBeardedBaby]

If you spot a real image, maybe just send a PM to the user with a small warning to change / delete the link to the image.

[Joel_Jantsen]

If you spot a real image, maybe just send a PM to the user with a small warning to change / delete the link to the image.

Or just report the post to the mods? AFAIK theymos deleted a few obvious real images from that thread. Also you never know if that image is real or just ripped off from the internet. It's funny how people are continuing to post their "real images" even after seeing most of the images posted there are obvious trolls. This is what bounty whoring turns you into - A blindfuck.

[theymos]

If people aren't able to perceive that they're posting the image publicly (after they uploaded it to imgur or something, as well), then they're really beyond help...

If someone posts their ID with their selfie, please report it. Otherwise it's not a big deal.

[marlboroza]

What are you all talking about?
I thought this was real KYC 

[pawanjain]

If people aren't able to perceive that they're posting the image publicly (after they uploaded it to imgur or something, as well), then they're really beyond help...

If someone posts their ID with their selfie, please report it. Otherwise it's not a big deal.

Besides that, if anybody is posting their real picture at all then they must be either real dumb or too careless which in both cases should not bother us much.

What are you all talking about?
I thought this was real KYC 

Oh common, we are over it now. Stop joking already.

[suchmoon]

What are you all talking about?
I thought this was real KYC 

And you're the 4th real Satoshi I'm seeing today... exciting times.

[Steamtyme]

What are you all talking about?
I thought this was real KYC 

And you're the 4th real Satoshi I'm seeing today... exciting times.

Wait I think we found a linked trust abusing merit link. They all verified as the real Satoshi, rookie mistakes.

We need Marlboroza to get on this investigatio.... wait. Never mind I guess they have won.

[The Sceptical Chymist]

They don't care about sharing the details because the probably have nothing to lose or probably they think they are somewhere unreachable.

Plus they're probably not providing their own dox anyway.  You can't tell me that bounty hunters couldn't and wouldn't either just fake it or have some forged documents on hand for just such an occasion.

And yes, if someone was boneheaded enough to fall for an April fools day prank like this one, when most people in the know had seen it coming since at least last April, they deserve whatever's coming--and I suspect nothing's coming anyway.  I doubt Theymos would keep the dox and I think he respects everyone's need for privacy.

[LFC_Bitcoin]

I didn’t comment on them in the thread because I didn’t want to bring attention to them in there but I was thinking myself that some idiots definitely posted real pics in there.

I mean, FFS!

[LTU_btc]

I don't surprised at all that there was so many people who posted real their selfies. Most of them are new members who maybe don't know about April fools day pranks here and theymos stand towards KYC. But what is really strange to see many higher ranked users (Full, or Sr. Members, usually with 0 earned Merits) posting their selfies.
About these who uploaded photos of ID cards/passports with all details visible. You must be really dumb to do that. Posting their sensitive date public in forum's thread - sounds like a "great" idea. And it's not about being not aware about April fools day or having bad English skills to understand context. They are just dumb. And the we are surprised that people are falling into obvious scams...

[gentlemand]

And you're the 4th real Satoshi I'm seeing today... exciting times.

You never know, perhaps one of the selfies in that thread actually is Satoshi letting off a little steam.

Interesting point re the April fools. There will be a lot of people reading who had a shot of alarm today. It's easy to forget there are whole swathes of the world that barely acknowledge it, let alone have any nuance of English comprehension. And there are certain bits where it's not even April at all.

After that there's intelligence and the ability, or will, to analyse what you've read. Both of those qualities are in even shorter supply.

[LFC_Bitcoin]

And you're the 4th real Satoshi I'm seeing today... exciting times.

You never know, perhaps one of the selfies in that thread actually is Satoshi letting off a little steam.

Interesting point re the April fools. There will be a lot of people reading who had a shot of alarm today. It's easy to forget there are whole swathes of the world that barely acknowledge it, let alone have any nuance of English comprehension. And there are certain bits where it's not even April at all.

After that there's intelligence and the ability, or will, to analyse what you've read. Both of those qualities are in even shorter supply.

Most of the people supplying real pics probably have little or nothing worth protecting. That’s the only way I can comprehend somebody being so retarded. This place is full of hackers, scammers & untrustworthy bastards. Supply real life info at your own peril.

[suchmoon]

But what is really strange to see many higher ranked users (Full, or Sr. Members, usually with 0 earned Merits) posting their selfies.

Possibly purchased/hacked accounts. I've seen this with plagiarism: a high-ranked account copy-pasting unbelievably mundane drivel -> check post history and sure enough there is a gap in posting / change of language / etc. Those are not the sharpest knives in the proverbial drawer - they're unable to rank-up on their own AND they think that acquiring a high-rank account is a good idea.

[Joel_Jantsen]

But what is really strange to see many higher ranked users (Full, or Sr. Members, usually with 0 earned Merits) posting their selfies.

Those are not the sharpest knives in the proverbial drawer - they're unable to rank-up on their own AND they think that acquiring a high-rank account is a good idea.

You don't need to be the sharpest knife in the drawer to bounty whore. In fact, you have to be the dumbest crayon in the box to bounty whore, the primary reasons why these accounts are bought for.

There could be a few exceptional cases but I think most would buy accounts to either scam or make pennies from the bounties.

[DireWolfM14]

What are you all talking about?
I thought this was real KYC 

And you're the 4th real Satoshi I'm seeing today... exciting times.

The tags are great.  I hope we get to keep them for the whole month.

[suchmoon]

The tags are great.  I hope we get to keep them for the whole month.

Aaaaand they're gone. Much sad  

[cellard]

Here's one that made me somewhat less concerned about privacy issues of those users. I mean - these bounty hunters are used to whoring out their personal details (real or fake) so they probably don't see it as a problem at all. And yes, I edited personal info out. The original contains actual data.

Bitcointalk user name: csefarhad

Bitcointalk profile link: https://bitcointalk.org/index.php?action=profile;u=2195916

Email: [...]

Twitter & Telegram user name: [...]

Twitter profile link: [...]

Twitter audit link: [...]

Facebook user name : [...]

Facebook profile link: [...]

Medium user name: [...]

Medium profile link: [...]

LinkedIn profile link: [...]

Instagrame user name: [...]

Instagrame profile link: [...]

Reddit user name: [...]

Reddit profile link: [...]

Telegram profile link: [...]

ETH Address : 0xbc2240f8CA327d86D2143d680B3aa9e8957a2cA5

I have always hated those signature campaigns that require your real phone number. There's a lot of sig campaigns lately that require that you join their Telegram community, which means you are going to need a real phone number for that.

I remember I participated in the past in some campaigns that required phone verification to join a website but just used one of those online SMS numbers. Too many scammers on this forum. I feel bad for those that are legit, but it's difficult to trust people, too many backstabbers and scammers.

As far as actually believing theymos would request KYC on the forum and posting your actual selfie, if anything that is a basic IQ test for the people on this forum. Not even IQ test just common sense. I mean theymos is still using this ancient javascript-off-friendly layout to support pro-privacy people. Lol at anyone that thought he wanted KYC.

[Quickseller]

People are free to do what they want, and if they do not value their privacy, I don't see any problem with them posting actual pictures of themselves.

This could actually be a way to locate alts of some of the dumb signature spammers. When I saw nyoach post his picture, I thought the guy on the right looked familiar, but I couldn't find him on the 1st 16 pages of the KYC selfie thread, although there are a lot of image proxy errors, and the pictures posted by newbies no longer appears in the thread. 

[The Cryptovator]

How determine which photo is real? If matching with social media it doesn't really mean that that's their own photo. I believe most of user was aware about April fool especially whoever active in meta section. However I don't think we should have take it seriously for future investigation or something else. Everyone is mature here and fully aware that they are posting image on public place. I don't think it will be much harmful for them. However, it would be better if they delete their photo by themselves. Since you already made this post so everyone should understand regarding April fool of last day.

[Crypto Girl]

Most of the people supplying real pics probably have little or nothing worth protecting. That’s the only way I can comprehend somebody being so retarded. This place is full of hackers, scammers & untrustworthy bastards. Supply real life info at your own peril.

Sure, there are people that don't know if it's a joke or not nor taking too serious especially it came from Theymos. In return, they just post their photo impulsively without taking the thought it's April fool's joke and just want to comply with the new rule. It's lame tbh, that there are people like this that need more time to comprehend such information before they realize that it was nothing but a prank.

[Lionel Messi]

I wish I could post my Selfie but I dont have any merit 
Ya'll would probably think I'm a funny looking fella but I'd be recognizable.

[guybrushthreepwood]

The KYC thread started by theymos this morning is a real hoot.  But, I'm concerned about the security of those who are actually posting real selfies in that thread.  Some of these photos can be reverse image searched on google and lead to real social media profiles.  People are either posting their real selfies, or posting photos of other people which is even more concerning. 

I haven't looked through that thread as it's too long, but if people are willingly posting their real data publicly then there's probably not that much you can do about that. Most people that do probably don't care, though. I know people should be careful with what they post online, but us bitcoiners seem to be extra careful, but for the vast majority of people they're seemingly happy to have public Instagrams and accept any facebook friends request they get and so forth.

I have always hated those signature campaigns that require your real phone number. There's a lot of sig campaigns lately that require that you join their Telegram community, which means you are going to need a real phone number for that.

You can just use a throwaway pay as you go sim. It's probably a good idea to have one because there are many other sites that require them that you may not want to give your personal number to. I know most email providers now require a phone number so you'll probably need one even if you want to create a throwaway address with them. I don't think telegram displays your hone number to others either. I also believe you can use telegram on your computer like skype and so on.

[TheBeardedBaby]

I wish I could post my Selfie but I dont have any merit  
Ya'll would probably think I'm a funny looking fella but I'd be recognizable.

You don't need to wait for that 1 merit. BTW you have no activity even if you have merit to get to Jr. Member.
You can buy a Copper membership instead > check it here >
https://bitcointalk.org/index.php?action=credit;promote


I reported one selfie to the mods and I wrote in the comment to mark it with good if we should report such posts or bad in case is no needed.
Guess what, I got a bad report. So selfies not should be reported. If it's a copy of pass or ID card/driving licence that should be fine to report.

[o_e_l_e_o]

the vast majority of people they're seemingly happy to have public Instagrams and accept any facebook friends request they get and so forth.

It's far worse than that. People are completely happy to give away all their personal data to companies like Facebook, Google and Apple, but it gets even worse in the crypto space. People are not only willing to give away all their details, but also to upload documents, passports, selfies, selfies holding said documents or passport, etc. in exchange for an airdrop or bounty campaign for some token that is quite literally worthless, or for some 2 bit exchange filled with fake volume just waiting to exit scam. Quite literally everything someone needs to steal their entire identity (financial, tax, credit, medical, criminal, social security, etc.), and people are willing to send it all to a complete stranger. It boggles the mind.

[TECSHARE]

Y'all need Privacy Jesus

[guybrushthreepwood]

the vast majority of people they're seemingly happy to have public Instagrams and accept any facebook friends request they get and so forth.

It's far worse than that. People are completely happy to give away all their personal data to companies like Facebook, Google and Apple, but it gets even worse in the crypto space. People are not only willing to give away all their details, but also to upload documents, passports, selfies, selfies holding said documents or passport, etc. in exchange for an airdrop or bounty campaign for some token that is quite literally worthless, or for some 2 bit exchange filled with fake volume just waiting to exit scam. Quite literally everything someone needs to steal their entire identity (financial, tax, credit, medical, criminal, social security, etc.), and people are willing to send it all to a complete stranger. It boggles the mind.

I've never been asked for a selfie -- it's usually just a passport or drivers license scan -- and wouldn't send a selfie in even if they did, but some sort of basic verification is going to be a must really and a necessary evil to use most legally-complying sites. Unless you're someone with satoshi-level anonymity and sell or trade your coins regularly you're probably going to have to use some sort of exchange or banking system that requires a lot of your personal details -- unless you meet face to face and sell coins for cash and so forth. I guess the irony is that it's the average every day joe that complies with KYC and everything else that isn't going to be the criminal or fraudster using their service in the first place and actual criminals will just find a way around it any way.

[GreatArkansas]

Some of these photos can be reverse image searched on google and lead to real social media profiles.

Beside this, there's also one alarming problem which is there are some people making fun of the real selfies of other member,  maybe some members will start quoting the real selfie in various thread related to the April Fool's activity of the forum. That kind of problem can be also considered as discrimination, coz someone is making fun on the selfie or judging them by the looks.

[manfredmann]

Well there is nothing wrong for that since the user has done nothing wrong unlike other users mostly found in marketplace that are doing scams and fraud. I will just hope that theymos will draw a sword on that section and regulate posting or launched KYC in that area. LOL!

BTW, does that user a victim of april fools? or was the April fools being a victim of that user? I can sense he has a good sense!

[Quickseller]

the vast majority of people they're seemingly happy to have public Instagrams and accept any facebook friends request they get and so forth.

It's far worse than that. People are completely happy to give away all their personal data to companies like Facebook, Google and Apple, but it gets even worse in the crypto space. People are not only willing to give away all their details, but also to upload documents, passports, selfies, selfies holding said documents or passport, etc. in exchange for an airdrop or bounty campaign for some token that is quite literally worthless, or for some 2 bit exchange filled with fake volume just waiting to exit scam. Quite literally everything someone needs to steal their entire identity (financial, tax, credit, medical, criminal, social security, etc.), and people are willing to send it all to a complete stranger. It boggles the mind.

Conpanies like Facebook, apple and google have reputations to maintain and if they give out your personal information in ways you have not agreed to they will suffer financially. The information provided to them, in theory also gives you a benefit as their services will be tailored to you.

The people running ICOs often have little to no reputation and will probably have little consequences if they give out information they shouldn’t. I would not be surprised if many of the people behind the ICOs who require KYC end up selling personal information of their customers. This is one reason why using a third party platform can be beneficial for everyone involved when a company wants to raise money.

[klaaas]

April fools day or not people that post there details and or real pictures that easily probably dont mind to trow it in the public.
Sure the ones who didnt realist it deleted it soon after posting.

[Daboy_Lyle]

If you spot a real image, maybe just send a PM to the user with a small warning to change / delete the link to the image.

Actually when reading the thread replies all the images are a meme or jokes. I posted an image of Da Vinci and some of the thread replies is an image of pets, animes and cartoons. If you are reading and you are following the discussion then you should take your risk because you need to take care of yourselves and need privacies.

[AdolfinWolf]

Some of these photos can be reverse image searched on google and lead to real social media profiles.

Beside this, there's also one alarming problem which is there are some people making fun of the real selfies of other member,  maybe some members will start quoting the real selfie in various thread related to the April Fool's activity of the forum. That kind of problem can be also considered as discrimination, coz someone is making fun on the selfie or judging them by the looks.

Welcome to the internet buddy

good job pulling the "discrimination" card because some indian posted a 240p picture of himself.. Lmao. Please look up the definition of said word.
People are responsible for their own actions, no one forced them to post that shit. Besides, they can still remove it if they want..

Stop being such a virtue signaller for a nonexistent problem.

[o_e_l_e_o]

Conpanies like Facebook, apple and google have reputations to maintain and if they give out your personal information in ways you have not agreed to they will suffer financially.

No they won't. Facebook gave millions of users' data to Cambridge Analytica. They were fined $500,000, which is chump change to Facebook. Google Plus revealed that 438 different third party apps had unauthorized access to your data. No punishment. Similarly, Apple have plenty of third party apps which sell your data. No punishment. And that's only if you think that these companies aren't selling your data themselves, which I find very difficult to believe.

[bitbollo]

if you are able to track back their image (facebook e.g): they have accepted to share their personal image.
you can make the same just watching out casual profile on facebook: Name+Surname+Photos (probably a lot of selfies).
I can't see any difference to post even here on forum

[stompix]

If you spot a real image, maybe just send a PM to the user with a small warning to change / delete the link to the image.

I would understand this if the photo would contain an id along with the selfie but a simple photo...

Probably most of them have deleted the photos after realizing it was a joke or some have been removed but I would have bet that at least 9/10 out of those who have shared their pic have also posted their fb/tw/instagram whatever link here with all their pics, location and probably a lot more details.

As theymos said, you simply can't help some people...

Oh, and adjusting the tinfoil hat:
Don't you think that there are already some bots scrapping the bounty section and collecting all those profiles and usernames? 

[TheBeardedBaby]

@stompix
Big part of them didn't knew that 1st of April is  international fools' day. They just don't follow our tradition. For me its the same I don't know when is the Chinese New year for example.

I agree that it might be not a big deal for them, but this is in contrary of what bitcoin stands for- anonymity. I think we have to show those people what they are risking, because they have no idea what could possibly go wrong.

[DireWolfM14]

How determine which photo is real? If matching with social media it doesn't really mean that that's their own photo.

That's the bigger problem in my opinion.  Some people are posting pictures of attractive women wearing nice shoes, which are probably lifted from pinterchat, or some such social media platform.  If I logged in and found someone had posted a photo of my daughter that was lifted from one those sites, just to post in an April Fool's thread I'd be pretty fucking pissed. 

Now, my daughters know better than posting their photos for the public to ogle, but that's largely because they have a paranoid cynic for a father. Some girls aren't as fortunate.  They aren't bounty hunter scum, and don't deserve to have their photos associated with such vermin.

And, maybe I should confess this as my 1 KYC crime; I have a soft spot for some of those third world bounty hunters.  Not all, but a few are just naive and have few opportunities to earn a living.  They deserve a little privacy too, but might be to ignorant to realize the whole thing was a joke.

[Carrelmae10]

..real selfies is the privacy of each person if he/she prefers to not disclose any of their selfie pictures,,but if it is a requirement and if there is a consent of the real person who's selfies appear,,then it would be fine,,and it is not a big deal..I don't see any problem about it..

[Quickseller]

Conpanies like Facebook, apple and google have reputations to maintain and if they give out your personal information in ways you have not agreed to they will suffer financially.

No they won't. Facebook gave millions of users' data to Cambridge Analytica. They were fined $500,000, which is chump change to Facebook. Google Plus revealed that 438 different third party apps had unauthorized access to your data. No punishment. Similarly, Apple have plenty of third party apps which sell your data. No punishment. And that's only if you think that these companies aren't selling your data themselves, which I find very difficult to believe.

I am not sure what government fines have to do with anything. After the Cambridge Analytica scandal, Facebook lost over $130 billion in market value, however they recovered after implementing changes to prevent this from happening again -- and the outrage was more about the fact it marginally helped the Trump campaign than the amount/type of data leaked IMO (it was mostly public information, but in mass quantity not easily available to the public). The Google plus data leak was the result of mistakes in regards to data security, and not malicious intent -- anyone who stores data is going to have the potential for leaking data, I am also not sure what data Google Plus has, but I would presume it would not be much more than what is shared with connections, but may not be public.

If these companies repeatedly misuse and/or mishandle customers' data, their customers will not give this data in the future, and advertisers may not want to advertise on their platforms.

Over the weekend, Zuckerberg wrote an editorial in the Washington Post arguing for more internet regulation so he can hide behind the regulations (and blame the government) the next time he has a similar screwup.   

[o_e_l_e_o]

If these companies repeatedly misuse and/or mishandle customers' data, their customers will not give this data in the future, and advertisers may not want to advertise on their platforms.

In an ideal world, yes. But in the real world, this isn't what happens at all. Facebook have repeatedly shown they couldn't care less about users' "private" data. Just in the last two months, Facebook have admitted to storing millions of passwords in plaintext, and to recording users' health data, including heart rate, blood pressure, sleeping schedules, even when they are ovulating, without their knowledge or consent. And yet, their user base continues to increase.

They don't care about your data, and apparently, their customers don't care about their own data either.

[Quickseller]

If these companies repeatedly misuse and/or mishandle customers' data, their customers will not give this data in the future, and advertisers may not want to advertise on their platforms.

In an ideal world, yes. But in the real world, [...examples...]

Okay. If they provide services/benefit that exceed these privacy intrusions, they should be free to continue using these platforms. The selling point of giving up private information is doing so allows the platforms to display ads relevant to the end user, and can otherwise provide useful information to the end user. I don't think Facebook should be lying about what they are collecting from their users, but I also can't say their customers *must* be mad when this happens. I don't think anyone should be forced to have certain levels of privacy if they don't want privacy, or if they believe the benefits of of giving up certain information outweigh the value of privacy. This is not to say that people should be disallowed from having privacy if that is what they want.

I think the two statements you appear to be making conflict with each-other:
*Facebook (as an example) should be punished for mishandling customer information
*Facebook's customers do not care (based on their subsequent actions) that Facebook mishandled their information

[sujonali1819]

How determine which photo is real? If matching with social media it doesn't really mean that that's their own photo. I believe most of user was aware about April fool especially whoever active in meta section. However I don't think we should have take it seriously for future investigation or something else. Everyone is mature here and fully aware that they are posting image on public place. I don't think it will be much harmful for them. However, it would be better if they delete their photo by themselves. Since you already made this post so everyone should understand regarding April fool of last day.

Yes I am agreed with you. Some people submitted photo like as real on the kyc thread by thymos. People knee that the thread was public so most of the people upload photo by search on  google which is not like real and some people uploaded photo by downloading google which is like real but the photo is not himself. If anybody really uploaded their own photo they should delete it. And I think if the people are active in this forum they already deleted after knowing about April fool day.