Proof of Humanity, anti Sybil solutions?

[linenoise]

Anyone have good advice on proof of humanity, anti sybil solution that doesn't require costs to the end user, and is inexpensive for the dev?

I'm developing a web3 service and want unique humans and not lots of bots. The service has airdrop like qualities of getting things for free which means it's a prime target for attackers. Heck, I've done crypto faucets and even captcha wasn't enough for stop bots from going after no value crypto.
Hence I'm seeking good, cheap or free, methods for keeping bots out of a web3 service.

Gitcoin passport is good in theory, in practice having users pay $ as part of verifying ID is a blocker.

I'm leaning towards faceio for the digital fingerprinting of a face, but I'd prefer a full crypto solution

[noorman0]

-snip-
Gitcoin passport is good in theory, in practice having users pay $ as part of verifying ID is a blocker.

A blocker for whom?
I don't know how the platform works. If your conclusion says it's good, then apply it. I think it's just the way it actually works.
The hard truth is that the Web3 community isn't as big as you think without Sybil accounts. Cheating airdrop is a practice that has been going on since the Ethereum ecosystem was developed, creating false hype, and it's what keeps many new projects from lasting long.

[linenoise]

-snip-
Gitcoin passport is good in theory, in practice having users pay $ as part of verifying ID is a blocker.

A blocker for whom?

With gitcoin there are a number of potential ways to add to your score to qualify as a person, some methods have fees of $5. As most people would need multiple fees this would stop many crypto and non crypto people from trying a random web3 service.

I agree with you that web3 is still a growing userbase.

[ABCbits]

The service has airdrop like qualities of getting things for free which means it's a prime target for attackers. Heck, I've done crypto faucets and even captcha wasn't enough for stop bots from going after no value crypto.

Out of curiosity, does that happen when you set the captcha to maximum security/difficulty? In past, i visited a website with high/maximum difficulty hCAPTCHA where it took few minutes to solve it.

[noorman0]

With gitcoin there are a number of potential ways to add to your score to qualify as a person, some methods have fees of $5. As most people would need multiple fees this would stop many crypto and non crypto people from trying a random web3 service.

It sounds like it's even effective in suppressing the number of Sybil accounts, which is great if you're hoping for as much organic community engagement as possible; or if you're actually willing to tolerate a certain amount of cheating, I don't know. In any case, you should be providing more convincing reports on your project's progress to your community.

-snip-
I agree with you that web3 is still a growing userbase.

I think you're misunderstanding. My point is that without Sybil accounts, community engagement on Web3 projects wouldn't be as spectacular as the statistics suggest.

[d5000]

I fear there is no perfect "full crypto" system for that, so your easiest bet may be to just go with faceio or similar methods. But I just read this thread having previously discussed a related problem in this thread about a Universal Basic Income on blockchain (basically a continuous airdrop each month or so), and maybe some of the following "proof of humanity" methods which were mentioned there may be interesting.

- Bitpeople - that would be a "full crypto solution" where users verify each other via videochat without a central party/verifier, but it seems to be in a very early state of development, so the dev costs would be very high. And the users would have to verify each other each month, so while there is no "cost" for them, they need to take 15 min of time. In addition, I have some doubts about the implications of AI video technology.
- Resilience, a protocol based on similar ideas than the original Ripple, where users to get airdrops need trust from other users. However, it seems to be only sybil proof at very high transaction rates and is also only a prototype.
- explore existing "UBI coin" systems like Circles UBI, which also is based on the Ripple method; according to one user in the above thread it is inferior to Resilience but it actually already exists.
- perhaps explore early Ripple too.

One idea I also find interesting, but is very different, is let users verify each other sending a very small amount to a bank account on their name, and let them hash the bank data (Bisq does this). Do that two times with 2-week or 4-week distance to prevent someone using stolen accounts. Perhaps you can even use Bisq accounts as PoH, i.e. you have to trade twice on Bisq for full PoH? However it would not be really PoH but "proof of unique bank account".

[dkbit98]

Anyone have good advice on proof of humanity, anti sybil solution that doesn't require costs to the end user, and is inexpensive for the dev?

I know about idena.io that used for this but you have to wait for validation day and solve flips.
You don't have to pay anything for this, but you do have to invest some time every few weeks to keep your account alive.

I'm leaning towards faceio for the digital fingerprinting of a face, but I'd prefer a full crypto solution

I would never do this, especially not for gitcoin.

[Ucy]

What we need is a completely decentralized solution that captures users identities without ever revealing them to a third-party or anyone except the owners. But the owners could lose this hidden ID right if they commit serious crime.

With this method we could capture and verify users IDs either physically, online or both, and randomly re-verify the users three or more times in future dates after the first verification. This is to ensure that the users actually own the data and not using other people who probably sold or allow them to use their IDs.

The physical capture and verification require the presence of users physically, at safe locations, where they meet assigned verifiers who capture and verifiy permanent human identifiers associated with their users, using the verifiers Special devices or users phones to ensure that the captured data are not retained by another person. Example of possible human identifiers that could be captured, verified and re-verified: real eye colors, birth marks, hair colors, faces, finger prints etc. Once this are captured, they are encrypted at the users end, on the decentralized ID system that will be used for this project, and the encryption/decryption keys copied by the owners. The online verifying bots or AI should be able to safely access this data for the purpose of reverifications, comparing with others users IDs to detect dublicates/copies, and maybe for authentication purposes.

The Online method involves online captures, verifications and encryptions, all at the users ends, on the decentralized ID system. Again, the bots or AI could access this data for mostly verification and searching for.copies .


Once this is finished, users can import their ID API keys on applications or projects that require identity.checks . The users will be marked as verified and allowed to access whatever they need  that for