Hacker News new | ask | show | jobs
by pjc50 3293 days ago
Accountability and de-anonymisation (which with enough information turns into "doxxing") are not the same thing.

For twitter, people don't need to know who the persistent abusers are on their government ID, only that there are rules and they will be effectively banned if the rules are broken. De-anonymisation enables random mobs to apply "accountability" through death threats offline. For some people this is a serious risk.

(Or in CS101: authentication and authorisation are not the same thing)

1 comments

Is authorization generally possible without authentication?
I suppose it could be in a capability-based security scheme. In such a scheme, authorization is based upon tokens that are passed around and could be owned by any user or process, making authorization separate from identification.
Yes.