[sjroot]

As someone who also takes all the right account security precautions, I too have been fooled by a scam Facebook ad. It seems like this is an increasingly-common attack vector that FB needs to address.

Specifically, I think it would help for them to verify ads, as they do people / pages.

[Avamander]

Yet another scenario where we're collectively being bitten in the ass because most of the world is still lacking a proper digital identity system.

If you're thinking that sending pictures of identity documents or bills is going to fix it no, it's clown-tier identity verification and will just postpone the issue a tiny bit with massive human resource cost and false negatives.

[donmcronald]

> it's clown-tier identity verification

I remember learning this when I got my first code signing certificate. I had to jump through a TON of hoops including sending notarized copies of my ID to Comodo. After all that, they asked ME to send them a list of notaries for my jurisdiction. They also wanted a direct line to call the notary I used which is basically impossible to provide.

The verification is outsourced to the cheapest English speaking 3rd world country they can find and there's ZERO localized knowledge. I don't think you could build a system that's worse if you tried. The whole think is just a process of checking boxes which is very similar to most of the 2FA systems in existence.

[prox]

One attack I personally had was when I had an android tablet and a client who has business in China asked me to put a promotional video on some Chinese version of youtube. So I thought I found the app in Play store, but once opened it asked me something in chinese, so just thinking this is obligatory privacy agreement or something, I click okay. Instead it started downloading an update, and rebooted. After my tablet was malware ridden and unable to be recovered, because older version of Android.

I learned that a lot of apps behave differently if they find a different language keyboard. I don’t know if this attack is still possible in Android, it’s been some years now.

[spzb]

But then they’d lose that sweet revenue

[Nextgrid]

Is there any evidence that the people/pages verification is safe? I've seen plenty of fake accounts and the existence of misinformation or outright criminal (card fraud, etc) pages suggests the opposite.