if you see "me" messaging about joining a Telegram or buying crypto, please double check the Mastodon server they're on!

I'm only on hachyderm.io, and there's now someone trying to impersonate me on a different instance, asking people to join their telegram.

remember! you can double-check that my profile belongs to me by looking at the verified links in the bio section.

if you're not familiar with how those work, any time you see a green check on a link in someone's bio you can trust that they have control over that website or page.

@molly0xfff I feel like it might be too easy to impersonate people since it's a bit of a hassle to click on the bio, then go back to the post again after checking. Not only a hassle, but also you need to know about this feature.

My first thought is that maybe accounts with a verified link should get that link, with the green checkmark, added right below their name/username, in a smaller type, on each post?

@forteller it would have to somehow display which link was verified, though. i could change my username/display name to "elon musk" and keep my currently verified sites to get a tickmark, so people would need to have enough info to be able to check that the link makes sense.

truly motivated scammers could also register some other domain like mollywhite.lol and verify that, so there are always vectors to get around it, but at least they have to work for it.

@molly0xfff Yes, I meant to display the actual link, not just the checkmark. That other part, about registering a similar URL, was something I started thinking about while writing that previous post too, but as you say, at least it's a bigger barrier. And not possible to guard against, I think.