Honeypies and honeypots
How well does this actually work? I had to find out.
I created a fake account on TangoWire using my usual bogus Facebook personality, who underwent virtual gender reassignment surgery about six months ago. When I checked back a few hours later, I discovered that my profile could not be verified. Turns out that “Roberta” only got a BeehiveID score of 350 – below the minimum threshold of 400 – thanks mostly to the fact that she didn’t have enough activity on her Facebook account to rate as real.
(I also submitted a photo of model Raquel Zimmerman holding up a piece of paper with my account number Photoshopped onto it. That didn’t work either.)
Then I created a real profile using my actual information and tried to verify it using BeehiveID. But apparently I went too far; TangoWire spotted me trying to create multiple accounts of different genders using the same IP address and nixed them both.
Theoretically, if you’ve used a stock photo of Brad Pitt or Megan Fox as your profile pic on TangoWire, BeehiveID should be able to flag that. But it’s not a lie detector. For example, if you claim to be a buff 27-year-old surfer when you’re in fact a porcine 47-year-old couch potato, Beehive won’t be able to do much about that. Some fakes are harder to stop than others.
During its first six weeks in action BeehiveID has accurately spotted phonies on TangoWire more than 95 percent of the time, says Haskett. Dating sites are a natural place to start with this kind of software-based identity analysis, she adds, due to the inherent physical safety issues they present. You don’t want to go on a blind date with someone who’s pretending to be someone or something they're not. That’s like the plot of a bad movie on Showtime.
At the moment, BeehiveID is only using Facebook data, because that’s the most relevant source for a site like TangoWire. But Haskett says BeehiveID can perform similar analysis with Twitter, LinkedIn, and other accounts, and plans to expand well beyond dating sites.
The next logical step is to enter the sharing economy, says Haskett. Sites like Uber or Airbnb where you interact with total strangers are ripe for this kind of identity assurance. And then, of course, ecommerce sites where you want to make sure that the person on the other end of a transaction is in fact a real human, and not a sockpuppet or a bot out to defraud you.
“In the past, all of this was done via personal connections,” she says. “You are taking someone else’s word for the fact that I am who I say I am. The Internet totally messes that up. The way we usually do identity online is via an email address. Well, I can have a hundred email addresses and be a different person with each one. We figured there had to be a better way.”
Looks like there is. Internet fakes, your days may be numbered.
Got a question about social media or privacy? TY4NS blogger Dan Tynan may have the answer (and if not, he'll make something up). Follow him on Twitter: @tynanwrites. For the latest IT news, analysis and how-to's, follow ITworld on Twitter and Facebook.
Now read this: