Identity Theft Follow Up
Scoble ( or is it not really him? (: ) commented on my previous post with:
“I've never had this problem. Why? Because I have a blog. If anyone ever posted claiming to be me, it'd be easy for me to point that out on my blog. Also, one would just have to look at the IP addresses and see that they are coming from different places. Most of us don't take the time to switch to different places just to post a comment.“
Scoble, If somebody wanted to make a concerted effort to impersonate you on comment systems, You would not have the time to "not me!" all of them, and probably not even the time be able to find them all.
As for the "check the IP" idea...
- A) I don't have your IP memorized, nor an easy to find out the "right" one.
- B) My IP will certainly change if I'm blogging and commenting outside, downtown, over various open wireless networks, on my TabletPC. Isn't that the future? :)
My goal is for the reader of the comment ( or “the bank making the transaction” in the more popular case of ID Theft ) to have the ability to verify the provider of credentials at any time. A name, web address, or Client IP Address HTTP header, are not sufficient for this task.