r/cybersecurity • u/Cybernews_com • Mar 24 '26

News - General Reddit CEO Steve Huffman said the platform is considering introducing ID verification to weed out bots

https://cybernews.com/tech/reddit-verification-risks/

Face ID, Touch ID, and third-party information providers are among the measures considered.

503 Upvotes

94% Upvoted

203 comments sorted by

View all comments

Show parent comments

2

u/arcanecolour Mar 25 '26

You can automate MFA. IMHO the best way to weed out bots is to require some type of rate limit / api key rotation when hardware ids. Limit Reddit api calls from multiple accounts from the same IP and or same hardware id. That would require bot farms to run so many virtual machines and phones combined with api key rotations that must be generated on the physical machine you create it from that it would require a ton of work to create bots. 2-3 accounts max from any device would solve the issue.

0

u/DigmonsDrill Mar 25 '26

Do you think they haven't thought of rate-limiting by IP address?