Should RallyPoint Check for Verification at Signup on RallyPoint?

2020-11-22T10:30:18-05:00

With the recent spam attack on RallyPoint should verification for a new account profile sign-up be verified in advance before a member is allowed to be a part of RallyPoint?

Sending an email notification to certain Admins, RallyPoint Staff, or thrid party service to verify an account in advance, whether its a civilian supporter or recruiter, military family member, civilian, service member, retiree, potential recruit, or veteran profiles could potential stop the fake accounts and spammers.

Yes, this could be time consuming and it may not be the actual fix, but it could save RallyPoint and it's Members from "fake" accounts being set up and spammers sending out ridiculous, rude, or bad content.

There may some variations of the process that is being discussed, but this is something RallyPoint should think about. We have some IT experts and Web designer experts out there that may have some awesome suggestions - what are your thoughts or ideas?

Response by LTC David Brown made Nov 22 at 2020 10:33 AM

2020-11-22T10:33:58-05:00

My son did an internship on rally point. He got me on. I don’t know if he verified me. Oh well.

Response by SFC Joe S. Davis Jr., MSM, DSL made Nov 22 at 2020 10:34 AM

2020-11-22T10:34:29-05:00

COL Mikel J. Burroughs spot on, I am a constant target and it would be helpful to have transparency and total verification before membership.

Lt Col John (Jack) Christensen SCPO Morris Ramsey PVT Mark Zehner Sgt Private RallyPoint Member SSG Michael Noll SSG Robert Mark Odom CPL Douglas Chrysler Wayne Soares PO1 William "Chip" Nagel ] SGT Private RallyPoint Member TSgt Joe C. SPC Nancy Greene SMSgt David A Asbury Maj Marty Hogan PO1 H Gene Lawrence PO3 Phyllis Maynard SGT David A. 'Cowboy' Groth Lt Col Charlie Brown SPC Margaret Higgins

Response by PO2 Private RallyPoint Member made Nov 22 at 2020 10:36 AM

2020-11-22T10:36:32-05:00

There definitely needs to be verification from everyone that uses Rally Point.

Response by SGT David A. 'Cowboy' Groth made Nov 22 at 2020 10:38 AM

2020-11-22T10:38:13-05:00

Yes COL Mikel J. Burroughs I believe that there should be a verification of members, I did it when I joined.

Response by Maj Marty Hogan made Nov 22 at 2020 10:44 AM

2020-11-22T10:44:51-05:00

Yes- I think every account should be verified. I get some don't want all their stuff out there, but to protect the network and verified users, to be able to participate fully- all accounts should be verified.

LTC Stephen F. Sgt Albert Castro COL Mikel J. Burroughs SMSgt Lawrence McCarter Maj William W. 'Bill' Price SPC Margaret Higgins Maj Bill Smith, Ph.D. SGT Steve McFarland LTC Private RallyPoint Member MSgt Paul Connors Lt Col Charlie Brown SSG Michael Noll PO1 H Gene Lawrence TSgt Joe C. Lt Col John (Jack) Christensen Sgt Private RallyPoint Member SFC Joe S. Davis Jr., MSM, DSL SSG Donald H "Don" Bates Cpl Private RallyPoint Member PVT Mark Zehner

Response by LTC Jason Mackay made Nov 22 at 2020 10:55 AM

2020-11-22T10:55:08-05:00

Yes. No equivocation or mitigation

Response by Sgt Private RallyPoint Member made Nov 22 at 2020 11:00 AM

2020-11-22T11:00:26-05:00

COL Mikel J. Burroughs We need to find a way to keep trolls and scammers off of our site while allowing legitimate civilians, veterans and service members to become RallyPoint members. It is too easy for anyone to create an account under a fake name and claim to be a General or whatever they want to be. It would be great to be able to block the IP Address of some of these trolls that repeatedly sign back up as a member after their account has been closed.

Response by Lt Col John (Jack) Christensen made Nov 22 at 2020 11:08 AM

2020-11-22T11:08:08-05:00

Yes, with the increase of "spam type" information everywhere on the internet these days I think this would be a good move. Many of the sites I've used for years are starting to implement secondary verification procedures so if they see the need to add a level of security it seems that it would be wise for RP to at least add an initial verification procedure.

Response by SGT Steve McFarland made Nov 22 at 2020 11:13 AM

2020-11-22T11:13:46-05:00

For sure! I have gotten contact requests from people whose information didn't pass the smell test, wreaked of attempted stolen-valor. Our most recent spam-profile assault on our values is just the latest of many such attempts.

Response by MSG Private RallyPoint Member made Nov 22 at 2020 11:14 AM

2020-11-22T11:14:17-05:00

HELL YES!!!!

Response by GySgt Gary Cordeiro made Nov 22 at 2020 11:31 AM

2020-11-22T11:31:05-05:00

IDme, seems like a good place to start

Response by PVT Mark Zehner made Nov 22 at 2020 11:33 AM

2020-11-22T11:33:19-05:00

I normally would say no but due to recent developments I'd have to agree!

Response by SP5 Gary Perkins made Nov 22 at 2020 11:33 AM

2020-11-22T11:33:26-05:00

Yes! I got hit twice earlier and 3rd time today from AB SUSAN! AF 1st SGT! Three different profiles, none verified and can text to anyone on RP! All applications must be vetted! I’m verified and thought everyone was verified! Everyone including legit veterans should be verified! Give 10 days to correct or revoked all and if serious about RP, then they can reapply!

Response by LT Brad McInnis made Nov 22 at 2020 11:41 AM

2020-11-22T11:41:54-05:00

What about 2 factor authentication (verify with a phone #)? Then only provide basic access until they fill out full profile. Once full profile is filled out, then grant access to message, post, etc.

Response by MCPO Roger Collins made Nov 22 at 2020 11:50 AM

2020-11-22T11:50:42-05:00

No verify, no posts or ability to view profiles. 9 out of 10 times they are trolls.

Response by SSG Samuel Kermon made Nov 22 at 2020 11:54 AM

2020-11-22T11:54:04-05:00

Verify.

Response by SP5 Private RallyPoint Member made Nov 22 at 2020 11:54 AM

2020-11-22T11:54:12-05:00

COL Mikel J. Burroughs Yes, and if possible, disable the spammers to keep them from re-entering RP.

Response by SSG Jimmy Cernich made Nov 22 at 2020 11:58 AM

2020-11-22T11:58:29-05:00

I'm for it

Response by SSG Jimmy Cernich made Nov 22 at 2020 12:00 PM

2020-11-22T12:00:09-05:00

ID me works pretty good

Response by Sgt Deborah Cornatzer made Nov 22 at 2020 12:02 PM

2020-11-22T12:02:06-05:00

Absolutely, COL Mikel J. Burroughs; please verify. Not only do these intruders create mayhem, they also invade privacy. No doubt, some will still get through, and it will be time consuming, but benefits outweigh costs here. Posing as a Veteran IS stolen valor.

Response by SGT Matthew S. made Nov 22 at 2020 12:02 PM

2020-11-22T12:02:31-05:00

Yes. I'm not knowledgeable enough to suggest how to do it without going overboard, but there definitely needs to be something.

Response by CPT Private RallyPoint Member made Nov 22 at 2020 12:06 PM

2020-11-22T12:06:31-05:00

Definitely. If civilians want to join, they should provide a scan of state ID. Too many trolls and spammers lately.

Response by SPC Nancy Greene made Nov 22 at 2020 12:20 PM

2020-11-22T12:20:40-05:00

I definitely agree COL Mikel J. Burroughs! There needs to be valid verification of everyone wanting to participate on RP. I know this will not stop all scammers; however, it might make some of us feel safer after the recent fiasco.

Response by PO1 Brian Austin made Nov 22 at 2020 12:27 PM

2020-11-22T12:27:19-05:00

Sounds good to me! Tired of SPAM from "lonely service women overseas".

Response by Maj Robert Thornton made Nov 22 at 2020 12:44 PM

2020-11-22T12:44:09-05:00

Yes, verification before account activation and posting.

Response by SGT Mark Anderson made Nov 22 at 2020 1:25 PM

2020-11-22T13:25:59-05:00

Yes...emphatically!

Response by SSG Dale London made Nov 22 at 2020 1:46 PM

2020-11-22T13:46:40-05:00

Absolutely.

Response by CPL James S. made Nov 22 at 2020 1:49 PM

2020-11-22T13:49:30-05:00

RP should definitely verify their members.
Something to consider: link or partner with the VA, DAV, VFW, Legion or similar agencies

Response by Sgt Jim Belanus made Nov 22 at 2020 2:13 PM

2020-11-22T14:13:01-05:00

I am not going to put my DD form 214 out on the web. To much information on it to be that careless.

Response by SSG Private RallyPoint Member made Nov 22 at 2020 2:35 PM

2020-11-22T14:35:41-05:00

Absolutely, however, this site is not just for Military members. But it should only show them as a "civilian" until they have been properly vetted. Then they can have ranks and branch affiliations. I also think there should be a verification for non-military members as well that would require them to follow a link through a verified email address. This will help cut out SPAM and robo-scammers as well.
Great question COL Mikel J. Burroughs

Response by Sgt Albert Castro made Nov 22 at 2020 2:37 PM

2020-11-22T14:37:22-05:00

"Trust but verify."

Response by TSgt George Rodriguez made Nov 22 at 2020 3:09 PM

2020-11-22T15:09:33-05:00

Agreed DD214's or VA cards or Military retirees card, although its against the law to copy your retirees card. The state of Oklahoma drivers license identifies their vets or retirees with a flag added to their license with the word Veteran under it. At the time of purchasing your drivers license you must show your DD214 or Retirees card to have it placed on your drivers license.

Response by PO2 Cyrus Barberia made Nov 22 at 2020 3:28 PM

2020-11-22T15:28:09-05:00

Many good comments below but I agree I did it

Response by A1C Debby McCuistion made Nov 22 at 2020 4:07 PM

2020-11-22T16:07:47-05:00

Absolutely. I can’t find how to report something to the admin. When I click on support it says it’s taking me to unidentified link and won’t open. I have two inappropriate messages in my box already by people that are not identified no picture no name nothing. I didn’t come on the site for those reasons.

Response by SPC Erich Guenther made Nov 22 at 2020 6:09 PM

2020-11-22T18:09:42-05:00

Your much safer with two forms of verification than one. An EMail account can easily be spoofed with the LINUX or UNIX...SendMail function. So I would probably recommend Email plus Cell or home phone number. Also then you could setup automated password reset. Send an Email from same address with cellphone or SMS text response from the cell phone or automated phone call back it is the individual that signed up. Not hard to do with virtual phone technology available on the website side of the fence.

Response by Cpl Vic Burk made Nov 22 at 2020 7:12 PM

2020-11-22T19:12:42-05:00

I think verification will help with some of the spam problems and will detour some of them who deem it too much of a pain in the a$$ to deal with. It is easier to move onto an easier target to spread the crap. Some will find a way to get a fake ID and falsify just to prove they can do it. While I am in favor of verification I would not have sent my DD214 to Rally Point on any other site for that matter. Way too much confidential information is on there (in my opinion).

When I got hit with the first message I was like WTF is this. I appreciate Colonel Mikel J. Burroughs responding to my message promptly when I first inquired about how I needed to contact concerning this matter. I didn't know it was that big of a problem at the time.

Response by LTC Private RallyPoint Member made Nov 22 at 2020 7:12 PM

2020-11-22T19:12:57-05:00

It has been a while aince I verified, but an integration through ID.me or an admin approval is probably warranted.

Response by SFC Casey O'Mally made Nov 22 at 2020 9:27 PM

2020-11-22T21:27:52-05:00

The problem, in my opinion, is not verification. We have a couple of rather prolific trolls who are verified veterans. The problem is acceptable activity. We have community standards. We need to enforce them.

In my opinion, we SHOULD have a verification process, but it should be optional. And then we have a tiered response system based on your level of verification.

Tier1: unverified. Violations of community standards are met with immediate deletion of account and blocked e-mail so that no further account can be created. Admins of any level can delete.

Tier 2: verified e-mail. Violation of community standards results in deletion of violating posts, warning to user. Second violation within a set period of time (30 days?) Results in deletion of account. E-mail is not blocked, and user can petition for reinstatement or reconsideration. Level 3 admin required for actions against Tier 2.

Tier 3: verified service. Violation of community standards results in deletion of offending material. User can petition for posts to be reinstated based on non-violation. 1st warning issued. 3 strikes rule (I.e. two warnings and then action against account). On 3rd strike, account suspended for 30 days. Upon return 2 strikes, then suspended for 90 days. Upon return, 2 strikes then account deleted. Level 4 admin review required for all actions against Tier 3.

Or something similar.

Response by SFC Private RallyPoint Member made Nov 22 at 2020 10:32 PM

2020-11-22T22:32:38-05:00

I think recent events have shown us that RP is pretty vulnerable to spammers

Response by LTC John Griscom made Nov 22 at 2020 10:55 PM

2020-11-22T22:55:12-05:00

I have had only one occasion that I think was a troll. But verification would be good.

Response by SSG Private RallyPoint Member made Nov 23 at 2020 1:27 AM

2020-11-23T01:27:22-05:00

I'm for the increased verification process. As you stated, it may be time consuming, but that small inconvenience is worth it if it deters or prevents spammers from RallyPoint

Response by LTC Stephen F. made Nov 23 at 2020 4:25 AM

2020-11-23T04:25:09-05:00

Yes my friend COL Mikel J. Burroughs I think it makes sense for each and every RallyPoint account should be verified.
I concur with my friends Maj Marty Hogan, Lt Col John (Jack) Christensen and CSM Charles Hayden's responses.

Response by SFC Private RallyPoint Member made Nov 23 at 2020 7:37 AM

2020-11-23T07:37:59-05:00

Yes

Response by MSgt Steven Holt, NRP, CCEMT-P made Nov 23 at 2020 7:54 AM

2020-11-23T07:54:34-05:00

COL Mikel J. Burroughs - It's just my $0.02, but I believe we SHOULD be verifying everyone who is here. Assuming it doesn't violate some obscure law/policy I'm not aware of, I would have no issues with uploading a copy of my DD2 or DD-214 for admin approval.

Response by SFC Richard Williamson made Nov 23 at 2020 8:43 AM

2020-11-23T08:43:59-05:00

This is a question of time and security: Is it better to spend a little more time signing in, or a few more minutes deleting and reporting elicit connection requests? I'm all for the verification process.

Response by SGT Private RallyPoint Member made Nov 23 at 2020 10:24 AM

2020-11-23T10:24:11-05:00

COL Mikel J. Burroughs Yes, until verification; No Posting, commenting, Voting, Messaging, or trailblazing. A non-contributory observer only. Give them a pop up with a nicer version of this meme if they attempt to.

Response by A1C Riley Sanders made Nov 23 at 2020 11:05 AM

2020-11-23T11:05:40-05:00

COL Mikel Burroughs:
Yes, this could be time consuming and it may not be the actual fix, but it could save RallyPoint and it's Members from "fake" accounts being set up and spanners sending out ridiculous , rude, or bad content.
I thought of this recently when I experienced the rude and bad content, also from a civilian member ?
absolutely ! "VERIFICATION " !

Response by LtCol Robert Quinter made Nov 23 at 2020 12:48 PM

2020-11-23T12:48:56-05:00

If financially possible without endangering the site; Yes. A low cost alternative might be having an administrator or other monitored account where "mere" members could message reports of questionable or offensive entries or members.

Response by SFC Chuck Martinez made Nov 23 at 2020 2:30 PM

2020-11-23T14:30:18-05:00

I have to say definitely yes and with a photo to go with for facial recognition. I have gotten one disturbing message here on RP and it was not good. I doubt that it was a military member but an infiltrator. As a former Law Enforcement Officer, the best way to verify new members is with a legitimate military ID card and make sure it does not look like it was tampered with and accompanied with a driver's license.

Response by SFC Chuck Martinez made Nov 23 at 2020 3:26 PM

2020-11-23T15:26:51-05:00

Yes, they must submit a military ID and and driver's license to prove their identity as well as a picture on their account for facial recognition!

Response by SSG Private RallyPoint Member made Nov 23 at 2020 5:08 PM

2020-11-23T17:08:56-05:00

Don't. Change anything. Already go 2 offers for threesomes, have you seen me?
Seriously have been getting some strange messages, would be nice to be left alone.
I don't mind verifying who I am

Response by CSM Charles Hayden made Nov 23 at 2020 11:57 PM

2020-11-23T23:57:18-05:00

COL Mikel J. Burroughs Rather than seeing medals and awards for previous accomplishments, I would choose to see: then and now profile photos. My profile photo is a great example! CW5 Jack Cardwell

Response by SFC Casey O'Mally made Nov 24 at 2020 12:48 AM

2020-11-24T00:48:23-05:00

So one major problem I see...

I have seen a few different instances where a young service member (E1 - E3) has come on under a pseudonym seeking the wisdom of the crowd. They post anonymously because they are asking questions which could be embarassing for them or their unit, or they may legal or ethical questions which may be best to not be traced back to them or their unit.

While RP is certainly no replacement for JAG or the ethics office, I believe that thos is a vital and important use of the site. Requiring verification before posting would eliminate this capability. I can see maybe restricting to one post and responses only on that thread, and very limited other functionality. But I don't think completely eliminating the capability to post a single question relatively anonymously is how we best serve the community. Just a thought for the group.

Response by 1SG Joseph Dartey made Nov 27 at 2020 2:01 PM

2020-11-27T14:01:01-05:00

I am a little late in giving my response, but like everyone else, Yes I agree with the verification at sign up.

Response by PO1 Victor Cotto made Jan 1 at 2021 2:35 PM

2021-01-01T14:35:32-05:00

I'm in total agreement with having Members prove who they are to help avoid these BOTs and haters from infiltrating the group. A form of two factor authentication would be in order, such as the Banks have by having the user enter a random 8 to 10 digit code sent to a registered Cell phone or a voice message prompting the user to select a digit on their phone, might be the easiest approach. Many options out there this is just one.

Response by Cpl Robert Russell Payne made Jan 8 at 2021 4:54 AM

2021-01-08T04:54:34-05:00

I don't believe that it would matter much. Someone who isn't real who wants to get on here bad enough will figure out a way to pull it off

Response by CSM Bob Stanek made Jan 25 at 2021 10:40 AM

2021-01-25T10:40:46-05:00

COL Mikel J. Burroughs

I think it is a great idea, but I'm also concerned by the trolls who are still active members. We know that there are many prior service members who actively play into trolling people for engagement in BS. Their only goal is to stir the pot and cause angst among our own members.

Plus blocking the said trolls seems to only bring about more unwanted email. Almost like the ADMIN is not monitoring or restricting blocks. Not sure what is causing the problem, but it does exist. We need to clean it up.

Respectfully
Bob S

Response by SSG Robert Perrotto made Jan 25 at 2021 11:07 AM

2021-01-25T11:07:31-05:00

I would say yes to this. It is not hard to get verified, a simple 214, ERB, or Military ID card should do the trick, the issue is, can this website provide secure means of information transfer?

Response by AN Ron Wright made Feb 14 at 2021 7:44 PM

2021-02-14T19:44:53-05:00

to not verify is a travesty
show ID or dont vote

Response by MSG Clyde Mills made Mar 7 at 2021 2:17 PM

2021-03-07T14:17:41-05:00

I've sent in a copy of my ID card as requested and still doo not have the R for being Retired beside my name, how long does this process take to get verified.

Response by SGT Ben Keen made Mar 7 at 2021 2:45 PM

2021-03-07T14:45:33-05:00

How long ago did you submit your verification document? We recently changed systems and it can take a few days for it to be processed.

Response by SPC Patricia K. (Williams) Elliott made Mar 7 at 2021 5:11 PM

2021-03-07T17:11:03-05:00

I'm pretty sure I had to go through the process of verification when I sign up! I thought it was policy. See no reason to change it.

Response by SGT Forrest Stewart made Apr 18 at 2021 3:38 PM

2021-04-18T15:38:14-04:00

I was required to be verified when I signed up for Rally Point. It wasn't a big problem, and I possess the proof. If you were in the military, you should also possess the proof as well.