I don't think the problem is these kind of suggestions.
Are people suddenly moving more between corp A and corp B? Must be something going on, let's buy the stock.
Suddenly multiple Ubers are dropping off people at a residential building during the night? They probably know each other. Let's flag that as a potential risk.
Just to give you another little titbit if you're interested. I work in go to market, and part of that is awareness, and part of that is advertising. Where people use the platform has a huge impact on the prices you pay to advertise on the platform, for example reddit is very expensive because they have a very high mobile traffic population, and the ads can't be blocked, advertising on X is hard because the people I want to reach all pay for premium, so the traffic you get from it now is basically useless, linkedin skews towards desktop, but their targeting is amazing, but because they skew towards desktop people run ad blocks, some platforms let you pick the devices you serve to, some don't, all of it impacts the price you pay to serve the ads.
Well, it doesn't really matter that it's expensive or hard: that's what we have VCs for. More money you can raise, better targeting you can pay up for. You'd be amazed at how much oxygen you can suck out of a market for a million bucks.
You're absolutely right to be concerned, this is something I think about constantly.
The reality is:
bad actors don't need to reverse-engineer anything. AI engines already prioritize structured, citable content. Anyone can spin up a website with schema.org markup and fake citations.
The barrier is low.
What makes this hard to abuse at scale:
1. Domain verification – For businesses, we require proof of domain ownership. You can't claim to be Apple unless you control apple.com or an official subdomain or work at apple respectively having @apple.com business mail.
2. Citation requirements – Claims need links to primary sources. AI engines cross-reference. If your "citations" point to non-existent papers or contradict other sources, you lose authority fast.
3. Reputation signals – We're building verification badges (ORCID for researchers, business registries, etc.). Over time, verified profiles will rank higher.
But you've identified the fundamental tension: any system that makes it easier for legitimate businesses to be cited also makes it easier for bad actors. This is the same problem Google faced in the '90s, Wikipedia deals with daily, and AI engines are grappling with now.
The goal isn't to be manipulation-proof, nothing is. It's to make CoThou profiles more trustworthy than the alternatives (random blogs, SEO spam, outdated info).
What would you add?
This is an evolving problem and I'd love HN's input.
—Marty
How so? Just because many people use mega-corp for email doesn't mean you need to. There are tons of alternative, small company providers or you can host your own. None of these require big-corp's support.
Because according to popular judgement, independent email hosting in the modern day is a very difficult ordeal.
Is that true? Is that false? How would one tell? One's own experience will be trivially handwaved away as an anecdote, people's experiences will be handwaved away as hearsay, and a claim of general consensus will be handwaved away by other claims that the person pointing it out is just living in a bubble. Principled thinking? Could be false, could be true, really - both would make sense. Doesn't sound very productive to discuss to me.
If nothing else, surely you can agree that despite what might be, what is is that email is incredibly centralized, right?
It is centralized (I wouldn't say "incredibly", but sufficiently) but because it is an open standard it doesn't matter. You can switch providers very easily with many options.
Are people suddenly moving more between corp A and corp B? Must be something going on, let's buy the stock.
Suddenly multiple Ubers are dropping off people at a residential building during the night? They probably know each other. Let's flag that as a potential risk.