Live data from Hacker News

So, you’ve hit an age gate. What now?

eff.org

261–270 of 306 posts

Re: So, you’ve hit an age gate. What now?

#261
post #92
post #68

Earlier quoted context omitted.

Call your ISP and ban any NSFW/NSFL access by DNS, both in your children's phones and your home connection. Problem solved.

This does not work, browsers like Firefox don't even always use the system DNS by default.

So block IPs to which blocked domains resolve at the router. It should not be that difficult to implement.

Re: So, you’ve hit an age gate. What now?

#262
post #61

Earlier quoted context omitted.

One aspect of this normalization of photo uploading is that, if a platform allows user-generated content that can splash a modal to kids, a bad actor can do things like say “you need to re-verify or you’ll lose all your in-game currency, go here” and then collect photo identification without even needing to compromise identity verification providers! I truly fear the harm that will be done before legislators realize…

Every once in a while, eBay emails me out of the blue and asks me to update my personal details, with a link to a web page. I always assumed they were phishing scams, but I looked closer at one, and it is a real link too a real page on their site. It's like they're training people to fall for phishing scams. One of them even displayed the name of a variable, instead of my user name.

I have had two banks (Lloyds and Barclays) phone me and ask for personal details to verify me over the phone. Again, training people to fall for scams.

Then there are all the links that go to other sites to track clicks or because they have a separate domain for some reason. Again, training people to fall for phishing.

Re: So, you’ve hit an age gate. What now?

#263
post #72
post #43

Earlier quoted context omitted.

Everyone seems to forget that using VPNs to violate your local laws gives lots of good ammo to the authoritarians that want to ban VPNs. The answer isn't to use a VPN to get around it (and thus give fodder to your enemies) but to change the law.

While I agree with this in spirit, here in the UK both major parties along with the public at large generally support these types of laws.

I sincerely doubt that the average UK (or US, or French, or German) citizen even knows what a VPN is beyond "that thing you sign in to for porn," let alone knows enough about it to have an informed opinion on the laws surrounding them.

Re: So, you’ve hit an age gate. What now?

#264
post #11

Earlier quoted context omitted.

In many cases, using a VPN is a great way to get your account flagged as suspicious.

Care to share more details about this? Which account? What do you mean by “suspicious”? What specific effects does this have? I use a VPN 24/7 on one machine. Zero issues even with banking, although sometimes I have to answer CAPTCHAs.

What VPN?! Proton literally doesn’t work on anything

Re: So, you’ve hit an age gate. What now?

#265

Earlier quoted context omitted.

To be blunt, because it sounds insane and simultaneously solving the problem at the wrong abstraction level, and based on criteria that have nothing to do with age. Age-based IP ranges? This sounds like a recipe for reinventing the entire internet in a non-backwards-compatible way. Networks are not people. Why would we treat the network as your identity?

What strikes you as unreasonable? What I'm suggesting for different service levels is simply to map a specified access / age-verification level to a specific network access point. This is better suited to IPv6 which has a much larger address space than IPv4, and often allocates a range of addresses rather than a single IP, though NAT or IP shenanigans might be possible for the latter as well. The point is to put the…

It's less that there is something unreasonable sounding about it and more that there's almost nothing that sounds reasonable about it. It's like you suggested that instead of setting speed limits, we directly tie the maximum speed of a car to how far the driver's seat is from the steering wheel.

Re: So, you’ve hit an age gate. What now?

#266

Earlier quoted context omitted.

https://news.ycombinator.com/item?id=46447282 I had the same idea

I don't see why they'd need to expire after a time, but I think the purchaser should be able to revoke the code if they lose it if they particularly care. A least with it being a simple age verification system, there shouldn't be any worry about someone stealing your code as it shouldn't be linked to any accounts.

It prevents resale. Also additional friction for a minor who manages to illicitly obtain a code.

Re: So, you’ve hit an age gate. What now?

#267

Earlier quoted context omitted.

I don't see why they'd need to expire after a time, but I think the purchaser should be able to revoke the code if they lose it if they particularly care. A least with it being a simple age verification system, there shouldn't be any worry about someone stealing your code as it shouldn't be linked to any accounts.

It prevents resale. Also additional friction for a minor who manages to illicitly obtain a code.

I don't see too much of an issue with resales - it's like if an adult buys booze for someone underage which can't really be prevented.

My issue with having them expire is that people would have around 70 years of proving their age whilst minors only need to be prevented from accessing websites for up to 18 years (more likely just 10 years or so).

Re: So, you’ve hit an age gate. What now?

#268

Earlier quoted context omitted.

> Which stores sell age-verification scratchcards? Stores that sell other age-restricted products. > How do you make sure they can't be traced back to the person who paid for them How would they be traced? Pay cash. I've never had my ID scanned or recorded when I buy alcohol. And now I look old enough that I don't even have to show ID. If someone can trace the store they're bought from and you're that paranoid, rotat…

> Stores that sell other age-restricted products. So far, I've never seen an age verification scratch card sold anywhere > How would they be traced? Your ID is collected at retail and its barcode scanned along with a barcode on the card, your personal data and card ID get uploaded to a server operated by the entity that created the cards and/or the state. ID barcode scan can be replaced or used alongside facial recog…

Buying alcohol is nothing like getting an anonymous token that grants the right to a Google account.

This is equivalent to saying you either need to be over 16 or have a parents permission which will not work for any number reasons that someone else can enumerate.

It's a nice idea. Won't work.

Re: So, you’ve hit an age gate. What now?

#269

Earlier quoted context omitted.

Can we actually prevent children under 16 from buying beer?

Is there actually a difference between transactions between humans in meatspace (getting a government ID, then using it at a store) and age estimation algorithms?

EFF explains a few differences between showing your ID in person and verifying your age online [1]. With respect to transmission, storage, and sharing of user data by the verifier/website, the risks of age estimation overlap with those of age verification.

[1] https://www.eff.org/deeplinks/2025/12/why-isnt-online-age-ve...

Re: So, you’ve hit an age gate. What now?

#270

Earlier quoted context omitted.

It prevents resale. Also additional friction for a minor who manages to illicitly obtain a code.

I don't see too much of an issue with resales - it's like if an adult buys booze for someone underage which can't really be prevented. My issue with having them expire is that people would have around 70 years of proving their age whilst minors only need to be prevented from accessing websites for up to 18 years (more likely just 10 years or so).

Ok sure. I don't have a strong opinion on that either way.
Post reply on HN