Live data from Hacker News

Introducing Age Verification

blog.roblox.com

101–110 of 157 posts

Re: Introducing Age Verification

#101
post #2

Though I applaud the effort to get age right and protect players, I'm not sure I'll ever be comfortable having me or my child scan our photo ID and selfie to upload it as part of a login flow to an application.

A component of my work is in digital identity, so I hope you don’t mind the question: what would make you comfortable doing so? For Roblox, I can see the exception taken, but some applications do require this level of identity proofing (scanning your passport in an airline mobile app to book an international flight comes to mind). Edit: Thank you everyone for your feedback, it’s very helpful!

>scanning your passport in an airline mobile app to book an international flight comes to mind

I'm curious as to why this might be necessary.

Whenever I've traveled internationally, while I've had to provide the airline with a bunch of info when booking my flight, I've never had to provide a scanned version of my passport.

Rather, when I arrive at my destination (at both ends) I need to show the nice customs folks my passport.

Which airlines require providing them with a scan of a passport to book a flight? I ask so that I can make sure never to use those airlines. Thanks!

Re: Introducing Age Verification

#103

Earlier quoted context omitted.

Children's Online Privacy Protection Rule ("COPPA") https://www.ftc.gov/enforcement/rules/rulemaking-regulatory-... EDIT: @gruez: An attestion is likely no longer sufficient for Roblox's compliance requirements, and identity proofing is now cheap to perform (~$1-2/per proofing request). Cheaper to get ahead of the curve. https://www.theverge.com/2021/9/21/22684672/roblox-age-verif... > For now, only one feature requi…

> COPPA imposes certain requirements on operators of websites or online services directed to children under 13 years of age, and on operators of other websites or online services that have actual knowledge that they are collecting personal information online from a child under 13 years of age. I didn't read the whole thing. I plan to one day though because I want to see what the rules are, but, to me, that summary so…

>Here's a wild idea... How about not collecting the personal information of children?

Here's an even wilder one:

   How about not collecting personal information?  
   Full stop.

Re: Introducing Age Verification

#104

Where does the need for hard verification of the age come from? My friends and I were using the internet when we were under 13 years old (although not by much), and just clicked the button to confirm that we are older than 13 (mostly on various forums), and later on the same thing with 18 years old verification screens, and we turned out alright (at least from my perspective.)

Pure speculation: Once they build a user base that over time crosses the age of 18 (or whatever the age for accessing adult material is in the player's country), they can allow them access to a separate, premium, age restricted section, where they can expand their user generated content model to a demographic with a lot more money and a market where that money is easily spent.

Re: Introducing Age Verification

#105
post #2

Though I applaud the effort to get age right and protect players, I'm not sure I'll ever be comfortable having me or my child scan our photo ID and selfie to upload it as part of a login flow to an application.

A component of my work is in digital identity, so I hope you don’t mind the question: what would make you comfortable doing so? For Roblox, I can see the exception taken, but some applications do require this level of identity proofing (scanning your passport in an airline mobile app to book an international flight comes to mind). Edit: Thank you everyone for your feedback, it’s very helpful!

[deleted]

Re: Introducing Age Verification

#106
post #2

Though I applaud the effort to get age right and protect players, I'm not sure I'll ever be comfortable having me or my child scan our photo ID and selfie to upload it as part of a login flow to an application.

A component of my work is in digital identity, so I hope you don’t mind the question: what would make you comfortable doing so? For Roblox, I can see the exception taken, but some applications do require this level of identity proofing (scanning your passport in an airline mobile app to book an international flight comes to mind). Edit: Thank you everyone for your feedback, it’s very helpful!

[deleted]

Re: Introducing Age Verification

#107
post #76

Can't someone train a GAN to do this-id-does-not-exists.com? I would use it quite often for this kinds of things.

I mean yeah, you could, but forging identity documents is illegal in most places with functioning legal systems, for obvious reasons. Forging a government ID and presenting it as a real one is a giant minefield that most people probably don't want to be in.

The person offering the site will be from a jurisdiction where they don't have to care, and will do it either for the lulz or for money.

The 12 year old kid using the site will not care about the legal implications.

Re: Introducing Age Verification

#108

Earlier quoted context omitted.

Putting photos of my ID documents online just seems like an incredibly bad move for my security and privacy. The only time I'd even consider sharing photos of my ID documents over the internet is if I'm sharing them with an organisation I have a multi-year high-trust relationship with (like my e-mail provider of 20 years). And even then, I'd prefer not to if I can avoid it.

Government agencies only.

While I trust my Government to issue me a passport (what else can I do), I can't say I trust all their agencies to securely store an image of it.

Re: Introducing Age Verification

#109
post #2

Though I applaud the effort to get age right and protect players, I'm not sure I'll ever be comfortable having me or my child scan our photo ID and selfie to upload it as part of a login flow to an application.

This is why people are afraid of vaccination ID/passports.

Re: Introducing Age Verification

#110
post #72

Earlier quoted context omitted.

To be fair, it's not part of their login flow, it's part of their verification flow. It's a one-time thing, not an every-login thing. I also see no problem with this. What could they realistically use this information for that would be nefarious? It doesn't actually store the ID in any real sense, as they explain in the link, and I see no reason for them to lie about that. It's real easy to scream, "But My Privacy!!!…

one risk is the inevitable data leak and having these documents for sale on a darkweb market. how exactly is the ID anonymized? who knows?

The documentation says anonymized "value" is generated, so likely some kind of hash.

I don't think these are able to be stolen in any meaningful sense, based on how they describe their tech stack.

Post reply on HN