Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Introducing Age Verification

blog.roblox.com

Post reply on HN
Print view View original

111–120 of 157 posts

Re: Introducing Age Verification

#111

Post by LegitShady »

wizzwizz4 wrote: post #98
LegitShady wrote: post #96

Earlier quoted context omitted.

I'd rather not subsidize roblox with government systems. If they can't figure out an age verification system that works thats on them. The government shouldn't be verifying the age of people for businesses. It's a waste of tax dollars to subsidize a business with major profits.

Roblox has an age verification system that works. It's just not good for the public. Isn't that what governments are for?

No. If its not good for the public, then either don't use it, or pass legislation to ban it. subsidizing a business because they can't do it is wasting tax money for a video game.

Re: Introducing Age Verification

#112

Post by gruez »

_jal wrote: post #56
kosei wrote: post #2

Though I applaud the effort to get age right and protect players, I'm not sure I'll ever be comfortable having me or my child scan our photo ID and selfie to upload it as part of a login flow to an application.

Yeah, I don't do this. If your service demands my ID, I'll close my account. If you have KYC requirements, I'll meet you in person or find a different vendor.

>If you have KYC requirements, I'll meet you in person or find a different vendor.

that's literally not an option when it comes to crypto exchanges.

Re: Introducing Age Verification

#114

Post by dane-pgp »

lordlic wrote: post #94
z0r wrote: post #83

Earlier quoted context omitted.

You're suggesting that it should be illegal to lie to Roblox about your identity?

Yes? Duh? That's the point of anti-forgery laws.

Who exactly is the victim of the crime which such a law creates? If the purpose of age verification is ostensibly to protect children, and if children are the ones lying about their age, then are they both the perpetrator and the victim?

In any case, dragging a 12 year old through the legal system seems like a greater harm than allowing them to play Roblox (although perhaps not by much).

Re: Introducing Age Verification

#115

Post by Spivak »

unclebucknasty wrote: post #87
kosei wrote: post #2

Though I applaud the effort to get age right and protect players, I'm not sure I'll ever be comfortable having me or my child scan our photo ID and selfie to upload it as part of a login flow to an application.

The worst are those that let you get invested and only then spring these requirements on you. NBA Top Shot comes to mind. They allow you to buy with no problem. But, to sell on their platform you have to go through what is essentially a KYC check. Your investment is sunk otherwise.

I think people on HN underestimate how easy it is to accidentally build a money laundering system —- which NBA Top Shot did and now has to correct with KYC checks.

Re: Introducing Age Verification

#116

Post by Spivak »

TaylorAlexander wrote: post #6
toomuchtodo wrote: post #3

Earlier quoted context omitted.

A component of my work is in digital identity, so I hope you don’t mind the question: what would make you comfortable doing so? For Roblox, I can see the exception taken, but some applications do require this level of identity proofing (scanning your passport in an airline mobile app to book an international flight comes to mind). Edit: Thank you everyone for your feedback, it’s very helpful!

Generally I would be comfortable showing my ID to either an established bank or the government which issued the ID. And airport security. Otherwise if a private company wants me to upload my ID I would probably avoid using their service.

Or a bar? Ya know, to verify your age.

Re: Introducing Age Verification

#117

Post by Spivak »

dane-pgp wrote: post #114
lordlic wrote: post #94

Earlier quoted context omitted.

Yes? Duh? That's the point of anti-forgery laws.

Who exactly is the victim of the crime which such a law creates? If the purpose of age verification is ostensibly to protect children, and if children are the ones lying about their age, then are they both the perpetrator and the victim? In any case, dragging a 12 year old through the legal system seems like a greater harm than allowing them to play Roblox (although perhaps not by much).

Say that again but about cigarettes and alcohol.

Re: Introducing Age Verification

#118

Post by loonster »

Spivak wrote: post #116
TaylorAlexander wrote: post #6

Earlier quoted context omitted.

Generally I would be comfortable showing my ID to either an established bank or the government which issued the ID. And airport security. Otherwise if a private company wants me to upload my ID I would probably avoid using their service.

Or a bar? Ya know, to verify your age.

I dont drink ay places that need to scan my ID and keep a record of it.

Re: Introducing Age Verification

#119

Post by lifthrasiir »

tialaramex wrote: post #92
kosei wrote: post #2

Though I applaud the effort to get age right and protect players, I'm not sure I'll ever be comfortable having me or my child scan our photo ID and selfie to upload it as part of a login flow to an application.

I would much prefer my government to take on responsibility for providing this sort of service as they do e.g. driver qualification. Once upon a time the usual thing to get OK'd to rent a van (e.g. for students who are moving house) is you rock up to the rental place with the legal documents showing you're entitled to drive. You're relying on the fact that the person renting you a van doesn't much care and isn't keep…

I in general agree to a sort of governmental (or even inter-governmental) services for lightweight identity verification. Lightweight in a sense that these services do not give any new personally identifiable information to clients, they are only given cryptographic proofs. If implemented very well, it may be usable for a whole lot of applications other than just age verification.

However a partial or faulty implementation of the concept can be very dangerous. South Korean websites used to receive a Resident Registration Number (RRN, 주민등록번호) for all imaginable reasons, including just catching double registration. RRN was and remains crucial for identity verification and it is estimated that virtually every SK national has been subject to multiple accidents that exposed their RRNs before such practice is forbidden. After that the Accredited Certificate of Authentication (공인인증서, nowadays the Recognized Common Certificate 공동인증서) is in place, which was another travesty that is based on X.509 but with non-standard practices based on ActiveX. Nowadays age and identity verification is commonly done with mobile phones, and there are multiple such services mostly run by CICs and telcos. This did dramatically reduce the use of RRNs and is much more convenient for typical people, but if you do not own SK mobile phones (e.g. you are foreigners) you can't use them and there are frequently no fallbacks. Also I generally don't trust the security of those services.

Re: Introducing Age Verification

#120

Post by derefr »

_jal wrote: post #56
kosei wrote: post #2

Though I applaud the effort to get age right and protect players, I'm not sure I'll ever be comfortable having me or my child scan our photo ID and selfie to upload it as part of a login flow to an application.

Yeah, I don't do this. If your service demands my ID, I'll close my account. If you have KYC requirements, I'll meet you in person or find a different vendor.

With most of these, the service itself doesn’t demand your ID; they demand that you give your ID to some third-party KYC/AML provider, who then just sends a “yes, this account isn’t fraudulent” signal back to the service. It’s like really overwrought SSO.
Post reply on HN