Live data from Hacker News

I'm reluctant to verify my identity or age for any online services

neilzone.co.uk

151–160 of 645 posts

Re: I'm reluctant to verify my identity or age for any online services

#151
post #6

I was sitting in a room the other day with a young adult, we were searching for additional algorithm learning materials. They searched in Google, and accept the cookies. They clicked on a website, and accepted those cookies too. They then started entering their email address to access another service. I was completely taken aback. I'm the sort of person that either rejects the cookies, or will use another site entire…

"they"... sadly indeed the damage is done, but not by "them".

Re: I'm reluctant to verify my identity or age for any online services

#152

Earlier quoted context omitted.

> It is the young people that are growing up conditioned to press accept It's really alarming, actually. I run the cyber security training & phishing simulations at my work, and it's the younger employees that struggle the most. It's like they just assume that everything on the web is trustworthy. It's not hard to see why though. They grew up with app stores & locked down devices. No concept of a file or file system,…

> It's like they just assume that everything on the web is trustworthy. > It's not hard to see why though. They grew up with app stores & locked down devices. When we create a safer world, people’s defense mechanisms naturally atrophy or are never developed in the first place.

That's the philosophy behind Safety Third.

Re: I'm reluctant to verify my identity or age for any online services

#153
post #6

I was sitting in a room the other day with a young adult, we were searching for additional algorithm learning materials. They searched in Google, and accept the cookies. They clicked on a website, and accepted those cookies too. They then started entering their email address to access another service. I was completely taken aback. I'm the sort of person that either rejects the cookies, or will use another site entire…

Most doesn't event know what cookies too. In fact, most doesn't put extra thought into the things they are clicking/accepting on web. Because of this, I found it odd that the regulation allows displaying the accept cookies button. Instead, it should be rejecting cookies by default and a separate flow to accept tracking cookies (e.g. via account settings page)

Why not have all tracking disabled by default by law and have users opt in through Settings menus?

Re: I'm reluctant to verify my identity or age for any online services

#154
post #6

I was sitting in a room the other day with a young adult, we were searching for additional algorithm learning materials. They searched in Google, and accept the cookies. They clicked on a website, and accepted those cookies too. They then started entering their email address to access another service. I was completely taken aback. I'm the sort of person that either rejects the cookies, or will use another site entire…

People are getting brainwashed into giving away information on the web and real life. In the US it's not rare to link accounts through phone numbers that are required in web forms and store memberships. In Chile they started asking for your National Id with so many stupid pretexts that people got conditioned into just giving it away. It wasn't like this 10yrs ago. I'd rather have membership numbers. It's technically…

Giving out the Ids directly is stupid. Any sane scheme would use unlinkable attestation.

Re: I'm reluctant to verify my identity or age for any online services

#155
post #60

I'm fine with providing my identity for online banking and other finance platforms for legal & taxation purposes. I can't think of a single other use case in which I'd be willing to verify my identity. I'd rather go back to hosting email myself, and am fine with circumventing content access control for all other platforms for personal use. We're seeing the world slide towards authoritarian strongmen, and we want to g…

>circumventing

I would say the time to buy mesh networking equipment is now. But it's not like I'm capable of defending the transmitter. So when they come for the VPNs, the VPSs, and encryption, I guess I'll just be out of luck.

(Out of luck = resigned to zero digital privacy. No matter I follow the law and “have nothing to hide” of course.)

Perhaps people will pass flash drives like North Korea or Cuba?

Re: I'm reluctant to verify my identity or age for any online services

#156
post #78

Earlier quoted context omitted.

What would a safe extension model look like to you? At some point, you have to implicitly trust someone unless you audit every line of code (or write it yourself) and build everything from source that you run.

This is a solved problem for at least ad blockers for over a decade on iOS. The ad blocking extension gives Safari a list of URLs and regex expressions to block

It's solved if you trust Safari. I'm not sure that's the case for the parent poster.

Re: I'm reluctant to verify my identity or age for any online services

#157
post #45

Age and identity verification can and should be done at the country level. France has an ID service to pay taxes, and they have a network of possible ID verification systems. Like, you can ID through the tax system, or through the healthcare system. It works fine. Implementing an API that uses the same to provide age verification is not rocket science. If you need age verification for a website, say "smedia.fr", then…

I don't like the idea that media services are required to report back to the government that I'm accessing them - I think that is an issue many would have with such a system

Re: I'm reluctant to verify my identity or age for any online services

#158
post #78

Earlier quoted context omitted.

What would a safe extension model look like to you? At some point, you have to implicitly trust someone unless you audit every line of code (or write it yourself) and build everything from source that you run.

This is a solved problem for at least ad blockers for over a decade on iOS. The ad blocking extension gives Safari a list of URLs and regex expressions to block

No, it's a solved problem for ad blockers, a very specific problem case that extensions have traditionally solved. But the entire concept of extensions is far greater than just "ad blockers", although that's the use case for which 99.9% of people have used them for.

But there are other uses cases, like cloud2butt.

Re: I'm reluctant to verify my identity or age for any online services

#159

Earlier quoted context omitted.

When a 10-year-old registers for an adult website, they pretend they're 100 years old. Their age is 90 years different from the stated birthday. Eighty years later, the birth date is just as far off—but the implied age is now only 10 years off.

Thanks this seems like the correct meaning rather than the other comment. But that is beautiful its own way, got me all philosophical.

I liked that interpretation too!

Re: I'm reluctant to verify my identity or age for any online services

#160

Earlier quoted context omitted.

How so? The law doesn't require cookie banners. However, you could argue that tracking/advertisement cookies should have been banned completely and that the law is flawed in that it allows for tracking given user "consent".

I love the EU apologists - “it wasn’t a bad law just because the outcome was bad”

The alternative being to bend over and grab our ankles with both hands the moment the scummy ad-tech industry requests our data?

Sorry mate, the GDPR is there for a bloody good reason; and legit companies obey the law.

Post reply on HN