Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

I'm reluctant to verify my identity or age for any online services

neilzone.co.uk

Post reply on HN
Print view View original

171–180 of 645 posts

Re: I'm reluctant to verify my identity or age for any online services

#171

Post by amluto »

adventured wrote: post #84
thewebguyd wrote: post #62

Earlier quoted context omitted.

> It is the young people that are growing up conditioned to press accept It's really alarming, actually. I run the cyber security training & phishing simulations at my work, and it's the younger employees that struggle the most. It's like they just assume that everything on the web is trustworthy. It's not hard to see why though. They grew up with app stores & locked down devices. No concept of a file or file system,…

That's an exaggeration. Young people on average have grown up with drastically greater understanding of what a file is than any other generation that has come before them. They grew up using Chromebooks or laptops in school, constantly interacting with the local file systems, uploading files to Instagram and TikTok from the file systems on their smartphones, browsing their phones for files constantly. They know what…

> They grew up using Chromebooks … in school, constantly interacting with the local file systems

While it is possible to interact with the local file system on a school Chromebook, it’s certainly not the default. School interactions with Chromebooks seem to consist of logging with highly secure passwords like “strawberry” and using Google Docs. And playing games with heavy PvP components and paid DLC (paid by parents whose kids beg for it, not by schools) that call themselves “educational” because they interject math problems needed to use those juicy spells, make no effort whatsoever to teach anything, but produce a nicely formatted report correlating scores to numbered elements of the Common Core standards.

Re: I'm reluctant to verify my identity or age for any online services

#172

Post by vincnetas »

SiempreViernes wrote: post #91
vincnetas wrote: post #57

Earlier quoted context omitted.

ok, lets do a poll. id like to see who uses what. remember its not only countries its also private businesses like banks or lawyers and remember its like ratchet. there might be 99% of services that use inhouse face id, and its enough to have only one to leak your data.

Ha! You are concerned about the privacy aspects of IDs but you want me to list what authentication services I use for you? That's too funny to help out with :p

i ment to list id services that are used by your services not services themselves.

My data point is persona.

Re: I'm reluctant to verify my identity or age for any online services

#173

Post by smakt »

d--b wrote: post #45

Age and identity verification can and should be done at the country level. France has an ID service to pay taxes, and they have a network of possible ID verification systems. Like, you can ID through the tax system, or through the healthcare system. It works fine. Implementing an API that uses the same to provide age verification is not rocket science. If you need age verification for a website, say "smedia.fr", then…

[flagged]

Re: I'm reluctant to verify my identity or age for any online services

#174

Post by jstanley »

bmacho wrote: post #100
ambicapter wrote: post #70

Earlier quoted context omitted.

How would you implement ability to arbitrarily block any network connection on any website without giving an extension 100% access?

> How would you implement ability to arbitrarily block any network connection on any website without giving an extension 100% access? Browsers should provide a filtering option before they makes a request. IMO a lot of no-brainer options are missing from personal computers. Like the ability to start a program with restricted access to files, network or OS calls (on Windows and on Linux). Browsers should provide the a…

We do sort of have that with the capabilities stuff (although I admit hardly anyone knows how to use it).

But the tricky part is that "reading files" is done all the time in ways you might not think of as "reading files". For example loading dynamic libraries involves reading files. Making network connections involves reading files (resolv.conf, hosts). Formatting text for a specific locale involves reading files. Working out the timezone involves reading files.

Even just echoing "hello" to the terminal involves reading files:

  $ strace echo hello 2>&1 | grep ^open
  openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
  openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 3
  openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libgcc_s.so.1", O_RDONLY|O_CLOEXEC) = 3
  openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libm.so.6", O_RDONLY|O_CLOEXEC) = 3
  openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
  openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = 3
  openat(AT_FDCWD, "/proc/filesystems", O_RDONLY|O_CLOEXEC) = 3
  openat(AT_FDCWD, "/proc/self/maps", O_RDONLY|O_CLOEXEC) = 3
  openat(AT_FDCWD, "/usr/lib/cargo/bin/coreutils/echo/en-US.ftl", O_RDONLY|O_CLOEXEC) = -1 ENOTDIR (Not a directory)

Re: I'm reluctant to verify my identity or age for any online services

#175

Post by areoform »

marmarama wrote: post #143
sspiff wrote: post #60

I'm fine with providing my identity for online banking and other finance platforms for legal & taxation purposes. I can't think of a single other use case in which I'd be willing to verify my identity. I'd rather go back to hosting email myself, and am fine with circumventing content access control for all other platforms for personal use. We're seeing the world slide towards authoritarian strongmen, and we want to g…

The problem is those self-same authoritarian strongmen are very successfully using sockpuppeting to change national discourses in ways that benefit them and are detrimental to the targeted countries. Hybrid war is real and has been ongoing for more than a decade. LLMs make it way more cost effective. Being able to limit the influence of external bad actors is the main goal of ID verification. Age verification is a us…

Do you truly believe that ID "verification" will do anything in a world where IDs are leaked by the tens of thousands to the millions?

You are shifting the onus on to the platforms, when the problem is pretty simple; with a few exceptions, we've failed as a species to learn how to think.

Also do you think that the TLAs don't know who the bots most likely are with all the surveillance data they're gathering? That the NSA doesn't have detailed telemetry of the surveillance ops??

Let me ask you the question, what have they done about it? And why not?

Re: I'm reluctant to verify my identity or age for any online services

#176

Post by user142 »

bmacho wrote: post #100
ambicapter wrote: post #70

Earlier quoted context omitted.

How would you implement ability to arbitrarily block any network connection on any website without giving an extension 100% access?

> How would you implement ability to arbitrarily block any network connection on any website without giving an extension 100% access? Browsers should provide a filtering option before they makes a request. IMO a lot of no-brainer options are missing from personal computers. Like the ability to start a program with restricted access to files, network or OS calls (on Windows and on Linux). Browsers should provide the a…

> the ability to start a program with restricted access to files, network or OS calls (on Windows and on Linux)

Bubblewrap allows you to do that on Linux.

Re: I'm reluctant to verify my identity or age for any online services

#177

Post by d--b »

arewethereyeta wrote: post #133
d--b wrote: post #45

Age and identity verification can and should be done at the country level. France has an ID service to pay taxes, and they have a network of possible ID verification systems. Like, you can ID through the tax system, or through the healthcare system. It works fine. Implementing an API that uses the same to provide age verification is not rocket science. If you need age verification for a website, say "smedia.fr", then…

you should NOT need any face ID to pay taxes.

whatever man. Everyone in France has an ID. It's no big deal, really.

Re: I'm reluctant to verify my identity or age for any online services

#178

Post by airstrike »

cortesoft wrote: post #163
bArray wrote: post #6

I was sitting in a room the other day with a young adult, we were searching for additional algorithm learning materials. They searched in Google, and accept the cookies. They clicked on a website, and accepted those cookies too. They then started entering their email address to access another service. I was completely taken aback. I'm the sort of person that either rejects the cookies, or will use another site entire…

I am in my mid forties, been working as a professional software developer for over 20 years. I click “accept the cookies” almost every time. I just personally don’t feel it’s worth the effort and cost to try to avoid it. What “dark pattern cookie trick” are you worried about? I just can’t come up with a scenario where it will actually harm me in any way. All the examples I have heard are either completely implausible…

I'm worried about my browsing to be tracked across the entire internet for the purposes of marketers to "enrich" my profile... just to sell me more and to sell that data to third-parties who can make all sorts of decisions based on a made up story about who I am, my preferences, my values and whatnot.

there's a reason I don't walk around naked either. it wouldn't hurt me, but I don't need that kind of exposure for no upside

Re: I'm reluctant to verify my identity or age for any online services

#179

Post by huflungdung »

chneu wrote: post #96
PyWoody wrote: post #8

Earlier quoted context omitted.

I remember when it first became widely known that the government could see your library checkouts. People protested. It was a big deal in my tiny town. I don't even think it would be even a blip on the radar now. It really is depressing how much ground we've given.

I was just talking about this the other day. This all happened right after 9/11(nevr 4get) and people were fucking PISSED that the patriot act wanted to look at people's library histories. It was a HUGE deal where I lived. Now? Nobody gives a shit and people will trade away their valuable privacy for an IQ test.

[dead]

Re: I'm reluctant to verify my identity or age for any online services

#180

Post by xerox13ster »

adzm wrote: post #35

I use multiple "real" identities so I don't have my real name associated with certain open source projects that involve sensitive things like cryptography etc. This is a huge concern of mine.

I have multiple “real identities”, diagnosed due to trauma. We each want to have our own spaces of interest and experience online.

As a matter of mental health, we really cannot have these overlapping for many reasons, prime among them is that if one part of me becomes aware of another while they’re doing their thing, a mental “table join” can happen and disturbing memories can be shared which is incredibly destabilizing to the system.

As a wireframe example my programming alter cannot be exposed to the alter who browses cptsd forums or they remember things that cause them to dip from the headspace and we lose their knowledge.

We can’t try to pretend we don’t exist and pretend to be one person either, we did that for years and we ended up having a breakdown and went into a fugue state and moved across country leaving everything behind.

This law would destroy our productivity and contribution to economy or whatever corporacrats care about.

Post reply on HN