Live data from Hacker News

Discord's face scanning age checks 'start of a bigger shift'

bbc.com

181–190 of 448 posts

Re: Discord's face scanning age checks 'start of a bigger shift'

#182

Earlier quoted context omitted.

I feel like you could, theoretically, have a service that has an ID (as drivers license ID), perhaps operated by your government, that has an API and a notion of an ephemeral identifier that can be used to provide a digital attestation of some property without exposing that property or the exact identity of the person. It would require that the attestation system is trusted by all parties though, which is I think the…

Wouldn't this require the API provider to know that tbe citizen is connecting to the app? Grindr users might be squeamish about letting the current US admin know about that.

Not necessarily, you can define the protocol such that it's all done with opaque IDs instead of identifying info.

Re: Discord's face scanning age checks 'start of a bigger shift'

#184
post #59

Earlier quoted context omitted.

The West isn't China and Korea. They can't opt out of authoritarian-state surveillance and great firewall, whereas we have options more amenable to privacy, even if you want to quibble that they aren't perfect. Also the fact that UK and Australia are kind of backwards on online privacy. That aside, this is targeted. The fediverse and vbulletin forums of old, even reddit, are all social media but will never require fa…

Korea is a democratic Western nation, they host US military bases and fly F-35. Korean made phones are trusted enough that American special forces use it for some parachute jumpings.

Since when is East Asia considered "Western"?

I live in a Japanese city with a US military base and trust me, the only Western thing here are the few bars that cater to them.

Re: Discord's face scanning age checks 'start of a bigger shift'

#185

Earlier quoted context omitted.

Is card verification a lesser form of surveillance? And there’s a good chance your card issuer (or your bank, one hop away from it) has your biometrics anyway. I don’t like either of them… (And why does YouTube ask me to verify my age when I’m logged into a Google account I created in 2004?)

Oh, make no mistake, I hate both of these. I loathe this forced surveillance of everyone because parents can't be bothered to supervise and teach their children about the most primary of human animal functions (sex), regardless of their reasons for it. I take great pains to keep minors out of my adult spaces, and don't have to resort to anything as invasive as biometric surveillance or card charges. This notion that…

> take great pains to keep minors out of my adult spaces, and don't have to resort to anything as invasive as biometric surveillance or card charges.

What sort of spaces are these (online or in person), and how do you enforce this? I have an online space where such non invasive measures could be useful.

Re: Discord's face scanning age checks 'start of a bigger shift'

#186

I would like to think there there is a solution that can be engineered, in which a service is able to verify that a user is above an appropriate age threshold, while maintaining privacy safeguards, including, where relevant, for the age-protected service not to be privy to the identity of the user, and for the age verification service to not be privy to the nature of the age-protected service being accessed. In this…

Already exists in a lot of places. German national IDs for like 10 years or something like that have an eID feature. It's basically just a public/private key signing scheme. The government and a bunch of other trusted public providers are able to issue identities, you can sign transactions with them or verify your age to commercial service providers, or transfer some data if that's required with your consent. (https://www.personalausweisportal.de/Webs/PA/EN/citizens/ele...)

Estonia and South Korea I think also have similar features on their IDs, it's already a solved problem.

Re: Discord's face scanning age checks 'start of a bigger shift'

#187
post #59

Earlier quoted context omitted.

Korea is a democratic Western nation, they host US military bases and fly F-35. Korean made phones are trusted enough that American special forces use it for some parachute jumpings.

Since when is East Asia considered "Western"? I live in a Japanese city with a US military base and trust me, the only Western thing here are the few bars that cater to them.

Among the many definitions of "Western" is the original sense of "First World", encompassing members of the geopolitical bloc centered historically on the US.

Re: Discord's face scanning age checks 'start of a bigger shift'

#188
post #99

Earlier quoted context omitted.

I added an edit to correct myself however this was not something I invented. This story goes back to 09 - 2010. I will confess I didn't do any research to confirm though and that was my bad.

FWIW, I can confirm that user 9283409232 didn't make that up. I heard that multiple reputable places, years ago. And it was believable, given a history of genuine but inept attempts by some to address real societal problems. (As well as given the history of fake attempts to solve problems for political points for "doing something". And also given the history of "won't someone think of the children" disingenuous prete…

Interestingly I actually heard this in Australia many years ago. I assumed it was real (as an Australian) but the answer is more complicated (with the actual answer being no)

https://tysonadams.com/2013/04/23/did-australia-ban-small-br...

Re: Discord's face scanning age checks 'start of a bigger shift'

#189
post #151
post #149

Earlier quoted context omitted.

I don’t get it. What is to prevent a 9 year-old from buying a certificate and using it?

This video addresses that: https://youtu.be/92gu4mxHmTY All certificates are cryptographically linked to an identity-anchor certificate, meaning buying a certificate would require the seller reveal the private key tied to the identity-anchor certificate, a tall order I would argue. In the case of stolen identity certificates, they can be revoked thus making their illegitimate utility limited.

So an older brother gives his sibling a key.

Why would your design prevent that?

Re: Discord's face scanning age checks 'start of a bigger shift'

#190
post #177

Earlier quoted context omitted.

how does rogue anchor revocation in practice? say if an anchor has issued tens of thousands of legitimate ids, and also ten to career fraudsters who gave them $10000 each as you've outsourced the trust you have no idea which are legitimate, and if you revoke the lot you're going to have a lot of refunds to issue (ultimately this is why countries only allow people who can be banned from their profession to certify doc…

Each trust anchor gets issued a single certificate that can have delegation ability, ie the ability to issue new trust anchor certs to others. So if say a UPS store is issued a cert and they go rogue, we can just revoke the trust anchor cert that was issued to the store, all certs issued further down are also automatically revoked...the revocation check is done either in the app or in the case of a third-party perfor…

When you say that “we” can revoke, I assume you are talking about your company - the app. What sort of resources would be required to constantly audit the potentially thousands or hundreds of thousands of certificate issuers on your platform?
Post reply on HN