Live data from Hacker News

What we call "age verification" is actually mass surveillance

pluralistic.net

181–190 of 520 posts

Re: What we call "age verification" is actually mass surveillance

#181

Am I the only one who looked at NSFW websites at 10 years old and played games with voice chat with players of all ages too, and I turned out to be well adjusted productive member of society? People need to chill.

Seconded. The amount of time and characters spent here trying to coax someone into trying to help these damn layers materialize just tells me the point isn't the kids. It's trying to preserve business model in spite of negative externalities.

Re: What we call "age verification" is actually mass surveillance

#182

Am I the only one who looked at NSFW websites at 10 years old and played games with voice chat with players of all ages too, and I turned out to be well adjusted productive member of society? People need to chill.

Same, I care little about NSFW. We used to all live in caves together where kids saw adults having sex, in conflict, and cleaning game.

But I also grew with a different internet than we have now. There’s a level of targeted manipulation that’s novel. I’m not sure the cat goes back in the bag no matter what we do.

Re: What we call "age verification" is actually mass surveillance

#183
post #85

Earlier quoted context omitted.

Government builds a website where you can log in using any government issued ID or using one of the many many many available services that hold your details already(at least in the UK nearly everyone will have a DLVA account, HMRC account, HMPO account, NHS account.....all of these are government services which we can only assume hold our data securely already). On that website, you can click "give me a verification…

Every time I search something, I open a fresh private tab and google it. If I want to turn safe-search off, I'd have to go through this code verification flow for every single search. Aside from just being annoying, they'd have to implement strict rate limiting to prevent automated code sharing, so I'd soon end up waiting for a rate limit to expire before I can search anything. And "the government will know you've au…

Sadly we got to this place because there are other harms that are occurring and those are forcing this conversation.

Re: What we call "age verification" is actually mass surveillance

#184

Earlier quoted context omitted.

And honestly, all these should ultimately just be done client side in the browser. After the browser has verified "User is x or user is over 21" there's no reason to then send that information to the website. Let websites issue a "window.isUserOver(16)" call once and then move forward based on the response to that query.

This would require browser attestation, wouldn't it? Otherwise kids are just going to download a custom build of Chromium where `window.isUserOver(16)` is always `True`.

Some probably will. 99% of them don't even know what "Chromium" is.

This doesn't have to be perfect.

Re: What we call "age verification" is actually mass surveillance

#185
post #122
post #68

Earlier quoted context omitted.

> If we are all subject to the same monitoring and there are no exceptions, that would be fair. Not everyone is an exhibitionist. Some people thrive when they are very public about their life. Some prefer a much more private life.

"Fair" doesn't always mean according to everyone's preferences. I might want to have a full cake but getting a slice is fair.

some people need "more calories" than others

fair != equal

Re: What we call "age verification" is actually mass surveillance

#186

> "Age verification" means that everyone who does anything online will have to submit to fine-grained tracking and recording of all their online activities. its been said 1000 times here, but: age verification doesn't have to be a nightmare dystopia of 24/7 fine-grained tracking and recording unless you are somehow hoping to achieve 100% success rate (something we have not done with any other law ever). there are sev…

> age verification doesn't have to be a nightmare dystopia

But I feel there's not a lot of trust that whatever implementation we could end up with wouldn't be such a dystopia. The real world equivalent would be checkpoints at every intersection verifying the driver's age, the cashier who carded the 20 yo with a beer now does it for everyone, makes a copy of your ID and stores it in a big folder shared with their 427 "business partners".

Imo we should scrap the whole idea of age verification. Kids get a kidPhone with kidOS, whitelist of age-appropriate resources & capabilities. You wouldn't let an 8 yo drive on the highway, yet they can have a supercar to drive unsupervised on the information highway, no biggie. Internet is full of adults doing all sort of stuff while kids need supervision and education: design safe spaces for children, not checkpoints at every corner.

Re: What we call "age verification" is actually mass surveillance

#187

Earlier quoted context omitted.

Could you be more specific as to what you're imagining? I don't personally see a way to verify someone's age which doesn't involve either credit card verification, photo id verification, or some sort of facial recognition. If you know enough about someone to verify their age—even to a relatively low degree of accuracy—you probably know enough to pinpoint who they are in general. Heck—in most cases, we can't even tell…

The way identity wallets work: The government issues an eID to your wallet. The ID is signed by the government and linked to the device to prevent transferring the credential. A public/private key-pair is generated by the secure enclave in your phone, the public key along with proof of possession of the private key is included in the request for the government eID. The government signs individual attributes combined…

> The only real issue is the wallet app and device binding. Because a compromised device could allow credentials to be transferred some form of attestation of device and wallet app is required. In practice this means no rooted/jailbroken phones.

Yeah, and no Linux PCs, no custom builds of web browsers (which would effectively become open source in theory only)—basically the end of any kind of open platform. I would much rather just scan my ID!

Re: What we call "age verification" is actually mass surveillance

#188
post #64

Earlier quoted context omitted.

The codes can trivially be shared in this case

...and? Just like a child can "trivially" ask an adult to buy them a beer. Who are these adults giving children their verification codes for adult websites?

Asking adults for beer doesn't scale, code sharing can. If you want to crack down on code sharing, you'd have to start surveilling who is signing up to what.

Re: What we call "age verification" is actually mass surveillance

#189

Earlier quoted context omitted.

Do most kids have the ability and motivation to build their own machines? AFAIK you don’t need ID to buy juice, sugar, and yeast to make your own alcohol, so I think it should be the same for computer parts.

> Do most kids have the ability and motivation to build their own machines? I and pretty much everyone else in my childhood TeamSpeak server did at roughly 14 years of age.

Did the people in your Teamspeak server have issues with concentration and socialization like most social media addicts today?

Re: What we call "age verification" is actually mass surveillance

#190

Earlier quoted context omitted.

This would require browser attestation, wouldn't it? Otherwise kids are just going to download a custom build of Chromium where `window.isUserOver(16)` is always `True`.

Some probably will. 99% of them don't even know what "Chromium" is. This doesn't have to be perfect.

Right now, they don't know. They're going to learn very quickly when they want to use some website and they can't.

We agree it doesn't need to be 100% perfect. But it needs to be at least, like, 60% perfect, right? And unless you make it at least a bit hard to bypass, it will stop virtually no one.

Post reply on HN