The real and robust method will be generating artificial video input instead of the real webcam. I really don’t think any platform will be able to counter this. If they start requiring to use a phone with harder to spoof camera input, you will simply be able to put the camera in front of a high resolution screen. The cat and mouse game will not last long.
Discord/Twitch/Snapchat age verification bypass
241–250 of 494 posts
Re: Discord/Twitch/Snapchat age verification bypass
#242Re: Discord/Twitch/Snapchat age verification bypass
#243Earlier quoted context omitted.
When I played an MMOG, if the admins found out that a child was underage, it was customary for them to suspend their account until their 13th birthday. I thought this was a clever policy, but I just can't understand the reverse of authenticating someone's age based on that of their account...
This assumes people are putting in their real birthdays, which IMO is a terrible practice to encourage. I never put in my real birthday. It's just one more datapoint to leak in an inevitable hack and help scammers exploit me. Just because a website sticks a field on a form, doesn't mean you need to fill it out. I can think of maybe 1 website I use that has a legitimate use to know this info about me... and a dozen th…
When it's actually required by some law or regulation (e.g. financial stuff) I give my actual birthday. But when some site is just wanting to comply with age verification? Yep, I'm over 30, so you don't need to see my identification. (Jedi hand wave).
Re: Discord/Twitch/Snapchat age verification bypass
#244Re: Discord/Twitch/Snapchat age verification bypass
#245Alright, how long until they patch this? Anyone takin' bets?
Edit: might only be a minor API call issue[2]
Re: Discord/Twitch/Snapchat age verification bypass
#246Earlier quoted context omitted.
> In Japan, there are already multiple apps which use something like this to verify user's age via the "my number card" + the smartphone's NFC reader. Does this also leak your identity to the app?
There is not a way to share just your date of birth. After providing your PIN it can read more than just your date of birth.
If you use the _digital_ MyNa card (e.g. the one in the Wallet.app; not the plastic one); the iOS SDK lets you only request the "is user more than XX years old" flag; without getting the actual identity: https://developer.apple.com/documentation/passkit/requesting...
Now, AFAICT nobody actually does this, but the technical ability is there.
Re: Discord/Twitch/Snapchat age verification bypass
#247Earlier quoted context omitted.
At least in Australia you absolutely can have a debit card under 18 and it’s extremely common for adults to not have a credit card.
> At least in Australia you absolutely can have a debit card under 18 Same in the UK, but Steam uses credit cards for age verification there and refuses if you provide a debit card instead. Evidently the payment backends can tell credit and debit apart.
Yeah those are parallel systems for reasons that amount to technical debt.
Re: Discord/Twitch/Snapchat age verification bypass
#248Re: Discord/Twitch/Snapchat age verification bypass
#249Re: Discord/Twitch/Snapchat age verification bypass
#250Why people act like this never has been implemented like the gigs and financial apps already validate indetity