Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Discord/Twitch/Snapchat age verification bypass

age-verifier.kibty.town

Post reply on HN
Print view View original

251–260 of 494 posts

Re: Discord/Twitch/Snapchat age verification bypass

#251

Post by giantrobot »

zythyx wrote: post #237
mjevans wrote: post #213

Earlier quoted context omitted.

How about just requiring browser, OS vendors, and phone makers to give parents real child accounts that are easy to use and keep kids off the Internet?

There are a lot of actual solutions that could be implemented that don't invade privacy, but that's the point. These rules are all designed TO invade your privacy. They're designed for you to give up your online anonymity and make you accountable for your speech and actions online.

> They're designed for you to give up your online anonymity and make you accountable for your speech and actions online.

They're designed destroy anonymity to give the in group pretext to persecute the out group. It will be propagandized as accountability but it will be anything but.

Re: Discord/Twitch/Snapchat age verification bypass

#252

Post by raincole »

michaelt wrote: post #108
cocoto wrote: post #4

The real and robust method will be generating artificial video input instead of the real webcam. I really don’t think any platform will be able to counter this. If they start requiring to use a phone with harder to spoof camera input, you will simply be able to put the camera in front of a high resolution screen. The cat and mouse game will not last long.

> I really don’t think any platform will be able to counter this. Do platforms want to counter it? Seems to me with an unreliable video selfie age verification: * Reasonable people with common sense don't need to upload scans of their driving licenses and passports * The platform gets to retain users without too much hassle * Porn site users are forced to create accounts; this enables tracking, boosting ad revenue an…

> Everyone wins.

Only if the lawmakers agreed.

Re: Discord/Twitch/Snapchat age verification bypass

#253

Post by altmanaltman »

shevy-java wrote: post #229

"k-id, the age verification provider discord uses doesn't store or send your face to the server. instead, it sends a bunch of metadata about your face and general process details." I think the primary issue is not the "send your face" (face info) to a server. The problem is that private entities are greedy for user data, in this case tying facial recognition to activities related to interacting with other people, mos…

Speaks to the network effect I guess. People did not decide inorganically to make Discord big, and simillarly, its pretty hard to convince people to make an inorganic decision to make it small. Overtime it might happen if there is a valid alternative but expecting people to leave discord because of this thing is naive.

Re: Discord/Twitch/Snapchat age verification bypass

#254

Post by Semaphor »

Barrin92 wrote: post #120
Gigachad wrote: post #82

Earlier quoted context omitted.

The long term solution would have to be some kind of integration with a government platform where the platform doesn’t see your ID and the government doesn’t see what you are signing up for. I don’t this will happen in the US but I can see it in more privacy responding countries. Apple and Google may also add some kind of “child flag” parents can enable which tells websites and apps this user is a child and all age c…

this is already how the EU infrastructure for digital ID works, basically. Using public/private keys on your national id, the government functions as a root authority that you (and other trusted verifiers downstream) can identify you with and commercial platforms only get a yes/no when you want to identify yourself but have no access to any data. South Korea also has had various versions of this even going back to ~2…

Do all EU countries have that? I know our (German) ID works that way, using the FOSS AusweisApp, but I hadn’t heard of it being EU-wide (it should be, though).

Re: Discord/Twitch/Snapchat age verification bypass

#256

Post by tyre »

r2vcap wrote: post #185

Well, it’s a clever idea. Discord seems to have intentionally softened its age-verification steps so it can tell regulators, “we’re doing something to protect children,” while still leaving enough wiggle room that technically savvy users can work around it. But in practice, this only holds if regulators are either inattentive or satisfied with checkbox compliance. If a government is competent and motivated, this appr…

> Discord seems to have intentionally softened its age-verification steps so it can tell regulators, “we’re doing something to protect children,” while still leaving enough wiggle room that technically savvy users can work around it.

...source?

I sincerely doubt that Discord's lawyers advocated for age verification that was hackable by tech savvy users.

It seems more likely that they are trying to balance two things:

1. Age verification requirements

2. Not storing or sending photos of people's (children's) faces

Both of these are very important, legally, to protect the company. It is highly unlikely that anyone in Discord's leadership, let alone compliance, is advocating for backdoors (at least for us.)

Re: Discord/Twitch/Snapchat age verification bypass

#257

Post by fcatalan »

Semaphor wrote: post #254
Barrin92 wrote: post #120

Earlier quoted context omitted.

this is already how the EU infrastructure for digital ID works, basically. Using public/private keys on your national id, the government functions as a root authority that you (and other trusted verifiers downstream) can identify you with and commercial platforms only get a yes/no when you want to identify yourself but have no access to any data. South Korea also has had various versions of this even going back to ~2…

Do all EU countries have that? I know our (German) ID works that way, using the FOSS AusweisApp, but I hadn’t heard of it being EU-wide (it should be, though).

Spanish ID cards have had an X. 509 cert inside them for more than 10 years, I use it all the time to sign documents and access government sites. There is already legislation and a push for an EU-wide digital identity wallet that should be up and running this year, look up eidas 2.0 and the EUDI wallet.

That looks like it should make things like privacy compatible age verification "trivial".

Re: Discord/Twitch/Snapchat age verification bypass

#258

Post by jen729w »

neilv wrote: post #217

Three problems with this: 1. Removes the pain of age verification, encouraging some people to stay in the proprietary walled garden when everyone would be better served by open platforms (and network effects). 2. Provides a pretext for more invasive age verification and identification, because "the privacy-respecting way is too easily circumvented". 3. Encourages people to run arbitrary code from a random Web site in…

> everyone would be better served by open platforms

Oh cool, which ones?!

…aaaand there's the problem.

Re: Discord/Twitch/Snapchat age verification bypass

#259

Post by reddalo »

MallocVoidstar wrote: post #228
brandonb927 wrote: post #191

Highly recommend wrapping the code to drop into the console in a immediately-invoked function expression; as it stands, it doesn't work in macOS Safari without an IIFE because top-level await is not supported in any version of Safari yet https://caniuse.com/wf-top-level-await .

Why bother supporting Safari when they aren't interested in supporting the modern web? They're five years behind.

In a way I agree with you; but practically 100% of iOS/iPad users are forced to use Safari. Plus, it's nice to have a browser engine that's not Chromium.

Re: Discord/Twitch/Snapchat age verification bypass

#260

Post by RupertSalt »

rmunn wrote: post #243
rkagerer wrote: post #220

Earlier quoted context omitted.

This assumes people are putting in their real birthdays, which IMO is a terrible practice to encourage. I never put in my real birthday. It's just one more datapoint to leak in an inevitable hack and help scammers exploit me. Just because a website sticks a field on a form, doesn't mean you need to fill it out. I can think of maybe 1 website I use that has a legitimate use to know this info about me... and a dozen th…

There are many websites that believe I was born on January 1st, in a year close to my actual birth year. When it's actually required by some law or regulation (e.g. financial stuff) I give my actual birthday. But when some site is just wanting to comply with age verification? Yep, I'm over 30, so you don't need to see my identification. (Jedi hand wave).

Well, they would have the legal right to force-choke your account, or chain your partner to a golden bikini, when they discover that you weren't abiding by the Terms and Conditions which you agreed to. Seems fair.
Post reply on HN