Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Discord/Twitch/Snapchat age verification bypass

age-verifier.kibty.town

Post reply on HN
Print view View original

291–300 of 494 posts

Re: Discord/Twitch/Snapchat age verification bypass

#291

Post by ozlikethewizard »

pil0u wrote: post #289
luke727 wrote: post #276

Earlier quoted context omitted.

The frustration aimed at Discord et al is largely misplaced. I'm sure these companies don't mind gathering extra data about their users, but the primary impetus for age verification is government legislation. Moving to alternative platforms is not a long term solution because it's attacking the problem from the wrong direction.

I agree that government legislation is part of the equation, but I don't agree that moving to other platforms is not a solution. If Discord were to witness a significant exodus of paying users because of this new verification process, they would probably start fighting the fight themselves. That said, I don't expect this to happen, switching is very hard for many reasons.

This is it. Governments dont care when the peasants gripe. But hit the corps in the wallet and youll see some actual pressure exerted.

Re: Discord/Twitch/Snapchat age verification bypass

#292

Post by manuelmoreale »

supermatt wrote: post #275
joe_mamba wrote: post #274

Earlier quoted context omitted.

>as a young preteen in the 90s and 00s, I made a lot of online friends As another 90s preteen, sure, but the internet today has a lot more pedos and groomers online than in the 90s, and preteens today easily share footage of themselves to those adult weirdos, which didn't happen in the 90s because mostly limitations of technology. BUt if you look at tiktok live it's full of preteen girls dancing, and creepy old men d…

The solution is parents using the parental control feature on their children’s devices. If laws need to be made about something it should be to punish those parents who neglect to safeguard their children using the tools already available to them. If the parental controls currently provided aren’t sufficient then they should be modified to be so - in addition to filtering, they should probably send a header to websit…

Curious: are you ok with the other laws that are in place in the world to prevent underage people to engage with all sorts of activities? Like, for example, having to show an ID to being able to purchase alcohol?

Re: Discord/Twitch/Snapchat age verification bypass

#293

Post by adjfasn47573 »

jfaganel99 wrote: post #282

[flagged]

You forgot one (the sane one, which is coming soon anyway):

Using a government issued eID system. The EU is going to rollout eID in a way that a site can just ask “is this person > age xy?”. The answer is cryptographically secure in the sense that this person really is this age, but no other information about you has to be known by the site owner.

Which is the actual correct way to do it.

I don’t understand why all the sites go crazy with flawed age verification schemes right now, instead of waiting a until the eID rollout is done.

EDIT: I forgot to mention that it’s only the correct way if the implementation doesn’t give away to your government on which sites you browse… Which I believe is correctly done in the upcoming EU eID but I could be wrong about it.

Re: Discord/Twitch/Snapchat age verification bypass

#295

Post by tzs »

jtmarl1n wrote: post #53
buzzerbetrayed wrote: post #33

Earlier quoted context omitted.

Yeah that’s not true. It’s a lie. And we all know why it’s a lie. Adults in the US with ID is 99%

Somehow they don’t have trouble getting an ID when they want to buy alcohol

It only takes one person with ID buy alcohol for a group.

Re: Discord/Twitch/Snapchat age verification bypass

#296

Post by stubish »

adjfasn47573 wrote: post #293
jfaganel99 wrote: post #282

[flagged]

You forgot one (the sane one, which is coming soon anyway): Using a government issued eID system. The EU is going to rollout eID in a way that a site can just ask “is this person > age xy?”. The answer is cryptographically secure in the sense that this person really is this age, but no other information about you has to be known by the site owner. Which is the actual correct way to do it. I don’t understand why all t…

Sites need to deal with Australia, which punted all responsibility to the platforms and provided no real assistance (like say the government half of the eID system that manages all the keys and metadata)

Re: Discord/Twitch/Snapchat age verification bypass

#297

Post by michaelt »

RupertSalt wrote: post #141
michaelt wrote: post #136

Earlier quoted context omitted.

Knowledge-based authentication is a joke - it doesn't work at all. This basically only gets used for businesses that need a fig leaf for regulatory purposes. You know, $30 loans for uber eats and tiny loans like that.

Unix and Windows and MacOS and every computer since 1970 has relied on knowledge-based authentication, so let's cool the hyperbole. In the nomenclature of Multi-Factor Authentication, "something you know" is one factor. So if you know a password and you have a hardware token, that's 2 factors and combining different types is the key to MFA. Many "knowledge based authentication" tries to string together "things you kn…

> In fact, knowledge-based quizzes are used routinely by credit reporting agencies -- the big ones like Experian. And they've been presented by background check services, too.

Yes - and they don't work.

> They work like this: they scrape your credit reports and public records in a deep dive for your old addresses, employers, contact info, a whole smorgasbord of stuff.

Most of which don't work on an 18-year-old. No credit history, no past employers, no bill payments, no history of moving houses, address is their parents' house.

There is no smorgasbord. There's name, date of birth, parents' address - all of which are widely known matters of public record (which is why the credit rating agency has them in the first place).

> But it's multiple choice: "which of these did you live at? None of the above? All of them?" "Which one of these wasn't your employer?"

Fantastic, the credit rating agency has just told the fraudster several of your past addresses, and your past employers.

Sure, there's a phony or two in the list - but the fraudster can try as many times as they want, comparing employer and address lists between different credit applications.

Re: Discord/Twitch/Snapchat age verification bypass

#298

Post by ulrikrasmussen »

hhh wrote: post #279
ulrikrasmussen wrote: post #234

Earlier quoted context omitted.

I think you forgot : * authorities get to selectively crack down on sites for not implementing "proper" age verification. The sites never had a widespread problem with grooming to begin with but just so happened to have a lot of other activity that the authorities didn't like. Having everyone operate in a gray area is dangerous and threatens the rule of law.

Discord does have a problem with grooming.

I did not mean to talk about Discord specifically but all sites which will be required to do age verification.

It wouldn't be hard to imagine a situation where social media sites leaning towards the government (e.g. Truth Social, X or the like) will be getting a free pass on using age verification methods which are easy to bypass while social media sites that are more critical (e.g. Reddit) will be sanctioned into implementing the strictest and most privacy invading measures. The end result is that people choosing the path of least resistance will be lead to the government-leaning sites.

Re: Discord/Twitch/Snapchat age verification bypass

#299

Post by trinix912 »

mjevans wrote: post #213
nofriend wrote: post #204

Earlier quoted context omitted.

It depends. If the law says "you must perform such-and-such steps to verify age" then no, they don't care if you can counter it. If the law says "you must use an approach that is at least x% effective" then yes they do care if enough people counter it. We already had a half-assed solution, where websites would require you to press the button that says "I am over 18". Clearly somebody decided that wasn't good enough.…

How about just requiring browser, OS vendors, and phone makers to give parents real child accounts that are easy to use and keep kids off the Internet?

This would suddenly mean no more custom browsers, no more custom OSes, and I doubt they'd cater to the Linux and BSD crowds with this one. It's something the OSS community has been trying to fight for the last 4 decades. With a full-on government requirement this would lock you to the vetted platforms while letting anything other get in would be illegal for the site owners.

Re: Discord/Twitch/Snapchat age verification bypass

#300

Post by HeckFeck »

manuelmoreale wrote: post #292
supermatt wrote: post #275

Earlier quoted context omitted.

The solution is parents using the parental control feature on their children’s devices. If laws need to be made about something it should be to punish those parents who neglect to safeguard their children using the tools already available to them. If the parental controls currently provided aren’t sufficient then they should be modified to be so - in addition to filtering, they should probably send a header to websit…

Curious: are you ok with the other laws that are in place in the world to prevent underage people to engage with all sorts of activities? Like, for example, having to show an ID to being able to purchase alcohol?

They aren't comparable. Showing an ID to a staff member isn't stripping my anonymity. I know the retailer won't have that on file forever, tied to me on subsequent visits. Also they stop ID'ing you after a certain age ;)

There isn't any way to achieve the same digitally.

Post reply on HN