391–400 of 447 posts
Earlier quoted context omitted.
A bunch of UK users are blocked from the more "free speech" (over 13) channels unless they prove their identity to Discord, to comply with the Online Safety Act.
It's channels marked NSFW that you need verification for and it's also incredibly easy to bypass with a VPN.
You've got to be a complete moron uploading your gov ID to discord
It is specifically because you got banned for "being under 13" it comes from someone asking a question like "How many candles in this photo?" then you reply "7" then they edit the message to say "How old are you" and voila, underage ban. What you are overlooking is that Discord is the new MSN Messenger, YIM, etc your friends are not backed up in a meaningful way, nor the servers you're in, if you lose your account, y…
Earlier quoted context omitted.
It might give momentum to age-verification schemes like Apple Wallet [0]. Apple gets the state ID in wallet and exposes an age verification API to apps like Discord; Discord queries the API and relies on Apple's age verification without ever getting access to the personally-identifying information. [0] https://medium.com/@drewsmith_6943/apple-wallet-id-is-the-so...
Maybe not wallets but regular "sign in with X" SSO. If all the X's can agree that one of the claims in the SSO is "is_adult", then at least you limit the exposure of your government ID to X getting breached, while all the "sign in with X" sites won't have access to the ID itself, just the claim. Of course, pretty much every X gets breached anyway, and the walled garden shenanigans are not attractive, but it's better…
Earlier quoted context omitted.
It's a valid question, which speaks to the frequency with which these things happen. That's isn't trivialising the problem.
No, it's very much used to express the sentiment "I don't care about this, and wish people would stop talking about it."
You're welcome to your opinion, of course. Just don't project it onto others.
Earlier quoted context omitted.
Surely that's solved easily by ensuring a 1:1 association between the proof of age and account?
So, that's not anonymous then. Because it allows tracking across multiple accounts, some of which are associated with your name. An unchanging proof of age is pretty much just another name for a government ID number.
You can then prevent certificate forging by forwarding a cryptographic hash of the requester identity (generated by the website client), which will be included in the cert body so the website can verify the attestation was generated for this specific request, and it cannot be randomly reused.
Of course this doesn't solve the problem of using your grandma's id to bypass age restrictions, but I think that problem is worth the cost of privacy gains from corporations not validating IDs directly and screwing up like Discord's vendor did here.
.... The government ID's they only started asking for as a bullshit requirement after running for like 10 years without needing them? At some point we'll start seeing companies that rotate your passwords automatically and integrate with your autologins, and send immediate reports of breaches / suddenly failing logins. Wait. Why isn't this a thing
Earlier quoted context omitted.
Surely that's solved easily by ensuring a 1:1 association between the proof of age and account?
Grandpa isn't interested in Discord, so you can open a second account using his Proof of Age. Maybe a third account, using Uncle Ned's. And a fourth account, using...
I'm not defending age verification's existence in the first place btw, I don't think it's a good idea without secure protocols of central attestation for such things. But of course, governments aren't interested in solving the harder more valuable problem, they're interested in shifting the responsibility to corporations while crying foul.
Earlier quoted context omitted.
I also wish open-source communities would move off of Discord for another reason: Users are limited to joining a maximum of 100 servers. I've hit the cap and it's driving me crazy. It's really easy to hit it since each friend group, hobby group, gaming community, and open-source community often all have their own servers.
I can barely keep up with 6 semi active discord servers, each with tens of semi active channels... Much less think about doing it with hundreds. More power to you, must have figured out a good notification scheme
It is sometimes possible to view a Discord server without joining it, but it is painful compared to just joining the server.
And how will they pay for it? How did we get to this state anyway? Isn't HN supposed to be populated by the people who work at these companies, the fuck are you guys doing??
Whatever stereotypes you've read, about 0.01% of HNer's hold C-level jobs at huge tech companies, to be setting such policies. And even at modest-sized companies, those are decided by Legal Dept's and senior business managers. While you might find it cathartic, to angrily curse at some convenient Post Office employee for (say) the Postmaster General's latest postage stamp price increase - that is really not a classy…
Earlier quoted context omitted.
So, that's not anonymous then. Because it allows tracking across multiple accounts, some of which are associated with your name. An unchanging proof of age is pretty much just another name for a government ID number.
Not necessarily. In theory, the attestation that someone is of age can be provided by a central service. The central service does not need the website account information to provide a non-fungible certificate, that you show to your service that has no way of knowing who you are from the certificate. All it needs to ensure is the certificate is used only once per account. You can then prevent certificate forging by fo…
Or the certificate isn't the same every time and therefore you can generate a whole bunch of them and give them out for $2 apiece.
Or the certificate isn't the same every time and also isn't anonymous so they can trace who's doing that.
You don't have to reuse the same certificate for several requests. You can get a new one for every request, for every person who is asked to verify their age and pays you $2, and if they're actually anonymous, there's no way to know you did this. Is a rate limit part of the proposal? Can I only sign up to one adult service per week?
Unless you meant the requester's real identity, in which case... we're back to not anonymous.