Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Discord/Twitch/Snapchat age verification bypass

age-verifier.kibty.town

Post reply on HN
Print view View original

421–430 of 494 posts

Re: Discord/Twitch/Snapchat age verification bypass

#421

Post by unethical_ban »

jabroni_salad wrote: post #417
unethical_ban wrote: post #268

Earlier quoted context omitted.

This suggests that the immediate availability of a drop-in replacement today means there is no utility in encouraging that growth. There are multiple open-source tools that do everything Discord does. There are few-to-none that offer everything Discord does, and certainly none that are centralized, network-effect-capture-ready. Short term: * Small group chats with known friends: Signal, whatsapp, IRC, Matrix * Commun…

If you want to host your own stoat server, you will also need to recompile the apps to use your URL and distribute them to your friends, and they will not be compatible for any other server.

Yes, I learned in the Zulip promo discussion earlier this week that self-hosted push notification servers have to have certs compiled directly into the app. I can't tell if it's malice, indifference or incompetence to have that design; any answer is completely believable.

Is there an architectural opportunity to build a "Self-hosted push notification" app and business, where the push broker builds an app to deploy to play, then the self-hosted apps build trust with the broker. The broker app sends push notifications to the user device, which can inform them of the message sent and open arbitrary app windows?

Re: Discord/Twitch/Snapchat age verification bypass

#422

Post by petu »

voxic11 wrote: post #393
taminka wrote: post #391

Earlier quoted context omitted.

presumably you'd just use unique one time codes derived from the eID

I fail to see how that solves the problem? That's what I'm saying my service would provide. Unless the eID has some kind of client side rate limiting built in I can generate as many of them as I want. And assuming they are completely privacy preserving no one can tell they were all generated by the same ID.

https://github.com/eu-digital-identity-wallet/av-doc-technic...

> Since Proof of Age Attestations are designed for single use, the system must support the issuance of attestations in batches. It is recommended that each batch consist of thirty (30) attestations.

It sounds like application would request batch of time-limited proofs from government server. Proofs gets burned after single use. Whether or not you've used any, app just requests another batch at a set interval (e.g. 30 once a month). So you're rate limited on the backend.

Edit: seems like issuing proofs is not limited to the government, e.g. banks you're client of also can supply you with proofs? (if they want to partake for some reason). I guess that would multiply numbers of proof available to you.

Re: Discord/Twitch/Snapchat age verification bypass

#423

Post by ThePowerOfFuet »

daniel31x13 wrote: post #137
Retr0id wrote: post #8

Hm, when attempting it I get redirected to https://age-verifier.kibty.town/webview?url=null , which says: {"error":"error parsing webview url"} Edit: Apparently my discord account is in some kind of A/B feature test that uses a different verification provider, Persona

https://x.com/xyz3va/status/2021734252505604108

https://xcancel.com/xyz3va/status/2021734252505604108

Re: Discord/Twitch/Snapchat age verification bypass

#424

Post by zknow »

lesostep wrote: post #366
Cthulhu_ wrote: post #309

Earlier quoted context omitted.

> The solution is parents using the parental control feature on their children’s devices. This is a stopgap at best, and to be blunt, it's naive. They can go on their friends' phones, or go to a shop and buy a cheap smartphone to circumvent the parental controls. If the internet is locked down, they'll use one of many "free" VPN services, or just go to school / library / a friend's place for unrestricted network acce…

>> This is a stopgap at best, and to be blunt, it's naive Not if the rule includes easy rule circumvention. For example, if you could parent-control lock the camera roll to a white list of apps. Want to post on social media so your friends would see? No can do, but you can send it to them through chat apps. Want to watch tik-tok? Go ahead. Want to post on tik-tok? It's easier to ask parent to allow it on the list, th…

yeah I think there is a way to do this elegantly. I didn't have my own device until I was 20 or so actually, and it wasn't a big problem. As a young teenager I could use the family desktop for education and entertainment. I had online friends in my late teens I played games with, and would have done much more so if I had a more more powerful cpu lol. Should mention though, these friends were through in person networks on discord, so I wasn't really in the public square I guess.

So I could explore things but not get into anything naughty.

When I decided to get into software dev I got my own cpu and my own phone once I had a job in dev.

Might seem pretty conservative but it worked, and I'm technical enough now. I wish I would have got into coding earlier but I've done alright so :shrug: Depending on the environment for my kids I'd move the timeline back a little, but not too much. Having too much time and just the unfiltered internet to fill it is too dangerous for young teens.

Re: Discord/Twitch/Snapchat age verification bypass

#425

Post by hparadiz »

FMecha wrote: post #407
RupertSalt wrote: post #221

Earlier quoted context omitted.

They were not, actually. IIRC, it went like this: the account creation screen prompted them for a birthdate. They entered a fictitious one and pretended to be over 13. (I saw my niece do this in front of me, and I just sighed a very heavy sigh. She was way more interested in Club Penguin.) Then later, they let the cat out of the bag. They tell their friends "lol I'm only 10! Today's my birthday, so give me a hat!" or…

Some platforms also now suspend you if they find out you were registering before turning 13 (or minimum age).

lol.

twitter did this to an ex (pre musk purchase)

she's about to turn 30.

Re: Discord/Twitch/Snapchat age verification bypass

#426

Post by Nifty3929 »

monksy wrote: post #92
leftouterjoins wrote: post #58

Earlier quoted context omitted.

Yes this is spot on. Apple & Google mobile platforms are locked down tight for this reason. Try installing okta verify on graphene OS. You cannot.

They're getting worse with attested and validated environments. This one of the reasons that google is trying to kill sideloaded apps and checking for root access. Weird thing.. the people who want this validation fully expect for you to pay for, maintain, keep it valid, and pay for upkeep/service for their desires. Honestly, this is something that SHOULD get very aggressive pushback.. but most people accept for no r…

It's not "accepting" - it's actual wanting. Many people want surveillance. Many people want age verification.

Re: Discord/Twitch/Snapchat age verification bypass

#427

Post by MSFT_Edging »

manuelmoreale wrote: post #394
MSFT_Edging wrote: post #390

Earlier quoted context omitted.

The chilling effect of tying identity to speech means it directly effects free speech. The Founding Fathers of the US wrote under many pseudonyms. If you think you may be punished for your words, you might not speak out. We know we cannot trust service providers on the internet to take care of our identifying data. We cannot ensure they won't turn that data over to a corrupt government entity. Therefore, we can not g…

> If we need smart phones and apps to interact with public services, we should apply the same constitutional rights to those platforms. Are private social media platforms "public services"? And also, you mentioned constitutional rights. Which constitution are we talking about here? These are global scale issues, I don't think we should default on the US constitution. > We know we cannot trust service providers on the…

> Because at some point, at a certain level, society is built on at least some level of implicit trust. Without it you can't have a functioning society.

This is somewhat central to being remain anonymous.

Protesters and observers are having their passports cancelled or their TSA precheck revoked due to speech. You cannot trust the government to abide by the first amendment.

Private services sell your data to build a panopticon, then sell that data indirectly to the government.

Therefore, tying your anonymous speech to a legal identity puts one at risk of being punished by the government for protected speech.

Re: Discord/Twitch/Snapchat age verification bypass

#428

Post by name_taken_duh »

voxic11 wrote: post #387
adjfasn47573 wrote: post #293

Earlier quoted context omitted.

You forgot one (the sane one, which is coming soon anyway): Using a government issued eID system. The EU is going to rollout eID in a way that a site can just ask “is this person > age xy?”. The answer is cryptographically secure in the sense that this person really is this age, but no other information about you has to be known by the site owner. Which is the actual correct way to do it. I don’t understand why all t…

What I don't understand about this approach is if it's truly completely privacy preserving what stops me from making a service where anyone can use my ID to verify? If the site owner really learns nothing about me except for my age then they can't tell that it's the same id being used for every account. And if the government truly knows nothing about the sites I verify on they can't tell that I'm misusing the id eith…

One possible solution idea I just had is having the option of registered providers (such as Discord). They would have a public key, and the user has a private key associated to their eID. They could be mingled in such a way to create a unique identifier, which would be stored by the provider (and ofc the scheme would be such that the provider can verify that the mingled identifier, was created from a valid private key and their public key).

This would in total make sure that only one account can be created with the private key, while exposing no information about the private key aka user to the provider. I am fairly certain that should work with our cryptographic tools. It would ofc put the trust on the user not to share their eID private key, but that is needed anyway. Either you manage it or it gets managed (and you lose some degree of privacy).

Re: Discord/Twitch/Snapchat age verification bypass

#429

Post by ushtaritk421 »

Cthulhu_ wrote: post #309
supermatt wrote: post #275

Earlier quoted context omitted.

The solution is parents using the parental control feature on their children’s devices. If laws need to be made about something it should be to punish those parents who neglect to safeguard their children using the tools already available to them. If the parental controls currently provided aren’t sufficient then they should be modified to be so - in addition to filtering, they should probably send a header to websit…

> The solution is parents using the parental control feature on their children’s devices. This is a stopgap at best, and to be blunt, it's naive. They can go on their friends' phones, or go to a shop and buy a cheap smartphone to circumvent the parental controls. If the internet is locked down, they'll use one of many "free" VPN services, or just go to school / library / a friend's place for unrestricted network acce…

Many parents of preteens and young teens that I know simply do not allow their childrend to use social media on their own devices. Doesn't sound like that bad a solution.

Re: Discord/Twitch/Snapchat age verification bypass

#430

Post by [deleted] »

unethical_ban wrote: post #421
jabroni_salad wrote: post #417

Earlier quoted context omitted.

If you want to host your own stoat server, you will also need to recompile the apps to use your URL and distribute them to your friends, and they will not be compatible for any other server.

Yes, I learned in the Zulip promo discussion earlier this week that self-hosted push notification servers have to have certs compiled directly into the app. I can't tell if it's malice, indifference or incompetence to have that design; any answer is completely believable. Is there an architectural opportunity to build a "Self-hosted push notification" app and business, where the push broker builds an app to deploy to…

[deleted]
Post reply on HN