Live data from Hacker News

I'm reluctant to verify my identity or age for any online services

neilzone.co.uk

481–490 of 645 posts

Re: I'm reluctant to verify my identity or age for any online services

#481

Earlier quoted context omitted.

I appreciate the list of potential harms. I'm curious about your last point though. Isn't it trivially easy to wipe cookies from your browser?

It's not just about cookies but also about fingerprinting, which is extremely hard to prevent.

No extensions that randomly change your fingerprint? I suppose that might trigger a lot of captchas.

Re: I'm reluctant to verify my identity or age for any online services

#482
The very concept they've been trying to sell is wrong headed.

Kids are trying to access XYZ which isn't safe (where XYZ may as well be "the internet") -> verify the ages of all adults, because we can't verify the age of a kid.

Meanwhile kids, like adults, can just find another route to access what they want. So some subset of adults hands over their identity information to an untrustworthy third party of dubious security.

I can't see how that does anything other than make the situation worse.

Re: I'm reluctant to verify my identity or age for any online services

#483
post #358

Earlier quoted context omitted.

Presumably you might also get better rates for a mortgage, to be fair.

Possibly, but the big companies have ratcheting expectations to meet, and prefer to keep benefits to themselves, while leaving us with the drawbacks. e.g. Tesla using telemetry to protect itself but not customers without court order.

You seem to carry a very defeatist demeanor. Is there a particular reason for capitulating at every point of friction?

Re: I'm reluctant to verify my identity or age for any online services

#484
post #228

I completely agree. The only services for which I will verify my age (and the entire rest of my ID) are bank accounts and other services involving a real legal requirement for real ID. The notion that you should upload a passport to random sites for age verification is unbelievably dangerous. That's a recipe for identity theft. And face scanning is also an invasion of privacy, not to mention very unreliable (my 16 ye…

1000% this. Fake info for everything that isn't directly tied to money or government. HN doesn't have my info. Apple doesn't have it. Google doesn't have it. Amazon doesn't have it. Microsoft doesn't have it. They don't care who I really am, and that hasn't, ever never, been a problem for using their stuff. They want your real ID. They do not need it. At all.

> They want your real ID. They do not need it.

I think that is exactly backwards. Many of the companies integrating with KYC/AML providers (such as my company) definitely don't want to be dealing in ids, just like most companies don't want to be dealing in storing credit card numbers (and the compliance that goes along with it). Its why Stripe exists, and its why ID verification companies exist.

Re: I'm reluctant to verify my identity or age for any online services

#485
The way that it would make sense for age verification is if there was some federal system that verifies your identity and then it would use a public key crypto system to allow a third party to check whether or not this person is over the age or not.... common systems I see being used right now that could be integrated for this purpose would be login.gov or id.me... they could allow a token-based authentication system for verification of age without having to divulge any other information about the person. these systems are already being used by the IRS, VA, SSA and other Federal systems.

Re: I'm reluctant to verify my identity or age for any online services

#486

Earlier quoted context omitted.

I don't believe it's wire fraud unless you deceive the other party for monetary gain. I realize that's not quite the correct definition but AFAIK it's quite close to it.

The gain is that you get to access the website. Fraud simply requires gain, not necessarily monetary benefit.

That's not it. There is 2 parts 2 fraud.

Part 1: misrepresentation of fact

Part 2: harm or loss due to that misrepresentation

You must prove both.

https://definitions.uslegal.com/f/fraud/#:~:text=and%20upon%...

Re: I'm reluctant to verify my identity or age for any online services

#487
post #6

I was sitting in a room the other day with a young adult, we were searching for additional algorithm learning materials. They searched in Google, and accept the cookies. They clicked on a website, and accepted those cookies too. They then started entering their email address to access another service. I was completely taken aback. I'm the sort of person that either rejects the cookies, or will use another site entire…

I am in my mid forties, been working as a professional software developer for over 20 years. I click “accept the cookies” almost every time. I just personally don’t feel it’s worth the effort and cost to try to avoid it. What “dark pattern cookie trick” are you worried about? I just can’t come up with a scenario where it will actually harm me in any way. All the examples I have heard are either completely implausible…

Apply the same logical test to freedom of speech, and you’ll get the same result.

You’re not missing anything about what’s likely to happen to you personally. What you’re missing is the manner in which rights shape your life and your society even when you don’t exercise them, and sometimes even when nobody is currently exercising them, and that significant harm can be built out of a vast number of smaller harms that aren’t individually that bad.

Re: I'm reluctant to verify my identity or age for any online services

#488
post #160

Earlier quoted context omitted.

I love the EU apologists - “it wasn’t a bad law just because the outcome was bad”

The alternative being to bend over and grab our ankles with both hands the moment the scummy ad-tech industry requests our data? Sorry mate, the GDPR is there for a bloody good reason; and legit companies obey the law.

The GDPR is theater. An effective privacy law would have prevented data collection in the first place. Data collected will be abused, and a cute little banner won't change this.

Re: I'm reluctant to verify my identity or age for any online services

#489

The only way I can think of to do this completely anonymously (at least for the government and social media) is for you to buy a card in cash that has a little code on it. You'd need your ID to buy it, and you'd put your code into your operating system and things that demand age verification can ask the OS whether or not you're over 18. Alternatively, you can give the service your code to verify your age, but that wo…

Can I buy them for my underage friends at different stores? Is there revocation and hence a database that maps codes to identities?

How are the codes minted? Can I pretend to be a gas station and buy a big pack of ID cards, then just not check ID?

Re: I'm reluctant to verify my identity or age for any online services

#490

Earlier quoted context omitted.

1000% this. Fake info for everything that isn't directly tied to money or government. HN doesn't have my info. Apple doesn't have it. Google doesn't have it. Amazon doesn't have it. Microsoft doesn't have it. They don't care who I really am, and that hasn't, ever never, been a problem for using their stuff. They want your real ID. They do not need it. At all.

Remember that just typing 'John Smith DOB 1/1/1900' into a random webform and clicking submit to get in is technically wire fraud. Sure, it usually won't be prosecuted... Until you upset the wrong person and they're looking for a crime you did...

Fraud (Wikipedia, United States):

  - Misrepresents a material (non-trivial) fact in order to obtain action or forbearance by another person
  - The other person relies upon the misrepresentation
  - The other person *suffers injury* as a result of the act or forbearance taken in reliance upon the misrepresentation.
Damages in fraud cases is normally computed using

  - Recovery of damages in the amount of the *difference between the value of the property* had it been as represented and its actual value
  - Out-of-pocket loss, which allows for the recovery of damages in the amount of the *difference between the value of what was given and the value of what was received*.
Usually also heavily implied it needs to involve money in some significant way:

18 U.S.C. § 1343

  (...)'any scheme or artifice to defraud, or for obtaining money or property by means of false or fraudulent pretenses, representations, or promises'(...)
Fraud cases also usually heavily apply burden of court practice on the prosecution, to prove fraud and substantial losses. If you type 'John Smith DOB 1/1/1900' the "victim" has to prove it caused them to suffer injury and that there was a significant difference between the value of the property (non-trivial).
Post reply on HN