Live data from Hacker News

Tell HN: Dropbox user age verification feature can lock your account

news.ycombinator.com

81–90 of 101 posts

Re: Tell HN: Dropbox user age verification feature can lock your account

#81
post #11

Earlier quoted context omitted.

What should be the lowest valid date of birth? Is there some universal standard? I know it feels like 4 months is quite young, but where would you draw the line?

At least in the US, I don't believe you're supposed to use the internet unless you're 13 or older. You could start there for your dropdown.

No, That's expressly not allowed.

https://www.ftc.gov/business-guidance/resources/complying-co...

>If you choose to block children under 13 on your general audience site or service, you should take care to design your age screen in a manner that does not encourage children to falsify their ages to gain access to your site or service. Ask age information in a neutral manner at the point at which you invite visitors to provide personal information or to create a user ID.

>In designing a neutral age-screening mechanism, you should consider:

>Making sure the data entry point allows users to enter their age accurately. An example of a neutral age-screen would be a system that allows a user freely to enter month and year of birth. A site that includes a drop-down menu that only permits users to enter birth years making them 13 or older would not be considered a neutral age-screening mechanism since children cannot enter their correct ages on that site.

>Avoiding encouraging children to falsify their age information, for example, by stating that visitors under 13 cannot participate or should ask their parents before participating. In addition, simply including a check box stating, “I am over 12 years old” would not be considered a neutral age-screening mechanism.

Re: Tell HN: Dropbox user age verification feature can lock your account

#82
post #15

Earlier quoted context omitted.

The age verification feature is for COPPA compliance, but I’d really like to see the provision that prevents correcting errors.

They will correct errors, after you give them a bunch of document scans or a credit card. I wasn't willing to provide that to a random foreign company for a free service, I just moved to Discord.

So it was correctable, and so no problem.

The inconvenience isn't important when it's an outlier event.

Does everyone bungle their Skype account profile 3 times a day or did it happen to one person out of millions and only one time in that person's life?

For outlier cases, any form of redress at all is ok. All that really matters is that there IS a procedure at all and it is doable (doesn't cost $1000 or require something impossible). Unlike say getting your google/gmail account fixed when there is no such thing as a google customer support # you can call to fix things that the automated processes got wrong.

The only problem I see is the discrepency between creating and updating.

If there is a valid reason to require proof of age to update an account from child to adult, then by rights exactly that same proof should be required to create the account in the first place.

then the convenience matters, and there should be some more practical way to supply something which is legally accepted as good enough, and that should be the same for both creation and update.

I don't think we really have that "something", especially not globally and absolutely positively not anonymously. By now, in most countries there is probably some form of standard ID that most people in the country either have or can get. But they are different for every country and definitely creates a first world discrimination filter.

Thinking about that, it seems like the whole idea is misguided and imvalid, unworkable. How would one do it? Even in a 1st world country and me having both a SSN and a drivers ID and or government ID, it still leaves the problem of anonymity and multiple/temp accounts etc, and still leaves the problem that I entered the wrong number which means probably someone ele's number, which means someone else could enter mine...so there needs to be a mechanism to prove that I own the number I entered, which there is no such mechanism. Maybe if ID#'s were really key pairs and you never simply entered a number but instead signed something or proved that you could decrypt something signed, but that is a high tech fantasy world we aren't quite in yet.

Kids should be protected from those who would exploit them, but requiring proof of age to use on-line services isn't a functioning way to do it.

Re: Tell HN: Dropbox user age verification feature can lock your account

#83

Earlier quoted context omitted.

You can sign up to many different Nextcloud providers https://nextcloud.com/signup/ NextCloud also sells a device with it preinstalled and easy to use

Those providers aren't competitive in pricing with Dropbox, and even if you have a device with it preinstalled, you are limited to whatever redundancy is built into the box and configuring security/firewall rules, etc. Plus, a lot of residential broadband services limit upload speed substantially, so if you're restoring offsite it could take a very long time. Dropbox at least has some resiliency distributed across mu…

[deleted]

Re: Tell HN: Dropbox user age verification feature can lock your account

#84

I found a Dropbox alternative: https://nextcloud.com/ I'm never going back. Way better in every aspect than Dropbox.

Nextcloud is not an alternative to Dropbox. Dropbox is a cloud storage provider, and Nextcloud is a software that runs on a cloud server. One you pay for the storage upfront and Dropbox provides some redundancy of the data. With Nextcloud, you could set it up on a single service with no redundancy and easily lose all your data, plus there is administration and maintenance costs.

None of this and other differences disqualifies it as an alternative.

If it's possible to save and access files from any browser, from any location, set up an automatically syncing folder, and selectively share access with others, then you have an alternative to dropbox, and all the other cloud personal storage services. All of which nextcloud can do.

The differences just mean you don't prefer that particular alternative the same way as if you didn't like the color scheme, or more realistically say the need to make a microsoft account for onedrive, or the way google probably scans the contents of google drive etc.

They are all still alternatives with various pros & cons.

Setting up your own nextcloud on a publicly accessible service is no different.

The cons like effort and cost are noted.

The pro is there is no one else in control of your stuff and it's impossible to lose your account due to some age verification, or any other reason like "communiy standards" or billing dispute. The worst that can happen is your hosting provider can drop you, but that is a commodity and there are infinite other hosting providers and methods. Keep your own mirror so you don't care even if the hosting provider deletes everything.

If any alternative to dropbox has to be identical in every detail to qualify, then it has exactly the same problems as well. An alternative actually has to be different in some way or else it's not an alternative but just more of the same, and there is no point in that.

Re: Tell HN: Dropbox user age verification feature can lock your account

#85
post #81
post #11

Earlier quoted context omitted.

At least in the US, I don't believe you're supposed to use the internet unless you're 13 or older. You could start there for your dropdown.

No, That's expressly not allowed. https://www.ftc.gov/business-guidance/resources/complying-co... >If you choose to block children under 13 on your general audience site or service, you should take care to design your age screen in a manner that does not encourage children to falsify their ages to gain access to your site or service. Ask age information in a neutral manner at the point at which you invite visitors to…

> No, That's expressly not allowed.

Is "allowed" the right word, given "This document [...] is not binding", "guidance" and "should consider"?

On an unrelated note:

> consistent with long standing Commission advice, FTC staff recommends using technical means, such as a cookie, to prevent children from back-buttoning to enter a different age.

So if 12-year-olds learn about a website they don't want their parents to ever visit, they just have to preemptively try to visit it from the same computer and tell the truth?

Re: Tell HN: Dropbox user age verification feature can lock your account

#86

Earlier quoted context omitted.

Nextcloud is not an alternative to Dropbox. Dropbox is a cloud storage provider, and Nextcloud is a software that runs on a cloud server. One you pay for the storage upfront and Dropbox provides some redundancy of the data. With Nextcloud, you could set it up on a single service with no redundancy and easily lose all your data, plus there is administration and maintenance costs.

None of this and other differences disqualifies it as an alternative. If it's possible to save and access files from any browser, from any location, set up an automatically syncing folder, and selectively share access with others, then you have an alternative to dropbox, and all the other cloud personal storage services. All of which nextcloud can do. The differences just mean you don't prefer that particular alterna…

> None of this and other differences disqualifies it as an alternative.

So your friend is in the market to buy a house and tells you about an issue with a particular realtor they are having, and you say...

"I got a great alternative, you can buy a piece of land, rezone it, get permits, go chop down your own wood, build your own house with your bare hands..."

They say to you, I hate my realtor... I don't hate my job. What you're suggesting as an alternative is more like saying that building your own car is an alternative to buying one. They aren't in the same league, and so while it makes sense for people to resell or offer Nextcloud as an option for self-hosted solutions or security, it makes no sense to try to say they are an alternative to Dropbox.

> The differences just mean you don't prefer that particular alternative the same way as if you didn't like the color scheme, or more realistically say the need to make a microsoft account for onedrive, or the way google probably scans the contents of google drive etc.

The differences doesn't mean that I don't like it, in fact I self host a lot of my own solutions. I'm just saying they don't really compare or compete.

Sure, if you want to purchase an array of servers that are distributed across multiple regions and setup a Ceph cluster to distribute storage in a resilient manner then go ahead. By all means do it, but to act like that somehow compares to purchasing a service that already does this is just misleading. After that person spends tens of thousands of dollars to replicate what Dropbox does, then they can finally have an alternative that they never thought of before paying $12/mo. for Dropbox.

Re: Tell HN: Dropbox user age verification feature can lock your account

#87

Earlier quoted context omitted.

You can sign up to many different Nextcloud providers https://nextcloud.com/signup/ NextCloud also sells a device with it preinstalled and easy to use

Those providers aren't competitive in pricing with Dropbox, and even if you have a device with it preinstalled, you are limited to whatever redundancy is built into the box and configuring security/firewall rules, etc. Plus, a lot of residential broadband services limit upload speed substantially, so if you're restoring offsite it could take a very long time. Dropbox at least has some resiliency distributed across mu…

I don't understand the objection. Every service or option has some sort of unique differences from each other, and there is always some good and bad points, including dropbox.

Google drive is free and surely pretty well backed up, but requires hoping a service with no customer support process at all just never decides to kill your account, and probably they scan your drive contents just like they do your email, or will some day if not yet.

Onedrive requires creating and using a Microsoft account and who knows how usable it even is from linux (can it do a synced folder on linux or just the browser interdace?).

Other services like Mega or idk what maybe don't have a folder sync feature or something, but are hosted in another country and possibly better protected against invalid take downs or spying.

So nextcloud costs a little more or is a little more work to set up. Yes and in trade for that there are other differences like you are the one in ultimate control of your stuff.

You may not prefer that particular set of trade-offs, but fundamentally, so what? There is always a trade off of some sort including with dropbox.

Re: Tell HN: Dropbox user age verification feature can lock your account

#88

Earlier quoted context omitted.

Those providers aren't competitive in pricing with Dropbox, and even if you have a device with it preinstalled, you are limited to whatever redundancy is built into the box and configuring security/firewall rules, etc. Plus, a lot of residential broadband services limit upload speed substantially, so if you're restoring offsite it could take a very long time. Dropbox at least has some resiliency distributed across mu…

I don't understand the objection. Every service or option has some sort of unique differences from each other, and there is always some good and bad points, including dropbox. Google drive is free and surely pretty well backed up, but requires hoping a service with no customer support process at all just never decides to kill your account, and probably they scan your drive contents just like they do your email, or wi…

Google One is $10 a month or $99 a year, includes live support and 2TB of storage.

OneDrive works with rclone, which supports mounting and now bisyncing, and there are third party clients that work just like the official client.

Re: Tell HN: Dropbox user age verification feature can lock your account

#89

Earlier quoted context omitted.

None of this and other differences disqualifies it as an alternative. If it's possible to save and access files from any browser, from any location, set up an automatically syncing folder, and selectively share access with others, then you have an alternative to dropbox, and all the other cloud personal storage services. All of which nextcloud can do. The differences just mean you don't prefer that particular alterna…

> None of this and other differences disqualifies it as an alternative. So your friend is in the market to buy a house and tells you about an issue with a particular realtor they are having, and you say... "I got a great alternative, you can buy a piece of land, rezone it, get permits, go chop down your own wood, build your own house with your bare hands..." They say to you, I hate my realtor... I don't hate my job.…

Hyperbole is not a valid argument.

Why didn't you go all the way and talk about declaring your own country on an asteroid? Because obviously what I suggested was to write nextcloud, in assembly, on a cpu architecture you invent.

No one has to write any software, or design or build any hosting system, those already exist. And they are even effortless common commodities. The land is already zoned and cleared and permitted, and the house is already designed, and even already built.

Popping a copy of already written and packaged software on a vps is some percent more work than creating a Google drive account, but that percent is not a million. Even if it's 500% more work, that is still trivial, 5x a few minutes. And even if you for some reason also need an insane availability garantee, it's hardly any more work to then put that behind a cdn, which are another low-effort commodity.

Without even looking, I garantee that there is a pre-made nextcloud droplet ready to go on DigitalOcean that takes mere seconds to activate, and they are surely not the only service provider with an equivalent app-on-a-stick ready to go in a few clicks like that.

And if their own backup offerings and network backbones aren't good enough already, without even looking I bet there is very little effort required to hook that up to CloudFlare.

And this is all while avoiding the probably even easier one-stop-shopping path of just using aws for everything, just because F Amazon.

Selecting a house built to order from a developer's catalog, or even buying land and hiring an architect, is indeed a perfectly exemplary alternative to buying an existing house from a realtor. Minus the stupid hyperbolic nonsense about rezoning, the example was in fact pretty good support of my point. Thank you!

Post reply on HN