• CosmicTurtle0 [he/him]@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    150
    ·
    29 days ago

    The problem with “age” verification is that politicians are confusing it with identity verification.

    I should not have to prove my name and other biometrics to prove age.

    Age verification is the fascist way to get people to identify themselves and their online activity. Almost every state that has some sort of age verification law has zero method to actually verify age. No digital ID service, no way to share a credential for verification.

    They want people to upload an ID.

    This isn’t about keeping children safe and it never is. It’s about identifying critics of the government.

    • lost_faith@lemmy.ca
      link
      fedilink
      English
      arrow-up
      6
      ·
      29 days ago

      Force the building of a light “honour based” age verification system (just enter your birthday, we trust you not to lie to us), then as more comply add more requirements to it til all accounts are linked and they know when you shit

  • ExcessShiv@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    118
    ·
    29 days ago

    I am actually not fundamentally against the idea of age verification for some things online. We have many things with age restrictions in real life, for various reasons, it kind of makes sense to have it online as well for some things.

    but…it has to be done with zero-knowledge proof so we limit the amount of private data exposed to the absolute bare minimum.

    • Deestan@lemmy.world
      link
      fedilink
      English
      arrow-up
      106
      ·
      29 days ago

      Zero-knowledge proofs are a good concept. They’ve been possible for a long, long time, and allow age check without surveillance.

      So why are they not being used? Because age check is just a cover. These people want to do surveillance, not protect kids.

      So it’s a good counter. Want age check? Do it like this. Oh, you don’t want it that way? Why not, pray?

      Whether it works (it has, previously) or not (as with the current bullshit from the US), it does bring to the public debate that this is unnecessary surveillance.

      • Kissaki@feddit.org
        link
        fedilink
        English
        arrow-up
        14
        ·
        29 days ago

        There’s also precedent you can point to. Germany has implemented a reasonable system of digital identification and (seperable) condition confirmation (age gate).

    • Wammityblam@lemmy.world
      link
      fedilink
      English
      arrow-up
      37
      ·
      edit-2
      29 days ago

      Maybe in alternate timeline where tech companies have historically acted ethically.

      In this timeline where each new company and/or ceo is more slimey than the last, I know that any type of identification will be mismanaged at best or used maliciously at worst

      All trust is gone between these companies.

    • chunes@lemmy.world
      link
      fedilink
      English
      arrow-up
      18
      ·
      29 days ago

      There is already age verification. It’s called an internet service provider bill.

    • WhatAmLemmy@lemmy.world
      link
      fedilink
      English
      arrow-up
      10
      ·
      29 days ago

      Best our corporate dictatorships can offer is requiring you to surgically implant a microchip into your brainstem. Everyone without the chip will be classified as woke, and cleansed by the AI killbots on judgement day.

      All heil skkkynet.

    • MareOfNights@discuss.tchncs.de
      link
      fedilink
      English
      arrow-up
      9
      ·
      29 days ago

      I also want zero knowledge personhood/Nationality verification for social media. Maybe with age too. I want to know where the accounts come from and whether they are a bot or not.

      It can be optional, as long as I get a filter to remove all non-verified people.

      • BrianTheeBiscuiteer@lemmy.world
        link
        fedilink
        English
        arrow-up
        11
        ·
        29 days ago

        It’s already easy as fuck. Most parents just don’t bother. The mandates should be on ISPs and cell carriers to provide network-level filtering. I filter adult sites on my home network and there’s no getting around that without cracking the password on the service or factory resetting the gateway.

    • username_1@programming.dev
      link
      fedilink
      English
      arrow-up
      1
      ·
      29 days ago

      Your point of view: We have so many fascists in reality, why couldn’t we tolerate some fascism on the internet?

          • ExcessShiv@lemmy.dbzer0.com
            link
            fedilink
            English
            arrow-up
            0
            ·
            29 days ago

            Care to elaborate which you think are fascist?

            Regarding age verification I think that things we generally don’t allow kids access to in real life could make sense to age restrict online as well. Something like gambling comes to mind, and I wouldn’t personally consider it a fascist action to limit access to that.

            Edit: again, under the prerequisite of properly implemented zero-knowledge proof so the site only knows if you’re old enough but not actual age, name or anything.

            • username_1@programming.dev
              link
              fedilink
              English
              arrow-up
              1
              ·
              29 days ago

              The definition of fascism is trivial: only one ideology is permitted (no matter what that ideology is exactly), anything else is forbidden.

              So any forced limitations without objectively obvious/proven reasons that are welcome by community is fascism. As simple as that.

              Limitations of theft and killings are not fascism because most people are against those activities. Limitations on education access is fascism because most people welcome education.

              Those who have different opinions can impose their own private limitations in the non-fascist community. Like age restrictions for this or that activity.

    • BrianTheeBiscuiteer@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      29 days ago

      Plenty of companies you already deal with already know who you are, thus how old you are. Cell carriers, ISPs, banks, stock brokerages, utility companies, and so on. It would be much more secure, done properly, for a service like this to provide a simple “yes/no” answer to the age question.

      • TechLich@lemmy.world
        link
        fedilink
        English
        arrow-up
        3
        ·
        29 days ago

        Whenever this comes up, this style of zero-knowledge proof/blind signature thing gets suggested. But the problem is that those only work if people care about keeping their private keys secret. It works to secure eg. “I own $1” but “I’m over 18” is less important to people and it won’t be hard for kids to get their hands on a valid anonymous signing key on the web. Because the verification is anonymous and not trackable, many kids can share the same one too, so it only takes one adult key to leak for everyone to use. It’s one of the reasons they push biometrics that at least appears to need a real human. Requiring ID has a lot of the same issues on top of being a privacy nightmare.

        I’m starting to think that actual age verification is technically impossible.

        • WhyJiffie@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          2
          ·
          28 days ago

          that is less of a problem when the private key is not too easy to export, and when each private key has ratelimits for how often can they be used

          • TechLich@lemmy.world
            link
            fedilink
            English
            arrow-up
            2
            ·
            28 days ago

            Those things come with a big convenience and implementation trade-off that slows adoption.

            If it’s hard to export for technical reasons (eg. Needs to be in a tpm) then that adds hardware requirements and complexity and makes it difficult to log in on other devices. If it’s a software thing, then it’s rippable. Either way “install our government app to watch porn” is not an enticing prospect for people.

            Aggressive rate limiting is also frustrating if you want to log into multiple things and it keeps blocking you because you’re using your key too fast, but if it’s not aggressive then it likely won’t be effective unless all the kids sharing a key are trying to use it at once.

            If it’s a temporary thing where you have to auth with the government to get a fresh signing key that expires, you have the issue of having to sign into the government when you want 18+ content which is super uncomfortable.

            I can see it being a browser-based thing set up a bit like video DRM but that would still need to talk to a government server each time for a temp key (like how licence servers work) and you’d need to be logged into their systems. It might still be the best option but it does still leak “X person wants to access 18+ content right now” to the government.

            I’m really interested in seeing a technical/cryptographic solution that actually works but so far I haven’t really and I’m starting to doubt that it’s possible.

  • NarrativeBear@lemmy.world
    link
    fedilink
    English
    arrow-up
    76
    ·
    29 days ago

    People have been forgetting that home routers come with something called parental controls.

    This is the most privacy respecting solution that puts all the power of parenting into a parents hands.

    If the government were really “thinking of the children” I would propose a group of bipartisan curators to curate the Internet. Thinking of how libraries function, we have librarians that classify books by age and genre. The same can be done for websites, and these curated lists be made available to parents. This can be funded by local government and be region and country specific.

    These lists would effectively function as whitelists, blocking everything that’s not on the whitelist. Parents can then turn on a specific whitelist for their kids if they so choose, and they gain access to a curated list of age approved websites.

    Parents can then, if they so choose, add or remove items form the list to grant their children access to specific sites.

    All this tech is already available and it would prevent children and adults from having to provide a website any extra information. It would also mean websites would now not need to build infrastructure to collect this information.

    Could you imagine a publisher of books needing you to send them a picture of your face to verify your age and identify before you even opened a book? Why are we proposing the same equivalent concept for a website or “digital book”.

    • lastlybutfirstly@lemmy.world
      link
      fedilink
      English
      arrow-up
      27
      ·
      edit-2
      29 days ago

      Governments know about parental controls. They know it’s the most effective, most efficient, and least destructive way to deal with this. They don’t care. And they don’t care about the children. If they cared, they’d develop their own parental control software, offer it for free, and encourage it’s use.

      If they really wanted to get draconian about it, as they are doing now with age verification, they would pass laws to prosecute parents who don’t use parental controls for negligence.

      But it’s not about the children. At all. It’s about preventing you and me, and all of us from talking to each other and entertaining ourselves. It’s about turning the Internet into TV, a one way faucet of entertainment and information controlled by the wealthy .001% where us peons can’t talk back.

      These age verification laws are just the first step. They kill small forums and games like Urban Dead, and leave only sites controlled by megacorporations that can afford the age verification infrastructure and the massive corporate fines if a single kid sneaks in. Once you get used to this, it’s easier for you to accept not being able to communicate online at all, or start your own forum, or YouTube channel.

      • halloween_spookster@lemmy.world
        link
        fedilink
        English
        arrow-up
        12
        ·
        29 days ago

        I’m skeptical that governments know about these solutions given how little people in general understand technology. It’s a “we’ve tried nothing and we’re all out of ideas” situation. Ideally they should have experts available to consult with when making laws to prevent BS like this.

        • Sturgist@lemmy.ca
          link
          fedilink
          English
          arrow-up
          3
          ·
          29 days ago

          @lastlybutfirstly@lemmy.world

          The people at the top certainly don’t. There IS absolutely large swaths of the government that definitely do. Even if only subconsciously, all (or most) government workers who use a workplace computer of some kind should understand that sites are able to be blocked. They might think you’d need to be a Grey Beard of the 16th Order to set it up, but I’d wager a fair percentage have tried to go to a site and it’s been blacklisted.

    • Sturgist@lemmy.ca
      link
      fedilink
      English
      arrow-up
      15
      ·
      edit-2
      29 days ago

      People have been forgetting that home routers come with something called parental controls.

      When my wife and I first signed up with Virgin as our ISP there was parental control turned on by default. Had to put in my credit card info to be able to flap.(Edit: Goddamn Autoassume! FAP not FLAP) This was 2021ish? So before the current stupidity.

      Also, it’s easy to feel like this is all being pushed by parents who just straight up refuse to properly parent their children…but it’s mostly being championed by Puritan lobby/pressure groups. They think even totally consensual, CIS/HET amateur porn is disgusting and sinful. They don’t want to see, so they’re on a mission to make it so literally no one can see it.
      With help from companies and people who have a vested interest in creating a panopticon-esque surveillance state. And the rest of the people involved in passing it are too old or ignorant or paid too well by the other two groups to stand in the way of it, or to have cut out the really egregious shit from these bills before they were passed.

      • NewNewAugustEast@lemmy.zip
        link
        fedilink
        English
        arrow-up
        12
        ·
        29 days ago

        Also, it’s easy to feel like this is all being pushed by parents who just straight up refuse to properly parent their children…but it’s mostly being championed by Puritan lobby/pressure groups.

        No, its being pushed by corporations who are interested in identifying you. They pressure the government who ALSO now takes an interest in tracking your for wrong think and power grabbing. The two work together for power and money, and to stay in power.

        Parents are just pawns who get manipulated into thinking this is a problem at all.

        • Sturgist@lemmy.ca
          link
          fedilink
          English
          arrow-up
          4
          ·
          29 days ago

          With help from companies and people who have a vested interest in creating a panopticon-esque surveillance state.

          First sentence of the last paragraph.

    • MinnesotaGoddam@lemmy.world
      link
      fedilink
      English
      arrow-up
      8
      ·
      29 days ago

      These lists would effectively function as whitelists, blocking everything that’s not on the whitelist. Parents can then turn on a specific whitelist for their kids if they so choose, and they gain access to a curated list of age approved websites.

      Yeah, i’d say if they were serious about “protecting children”, they should provide a “child safe” DNS to log onto for your kids’ devices.

  • Regrettable_incident@lemmy.world
    link
    fedilink
    English
    arrow-up
    43
    ·
    29 days ago

    IMO steam does a reasonable job of age verification - if you’ve registered a credit card, you’re obviously old enough to have one.

  • billwashere@lemmy.world
    link
    fedilink
    English
    arrow-up
    38
    ·
    29 days ago

    Age verification wouldn’t be a problem if there was a service I trusted that could verify my age, generate an anonymous one way hash or public/private key pair that could verify my age, and then dispose of all information that would could tie me to that info, I’d be ok with it. The problem is there isn’t a group that I’d trust (well that would be willing to do it) and everyone wants to hoard information and create a central repository that will be broken into. It’s not that there is a possibility it could be, but a certainty that it would be. This isn’t really an unsolvable technical problem, but an unsolvable trust problem.

      • Fiery@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        3
        ·
        28 days ago

        The EU actually was working on a system described above based on some sort of zero knowledge proof (so verification via your gov’t id, but without the verifying party being able to assert anything other than age > 18 or whatever data you want to verify)

          • prole
            link
            fedilink
            English
            arrow-up
            4
            ·
            28 days ago

            I think that’s the idea of zero-knowledge proofs. Nobody ever knows anything about the other party. Monero uses them (among other things) to be truly anonymous.

  • Zier@fedia.io
    link
    fedilink
    arrow-up
    33
    ·
    29 days ago

    Are we really “protecting” the children? Or is there a huge amount of powerful and wealthy individuals searching for an easy way to get to the children. With the global Trump Epstein Files scandal currently happening, how do we know they are not just stalking more kids? Not a conspiracy theory, just a different point of view. So many horrid groups in the world claim to be protecting children, but they always have a hidden nefarious agenda.

  • NominatedNemesis@reddthat.com
    link
    fedilink
    English
    arrow-up
    31
    ·
    29 days ago

    Banking and other finance related services are the only place where I don’t mind KYC. Others I drop as soon as they request it and I seek alternatives.

    But I will drop my online bank as well as soon google enforce the ‘only verified developer applications’. 90% of my applications, incuding system applications like laucher, are not installed from the play store. I plan to switch to a linux ‘phone’ and only use services which are usable from a browser / without google securnet.

    • Cherry@piefed.social
      link
      fedilink
      English
      arrow-up
      22
      ·
      29 days ago

      The thing is usually for the bank account you have gone through rigourous checks already to open or maintain and account to prove your age. So face verification via an app is redundant.

      We know it’s bull anyway but it’s at least a valid reason for no.

      I’m the same as you. I’ll switch to browser and TBh if they piss me off enough I’ll start using cash

      • plateee@piefed.social
        link
        fedilink
        English
        arrow-up
        2
        ·
        29 days ago

        Someone else in here said the laws are confusing age verification for identity verification. If anything, I’d be okay with identity verification for banking as an additional check. (Plus my bank already knows what I spend money on)

      • WhyJiffie@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        1
        ·
        28 days ago

        you should probably start using cash today, but you’ll probably still need a bank to receive your salary. unless you know away around employers wanting to pay through a bank account

    • brvslvrnst@lemmy.ml
      link
      fedilink
      English
      arrow-up
      2
      ·
      29 days ago

      I’m currently pushing back against discover requiring me to upload my ID to log in to my account. The amount of support people I’ve gone through that have certified me without needing to upload anything has been my main argument against it, but “they’re still investigating”

    • Echo Dot@feddit.uk
      link
      fedilink
      English
      arrow-up
      25
      ·
      28 days ago

      My bank once sent me a letter to my address, to tell me that they did not know what my address was. So I’m not completely sure they are exactly on the ball.

  • RisingSwell@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    15
    ·
    29 days ago

    YouTube’s can be broken and that’s the only one I cared about. I guess steam would be an issue if they tried it.

    Pretty sure anything else I can easily just bail on.

  • deadymouse@lemmy.world
    link
    fedilink
    English
    arrow-up
    13
    ·
    29 days ago

    If you’ve put your real identity on your passport on some platforms and you’re going to use those platforms for purposes other than work, get ready to be a good and loyal dog.

  • 0x0@lemmy.zip
    link
    fedilink
    English
    arrow-up
    12
    ·
    29 days ago

    It’s just a new “Think of the children”, only worse than going after backdoors in cryptography.
    Now it’s “OS-level” identity checks, which means TPM+secure boot hardware lockout.

  • IsoKiero@sopuli.xyz
    link
    fedilink
    English
    arrow-up
    10
    ·
    28 days ago

    Age verification is one thing, but I routinely verify my id online. Banking, insurance, taxes, various other government things, car registrations, some of the kids school stuff and so on. We have pretty decent infrastructure in place here in Finland and the entities I identify myself online already has my info anyways. I can use either my banking app or mobile verification to securely prove I am who I claim to be and the systems have roughly the same user experience than MFA tokens.

    Each of those are roughly zero-knowledge, the website I log in receives just “User with login token xxx is IsoKiero with SSN 123456789” and the tokens expire after a while. Also there’s restrictions in place that my insurance company can’t just sell my data to whomever unless I opt-in for their “marketing” program (not going to happen) and even then there’s some limitations on how they can use the data.

    The same system could be adopted to age verification, but that’s a whole another can of worms.

    • londos@lemmy.world
      link
      fedilink
      English
      arrow-up
      11
      ·
      29 days ago

      IRS should already know what I owe and not worry about who logs on to pay it.

      • M0oP0o@mander.xyz
        link
        fedilink
        English
        arrow-up
        2
        ·
        29 days ago

        Oh yeah, the states is like that right… I meant for filing and claming tax benefits.

    • RaoulDook@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      28 days ago

      A few years ago the IRS website wanted me to take a “video selfie” using a webcam to log in to access my tax stuff. I said Fuck That and ended the session. Finished my taxes through a 3rd party vendor instead.

      • M0oP0o@mander.xyz
        link
        fedilink
        English
        arrow-up
        1
        ·
        28 days ago

        There is no way the states is a real place. That’s beyond crooked and clearly trying to push people into using a 3rd party product.

  • TheLeadenSea@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    7
    ·
    29 days ago

    This is just more child abuse disguised as “parental rights”. It becomes clear how harmful this is when you realise that not all parents have their childrens best interests at heart (even if they think they do and sincerely mean well) and allowing parents to censor the information children have available to them allows them to censor information that the children learn only too late to prevent harm.

  • SnailMagnitude@mander.xyz
    link
    fedilink
    English
    arrow-up
    5
    ·
    29 days ago

    Personally I’ve found online banking, medical and travel services rather hard to resist.

    Those new mobile phone things the kids are using also have biometrics and internets and look pretty handy to have around.

      • LifeInMultipleChoice@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        29 days ago

        Which cleanup tool do you use, I’ve got 10 things flashing hundreds of dollars in subscriptions I’m fairly certain someone got access to all my accounts after the last person I called asked to do a screen share when he sent me a text saying all my photos would be deleted!?

        • Diurnambule@jlai.lu
          link
          fedilink
          English
          arrow-up
          2
          ·
          28 days ago

          I don’t use a cleanup tool I am in Europe and avoid american services like the plague. I got my identity stollen once by an employee of SFR which registered many accounts. Sinces these accounts had my ID I contacted the operator to change cut them and allowed full access to the logs to the police. Was solved really quick.