Hacker News new | ask | show | jobs
by mohsenari 917 days ago
Growing up in a country with internet censorship, I can tell it is a huge slippery slope not to mention the dangers of having to upload government ID to access adult websites. I hope politicians come to their senses on this.
3 comments

If they really want to do this without any privacy invasion ulterior motives, then someone needs to push an anonymous credentials scheme. Have the government give people age verification keys. A person uses their key to verify their age on a website, but the website won't know who they are, and the government won't know they accessed said website(outside any other means of tracking internet traffic).
In China they already took a step further. The kids were using their parents' ID card to play games, so those games had to implement face recognition in addition to the ID card.

https://www.theverge.com/2021/7/9/22567029/tencent-china-fac...

I can see a unique dick registry now.
> adult websites

Don't buy their framing - every website with user-uploaded content is an "adult website" in the eyes of this law. If one of your users uploads a single jpeg of porn/hateful political rant/description of self harm, you'll be liable for "not implementing adequate measures to prevent minors from being exposed to pornography/harmful material/incitement to violence".

"Adequate measures" are, of course, a complete loss of anonymity, adding your website to the surveillance state apparatus.

The bill doesn't say anything about uploading government ID.

It says that it is illegal for a company to to give porn to kids. The company can defend it's self against the charge if they have a "prescribed age-verification method".

> It says that it is illegal for a company to to give porn to kids.

No it doesn't. It says "makes available sexually explicit material", which means any website or app that allows user-generated content.

>The company can defend it's self against the charge if they have a "prescribed age-verification method".

And the prescribed age-verification method is going to be government ID.

How else would you verify age?

If I buy alcohol I also need a "government ID"

There are blind, privacy-preserving ways that this can be done. A third party verifies a government ID and issues an age-verification token. The token is passed to the porn site, which has a way to verify the token without talking to the entity that issued the token.

That way the porn site doesn't know who you are (it just knows "this person is old enough to access this content"), and the age verification entity doesn't know what you used the token to access.

Of course, this scheme is more complicated than building an age verification system that involves uploading a government ID (or asking a third party directly to verify someone's age), so ultimately no one gets any privacy or anonymity.

What do you base that on?
What age verification system exists other than government ID?

The only way we ever verify someone's age for legal purposes, at least here in Canada, is by checking government ID. Birth certificate, driver's permit, photo ID card, health card. They all have your birth date on it. A younger adult may need to show this ID if they look particularly young and want to buy cigarettes or alcohol.

Though relevant to the topic, I would note that the same young adult may need to show ID to buy pornography on DVD or Bluray at a retail store. That's already established and I would think few object to that. It's the security and privacy issues that arise when we start sending this data in a recorded and logged form over the Internet. This remains true whether it's a government ID or a privately issued ID.

>It's the security and privacy issues that arise when we start sending this data in a recorded and logged form over the Internet.

That's for consumers and distributors to figure out. The lack of trust between consumers and distributors is no reason to continue allowing online porn to be exempt from long established and agreed upon controls.

I think the security and privacy concerns absolutely are a reason to continue allowing this sort of thing to skate by. At least until the security and privacy concerns can be addressed.
On the basis of what the hell else could you reasonably use to establish someone's age? A copy of their birth certificate?
The crypto, gambling current implementation in place at the moment.