Hacker News new | ask | show | jobs
by ayashko 28 days ago
Something I learned just recently—the Australian government (surprisingly!) actually recommends VPN usage, they even provide a bit of a guide and how to; https://beconnected.esafety.gov.au/topic-library/advanced-on...
2 comments

The very same office of the eSafety commissioner that is enforcing age verification for social media.

https://www.esafety.gov.au/newsroom/blogs/social-media-minim...

Yes. Isn’t effective regulation of dangerous products wonderful.
Effective in that its easily bypassed, and dangerous insofar as the government appears to be happy for the use to continue as long as kids use their dogs face to bypass it.

Of course, when you point this out they step into "Oh but we knew it wouldn't work immediately" which is so silly its staggering.

But of course, the technology has been applied immediately to moral panic stuff like porn also.

It is, provided there is a broad consensuss of experts in the field who agree on the danger and what to about it, the government regulates based on that information and that the regulation is effective.

Apart from those things, the Australian government did an excellent job.

Who are the experts in the field, and who decides they're experts?

"More doctors smoke camels than any other cigarette".

https://childrightstaskforce.org.au/

>Our membership is made up of advocates, service providers, individuals and experts, speaking with a united voice to promote and realise the rights of Australian children.

>The Child Rights Taskforce is co-convened by UNICEF Australia and James McDougall and is led by a Steering Committee of child rights organisations and experts.

Here is their position on the social media ban.

https://apo.org.au/node/328608

I'd add one of these: https://fortune.com/2026/02/21/peter-thiel-bill-gates-steve-...

but uh here I am on a social media site rebroadcasting that message... I'll add that I'm for an open internet, I don't think we need age verification. Walled gardens have a lot more shade then alternatives. Becoming aware of the many forms of abstracted gambling (time, tokens, or otherwise) makes the internet a much more affordable and sane place.

You say that like it's a bad thing. Not everyone thinks so.
You're right, some people are misguided and think age verification can be done in a way that isn't the death of privacy and anonymity online.
Don't we all hate social media? From that standpoint, anything that makes it hard to use or come with direct negative consequences is good.
I wholeheartedly disagree. When we consider a policy, it's not enough that the narrow outcome is good. What also matters are the broad outcomes and whether or not the policy is principled.

We presumably all hate Alex Jones. Does that mean the goverment saying "Alex Jones is banned from communicating publically" is good policy? Even if we agree the direct outcome is good (which I do), the principle of "the governement can silence people it doesn't like" is profoundly dangerous. In such a case I would argue we should all resist such a policy, even if we like the outcome (Alex Jones being silenced) because the principle (the majority can use the governement to silence a minority) is terrible. This isn't even accounting for the messy second order effects, e.g. radicalising Alex Jones supporters.

I think that applies to social media too. I don't like social media. However even more than that I'm scared of people using the government to limit what other people what they can and can't do for "their own good". This isn't a principle I think we can get behind. I think it's a principle that has motivated a lot of misguided acts in the past (e.g. criminalisation of drugs, sex work, taking the kids of first nations people in Australia, ...).

The categorical imperative should be used here. "Arrest people I don't like" fails the categorical imperative. However, "check things that destroy society and make everyone worse off except for a select few if left unchecked" easily passes the bar.

Nothing is absolute. There is a spectrum without an obvious optimal point. The recent neonazi rally in the UK did a lot of damage that could have easily been prevented.

Why does most of Europe have such a higher standard of living?

Age verification for social media looks like it is different from age verification for internet. But it really is not.
Is social media the internet? You could also open a website.
What do you mean by "social media"? We all hate Facebook, but do we all hate Hacker News? Mastodon? A Discord or IRC community for an online game?

I'm all for age restrictions for certain kinds of social media, but age verification is a system of surveillance and the death of online privacy.

So, the actual laws are targeting things more specifically than just "social media". Some are talking about intentionally addictive content algorithms, or personalized algorithms. Others are naming specific named companies.

Don't confuse social media with social networks. Social media is media - they select what you watch, like a TV channel, but personalized for each user. You might get a narrow choice from several options they selected. Social networks are just tools for communication.

I used the word "algorithm" so I'm going to preemptively point out that it means something in relation to social media that's more specific than what it means in computer science.

They should've social media outright if that was the point (it's no more healthy for adults).
Adding regulations like this makes it way harder for any competition to come out of the ground.
I don't hate social media. It's very amusing to me to hear about how much people hate social media... on social media. I really think people need to stop using social media for a couple of months and see what it's like to not use it.

Personally I find the lack of social media use to be a downside. I never used Facebook and I do occasionally think that I missed out on a lot of stuff because of it.

We already learned long ago that real name policies don't make people less toxic - they just double down on their bullshit.

Seriously it is a sacrifice fallacy that we will actually gain anything by giving up anominity.

This black and white thinking that anything bad for things you dislike is frankly just incredibly spiteful and stupid.

Which is true. Irma/Yivi [1] in NL/BE proves that to be the case. But it always works with a trusted third party. The client, after confirming auth with the human, generates a unique key for the platform. The platform asks the trusted third party to verify this key, and then a scope is defined. For example: 'is this person 18+?' the response to the platform is then 'Yes' or 'No'.

[1] https://yivi.app

So, the trusted third party gets to know which sites you visit?
No, they don't have to (this is a common myth and FUD). That data can remain encrypted and private. For example, the token could be signed with the private key from person and TTP. They do know when people visit a website (or other entity requiring auth) but anyone with network access does.

All the platform gets to know a person 18+ is visiting their platform. In their data analysis, they could add such information to the rest of their data analysis such as IP, but this wouldn't be within scope (illegal in EU). Just worth it to mention in case a platform gets compromised.

So:

Username Bob, age 18+ (verified), from IPv4 1.2.3.4, visited PronHub, at 2 AM, with browser XYZ.

vs

Username Bob, from IPv4 1.2.3.4, visited PronHub, at 2 AM, with browser XYZ.

If Bob isn't logged in, they have to auth every time they visit.

And this is going to happen due to nefarious actors. LLMs (AI), as well as state actors in countries behind the other fence of Iron Curtsin in the New Cold War.

No.
The third party is never trustworthy. Such a system is the death of all things good in effect - it makes a single party very attractive to compromise. Compromise is so easy in practice that imagining a group of people is preventing it at any kind of scale is purely magical thinking.
I'd be interested to know how it could be a good thing.

I'm all for shutting down Facebook entirely and jailing their executives, but i don't think age verification is an appropriate answer. It's already common at least here in France for Facebook to request user ID cards (wtf) and that has not at all stopped harassment, nazism, fake news, etc...

What age verification has to do with stopping fake news or harassment?
Are you talking about the goal being bad, or the methods being bad, or that the goal inherently cannot be achieved without bad methods?

E.g. I think something pretty uncontroversial would be a goal of blocking kids from the likes of TikTok & Instagram between 22:00 and 08:00.[1] But if I'm an adult, that's a different matter. Ok, so how do I prove I'm an adult, without society turning into a surveillance state, or surveillance capitalism?

Next up: wouldn't it be nice if e.g. someone over the age of 30 couldn't initiate chats (including comments on posts) with 13 year olds? For hobby exceptions (e.g. joining a computer or chess club) it would make sense to either have parental approval, or some moderation requirements for parental approval exempt groups.

[1] I'm here not saying that this is the biggest problem, but it should at least be uncontroversial.

The goal is good. Like i said, i think those kinds of social networks are evil and their executives should be jailed.

That being said, the methods are really bad. Are they efficient? No. Kids can still access discord despite age verification. And some kids can still max out their parent's credit card despite not being old enough to own a bank account.

Do those methods produce other net negatives? Yes. Standardizing digital identity leads us one step closer to dystopian nightmares from sci-fi books.

Are there better alternatives? Yes. Jail the CEOs. And if your government is too corrupt for that, they could at the very least raise awareness. Governments didn't have to mandate fingerprint readers on cigarettes to fight smoking. They found other ways and there are less kids smoking now than in the previous generation. Also, they could still jail the tobacco CEOs who lied publicly (and under oath) for decades.

Ok, so step one is jailing the CEOs. Then what?

Any time someone builds a social network, they'll be equally liable for any danger for kids that result? De facto making social networks illegal?

Or is a moral/legal social network possible? If so, then it seems we're talking about two different things: 1. jail the CEOs of these companies… for… something (it's unclear to me. Not that I disagree, but you've not made the case). 2. How can we make social networks "a good"?

Surely you can't mean banning all social networks, because HN is a kind of social network.

What is an evil "kind" of social network? "I know it when I see it"?

Some people think it'd be reasonable to have every car reporting it's GPS position and speed to the government to stop people speeding, or to have facial recognition cameras on ever corner to catch criminals, or to make everyone carry an ID card that people can demand to see.

On the face of it living in a police state is safe, and secure, and actually increases your freedom to just live your life without pain. And if these systems were never abused that might be true. But sadly, the reality is that every time these things are implemented they end up being used against the citizens. So they're always a terrible idea.

I guess some people living in countries with high crime rates are just tired of it, therefore they are just looking for any solution. In safer countries where you don't have potential criminals on every corner the perspective is different. I wouldn't want 24/7 surveillance in Poland or Czechia but I would consider them being lesser evil in big US or UK cities.
Which UK cities have high crime rates? The murder rate in the UK is much lower than in the US and slightly higher than in Poland, been trending down for a long time and pretty typical for a developed country.
Which points to another issue: people's perception of how much crime exists probably correlates more with how much media they consume than what the real crime rates are.
Nice straw man! Be a shame if it was a logical fallacy.
That’s funny, I wonder if they might remove it since it is a common way for people to circumvent the ID requirement laws for certain sites.
They probably should at least update it -- I don't think a government should recommend free VPN services. Too many of them are a form of botnet, malware, ddos, etc.
And most people don't even need them any more. The days of free WiFi hotspots being able to easily steal your credentials are long gone.
They never went away, just from your mind. Look at cheap xfinity wifi hotspots everywhere that still steal your credentials in the form of phone number and email address. The bar I went to last night has a free wifi hotspot like every establishment ever.

Misinformation smells like your own farts, disgusting to everyone but you.

But unfortunately, a VPN won't protect you from captive portals. So not entirely sure what your comment adds to the discussion other than being unnecessarily rude.

For other readers who may be too young to remember, improper privacy controls (unenforced HTTPS, poor encryption in the form of WEP, easy MitM attacks, etc) meant that public/untrusted WiFi was a legitimate security risk as things like passwords, bank details, etc were very easy to steal as they were sent unencrypted over the air. This is fortunately much less true these days with the advent of better protections across the entire stack (HTTPS everywhere, WPA*, etc) but unscrupulous VPN merchants still use this outdated argument to try to sell their products to less technically-savvy customers.

What these technologies (and VPNs) _do not_ prevent is the legitimate (and consensual) capture of user data by captive portal software (email, phone, etc), which is typically submitted by a user wishing to connect to a public network. This is what the parent comment is mentioning. Different risk profiles, obviously.

Yeah the being asked for an email or phone for free wifi option is completely different from the “I can MITM all your web requests” which is what needs a VPN.

I usually give a fake email or phone number to get free wifi anyway.

If the captive portal for an open network uses HTTP, then anyone nearby can see the information you submit.
The hotspots themselves may be iffy but almost everything uses https these days.
Main source of residential ip's you can "rent"?