Hacker News new | ask | show | jobs
by big85 3 days ago
> it is possible to verify your age without disclosing who you are to the site you're visiting, and without disclosing what site you visited to the government.

I can't believe people are really okay with a system where you have to show your real face to access websites. Cameras on phones went from a novelty to a government mandate so you can be observed.

There are various other potential methods to verify one's age, all of which are forbidden by OFCOM. Account age, zero-knowledge proofs, key signing, some kind of OAuth thing, physical tokens that require proof of age to buy, etc. The only permitted ones require your to link your real-life identity. This is a huge boon to the intelligence services and law enforcement.

Even among the few permitted verification methods, there are obstacles. Each site usually provides only one verification method at one verification provider. You may have to trust a company you never heard of before. Sometimes the photo fails (maybe their system thinks you don't look old enough) and they ask for ID too, or the photo fails and you are locked out of verification. Some services only allow credit card verification (e.g. Steam), so if you have poor credit you aren't able to even view the store page despite being of age.

What I say is, we don't need any of this. For thirty or so years we had client-side optional Parental Controls, and it worked fine. Many adult sites voluntarily use a <meta name="rating"> tag to ensure sites are correctly identified. The ability of adults to access adult content was not impeded. Parental Controls work better than verification because 1) many sites will not deploy age verification, and 2) it's trivial to overcome photo-based ID by holding your device up to a picture of an adult on a television set.

2 comments

> There are various other potential methods to verify one's age, all of which are forbidden by OFCOM. Account age, zero-knowledge proofs, key signing, some kind of OAuth thing, physical tokens that require proof of age to buy, etc. The only permitted ones require your to link your real-life identity.

This is just not true. See 4.17 here, for example [1]

[1] https://www.ofcom.org.uk/siteassets/resources/documents/cons...

> The only permitted ones require your to link your real-life identity. This is a huge boon to the intelligence services and law enforcement.

Then let's talk about THAT!! why is that not the discussion instead of "nah, we'll find a solution some other day, for now, let's not solve anything"??

> Even among the few permitted verification methods,

These laws are still being debated, what's permitted has not been decided, why is Signal not advocating for a privacy friendly alternative. Why are our options lose all privacy to the most horrible people ever who will do us harm versus let the children suffer!

> You may have to trust a company you never heard of before.

Why do I have to? Why can't the government itself issue something as simple as a timestamp CA certificate signature for a secret that expires every few weeks, requiring facial/ID verification directly with the government to generate a new secret? the site only needs to verify that the signature is correct. a signed token you show random sites. and this is the most naive idea i brought up for discussion without things like zkp even considered. Lawmakers aren't being told by the likes of Signal "there is a better way to do this, let's discuss" they're being told "ignore what all the scientists, research, law enforcement, social workers are telling you so we can watch porn in secret".

> For thirty or so years we had client-side optional Parental Controls, and it worked fine.

It absolutley did not work fine! the toll of human suffering is inexcusably abominable! I shudder in confusion between whose head i should rip off or why this damn planet hasn't been burned down to ashes already at the very thought of all that has been perpetrated using this technology. The internet multiplied and empowered many things, chief amongst them is human cruelty and apathy.

> For thirty or so years we had client-side optional Parental Controls, and it worked fine....

Save your breath, even amongst those who genuinely wish to do well, they have employees and user generated content they can't keep up with. There is no excuse for this. Forget about the tiny span in human history that is the past 30 years. How many people died of industrial accident at the begining of the industrial revolution, how many people died because of car accidents before all the car safety and traffic laws were in place. Take that and multiply that by like a billion and that might come close to painting a fair picture of the internet. Just because you don't see it, doesn't mean it doesn't happen. The internet isn't special, it's just a tool, a technology that connects people. Except billions are connected, and now they can abuse and harm each other across national borders , timezones and continents and maximize their profit from it.

HN and tech-world in general is like any other industry that caused massive suffering until it was regulated. I keep making the same simple comparison of a stripper IRL vs live cam porn over the internet, and no one in this thread even wants to attack that simple example that I picked because it isn't overly sensationalized and universally accepted that laws should force strip clubs to check IDs in any country on the planet. I didn't bring up pedos, human trafficking, revenge porn and so much more in between. and that's just the sexual dramatic stuff, not the seemingly harmless stuff that is easier to brush away and dismiss.

People can see your face and make decisions when they interact with you IRL, they can't over the internet. The problem is huge and the fact that the internet has been young and unregulated does not excuse looking the other way.

I can't believe I'm defending politicians' (however ill intended) agendas against HN/tech-world. but here we are. If things progress this route, I would even cheer as everyone (self included) loses any semblance of privacy or democracy because the alternative was these masses keeping looking the other way at human suffering instead of finding sensible middle grounds, especially when the tech is there. This is insane to me! things crypto-bros (both kind!) have been trying to make main stream like zkp and homomorphic encryption and so much more can actually solve a critical fault of the internet, and the choice is to just let people suffer instead of risking a potential slipper slope.

> The internet multiplied and empowered many things, chief amongst them is human cruelty and apathy.

Bare in mind we aren't banning the internet, just kids on social media.

> Take that and multiply that by like a billion and that might come close to painting a fair picture of the internet

A billion people have died from.... the internet? Youve GOT to explain this one lol how exactly?

> Bare in mind we aren't banning the internet, just kids on social media.

It's neither. it isn't social media only, there will be various sites that are age restricted, similar to IRL businesses.

> A billion people have died from.... the internet? Youve GOT to explain this one lol how exactly?

I didn't claim 'died', you assumed. I meant sum total of suffering and pain facilitated by it. The internet is just a "road", except it connected everyone. sex, violence, extortion, slavery, you name it. a decent argument could be made that in the past one or two decades alone more slaves were trafficked and traded than in the entire history of the transatlantic trade, except smartphones, wifi and 5G were used to facilitate trade and allow real-time live HD monitoring of the "merchandize" and advertisement to buyers thereof. think of it in terms of graph theory perhaps, edges and nodes and all. just in the past 30 or so years the planet's population doubled and all those "nodes" have the capability to form edges with all other nodes on demand, interact with and in engage in unregulated commerce (cryptocurrency doesn't help either).

> think of it in terms of graph theory perhaps, edges and nodes and all.

So we should ban letters as well because of all the badness they facilitated? Lots of crime has used telephones, we should also ban telephones yes? Because graph theory's etc?

again, bad faith argument.

as you said, the internet isn't being banned, so why would you stretch what i said to mean "ban letters"? sending letters to minors might require age verification if it were a real problem, you already need to verify your age to open a cell service, children can't sign up for mobile plans. you're trying to make this about something it's not so you can win an argument, I don't care who wins the argument, let's solve the problem. Your whataboutism doesn't have solutions attached to it, only winning of internet points.

> The internet is just a "road", except it connected everyone. sex, violence, extortion, slavery, you name it.

The internet doesn't cause slavery. It's facilitates it in the sense that its a communications network. To say THE INTERNET caused slavery is like saying telephones cause drug dealing because dealers use phones to contact drug users.

> sending letters to minors might require age verification if it were a real problem

Lol

>People can see your face and make decisions when they interact with you IRL, they can't over the internet

Man you're just reaching at this point... Should we ban telephones, and written correspondence also? You're hysterical

phone sex is already banned without credit card verification or if you sound like a minor for example. and you're being disingenuous as well, clearly this entire thread is not about "correspondence", i clearly said "interact", simply talking to kids IRL doesn't require ID verification either. But when you enter a bar, a night club, a sex store, buy alcohol at a convenience store, etc... or hang out at the play ground people can see your face and judge your age. You can't pretend to be another child at a playground as a grown person and fool everyone. If the actuality of people calling or mailing children to groom them like that was a reality, and tech existed to verify age over phone/mail, then absolutely, can you articulate a reason why that shouldn't be done other than you not wanting to be a tad bit inconvenienced?

Speaking of, do you know how common it was by all sorts of middle parties to listen in on POTS phone calls? or paper mail being intercepted by law enforcement? (not that I support either - just putting into context the history of surveillance and societal acceptance of it).

> phone sex is already banned without credit card verification

And so is inciting a minor for sex, internet or not.