Hacker News new | ask | show | jobs
by notepad0x90 3 days ago
zero knowledge proofs exist, don't they? also it matters "private from whom, and what". You can make what sites you visit private from the government, and your identity a secret from the site, but the inverse isn't true, the government would know the identity, and the site would obviously know someone visited it.

The problem with this whole thing is the expectation of privacy online for interactions where their IRL equivalents don't have such an expectation. Even if there was no harm being done to anyone, it isn't a rational argument if you subscribe to the ideal of equal treatment under the law.

2 comments

Zero knowledge proofs exist in theory, but none of these age verification laws that are introduced use them, probably on purpose. I'm certain that every government will want to know what sites everyone visits.
but why does it have to be that way. why not have zkp age verification processes anyways, inconvenience aside, what's the harm. If they refuse to let us use them, they need to explain why. I don't disagree with the malicious intent you're talking about but we can have it so that they have no legitimate excuse to require collection of site visit data. all the emotion and fervor aside, why can't we talk about having this as a standardized process that excludes third parties.

Governments are banking on being able to purchase that site visit data anyways, bypassing their own laws that prohibit them to do surveil, we can require them by means of technology to comply with laws and for the last time resolve the "but the children" argument.

ZKP age verification doesn't verify because you can just copy someone else's token.
it works if it is time-scoped and full age/id verification is done directly with the government. if you're malicious that way, you can likewise verify your id/face and just give a minor access after verifying anyways. you can get a zkp token that can prevent the site owner and the government from colluding and revealing your activity. zkp is one of many ways to solve this as well.
You can also... ask someone else to pass selfie-age-verification during an account registration, no?
When it's not zero-knowledge they can see who registered the account and that it's not the same person who seems to be using the account.
How would they know a minor is using an adult-verified Signal or, say, Youtube account?
Face scan to sign in. Or watching cocomelon all day.
> Face scan to sign in.

This is not in any current (proposed) laws I'm aware of.