Hacker News new | ask | show | jobs
by urbandw311er 9 hours ago
The physical world has age checks when kids attempt to enter a premises with dangerous or unsuitable content - eg bars, casinos, strip joints. These seem largely accepted as a good thing. Why do so many seem to feel that the same protections are so outrageous when applied in the virtual world? Honest question, I can see both sides.
6 comments

It's just a different game. A web site is much easier to instrument than a physical place.

Say I go to a bar, I show my ID to the bouncer. My identity isn't recorded (unless they scan it with a device that records the scan data). Maybe they have cameras, my image isn't immediately associated with my identity, somebody would have to do a bit of work to connect the two. Maybe I pay with a credit card, now my name is stored in the point-of-sale system.

But I can still go to a bar with no scanner, no cameras, and pay in cash, and it's not a problem. Not suspicious at all. None of the above record-keeping is required, nor should it be.

Now, if a web site says I need to be provably 18+ to view their content, that's fine. I can take it or leave it. I have a choice.

When the law tries to mandate the software that can or must be run on my device, or tries to limit how I can communicate with my friends and family, now I have a problem. I consider my rights to personal computation and personal communication to be sacred. And I also believe in my right to privacy in these matters. I never needed an ID to send a personal letter, and my right to privacy regarding such communication is protected by law.

Finally, I see gathering of access data by a central authority (which I assume would eventually happen if social media sites started requiring validated ID) to be a concentration of power, and a dangerous one.

It may be a right you want but it's not a right you have.

There is no need to track access beyond what is already tracked.

I consider such rights to be my natural rights, regardless of statute. This is a product of my personal ethics and philosophy. In that sense, it is a right that I have. Whether I can successfully exercise that right without proscription is what I am concerned about.
When someone need to age check me in real life they make a quick look at me and decide they don't have to check any id. On steam I had to put in my age to see the page for GTA, even when being logged in with an account that is older than 18 years. It is a reason why it is Meta and the like that lobbies the most for age controls, they want more information about everyone
When you are age-checked in real life, the bouncer glances at your ID, checks the date of birth, checks the photo and lets you through, having not remembered a shred of that information. You are just one in a crowd of a thousand. If you're old enough, they may even wave you through without looking at any real data.

When you're age-checked on the internet, a scan of your ID goes on the website, then is likely forwarded to a helpful third party business. It extracts every bit of data, analyzes your picture, then carefully saves and catalogues everything, and returns True to the website, which may have also stored their own copy of this data, depending on how the process is implemented. This data is now in their hands forever. If, at any point in the future, you access another age-gated website that uses the same third party business, now there's nothing stopping them from correlating that private browsing data. How juicy. Adtech will love that. As you keep handing out your ID left and right, every single bit you divulge is recorded somewhere, forever. And at the end of the day, this is just moving data around, so there's nothing preventing your government, or the host's government, or all governments from passing a law that asks for that data to be shared with them - just in case, you know. Now there's many copies of your exact identity floating around, just one data leak or legal request away from revealing everything you've ever done tied in a neat little package. Real life ID is limited by constraints of practicality and our physical world, digital ID is limited by nothing.

And this is the best-case scenario I'm describing here. Imagine if they ask us to show our identities publicly, not just to the corporate all-seeing-eyes. Everyone would become doxxable by default, their whole life exposed and searchable, the mere idea of having secrets would be wiped away, communities made for marginalized or at-risk people would all fall silent.

Yes, there are ideas about zero-knowledge proofs and legislation about data privacy and whatever else. But these don't benefit either corporations or governments, and the average Joe doesn't care about putting his real name on everything, so we can pretty safely assume that this won't happen.

Can’t speak for everyone but for me if you start talking about the age thing you’re already missing the point.

But if we have to talk about age, if I want to buy alcohol in my country at least, I don’t need to show my id because I don’t look under 18. If I did look under 18 the shop keeper would just quickly do what amounts to a boolean check, old enough or not?

Regardless of the intensions of the people who are pushing this (which we can’t know for sure and likely varies), the fact is that there’s so much surface area for abuse here.

You’re asking everyone to submit their id in what could be a permanent way, there’s no way for me to know what you’re doing with my id, or how long you’re keeping it for. Unlike the in person example, I cannot just take the physical copy back.

Now you might be tempted to mention that at some venues they scan your physical ID and your face. Yeah, I don’t like that either. Just because there’s precedence doesn’t make it right.

Parenting shouldnt be outsourced to the state.
We don't talk about age verification like in a bar. We talk about age verification like in the internet, where every of your step generates data. So you don't verify your age, you verify your identity. It's like you step in a bar and someone writes down every word you say, every drink you order and every person or place you look at. And then he places your complete name and address on it and stores it in his closet to pull it out when he needs it.

Would you really enter a bar, casino or strip club when it would look like this?

We don't talk about children, we talk about everyone here.

Don't forget that the dossier about your visit is then photocopied and mailed to several other places in addition to being in the bar's closet. Each one of those places is staffed 24/7 by workers that organize incoming data, as well as people who tirelessly look at the growing personal file of every person that has ever done anything, and make accurate deductions based on what they see. Who you know, what you like, where you were, what you were doing, what you bought, who you speak to, what you're hiding, what you think. Everything. Those people then distill all of this into a scarily accurate report that is copied and sold or given to god knows who.
A decade ago I used to joke that Google should have it's own dating app. "NOTIFICATION: See that person at the other end of the bar? They share the same interests as you and like to frequent some of the same places. They share your political views. You even have some friends in common. They are recently single. Go over and say hi, here are some suggested conversation topics..."

It just seems too obvious now