10 ms·
Another Conflict Between Privacy Laws and Age Authentication–Murphy v Confirm ID
- camillomiller 2y agoI think this is one of those processes that the free market can’t solve unless you have extremely strict regulation. As bad as it sounds, I also think a government funded partially public entity should provide this form of verification. If you remove the need to profit to be sustainable for a company like this you remove the need for growth. And if you do that, you also remove the need to find sketchy ways to exploit the data.
- mikem170 2y agoMight be a way to give the post office something useful to do. They already have offices everywhere.
- camillomiller 2y agoIn Germany in fact we have Postident, which works fine, but is a bloated and unintuitive process and only makes sense for higher-margin and higher risk verification purposes, like opening a Bank Account.
- 2OEH8eoCRo0 2y agoWe aren't anon on the web and we need to get over it. Fine sites that allow minors to view porn and the free market will figure out age verification real quick.
- hooverd 2y agoWe should be though. Also, what is porn and who gets to define what porn is?
- ETH_start 2y agoNo. Sites shouldn't have to ID everyone that uses them. The internet shouldn't be turned into a nursery for children just because parents don't want to do their job and supervise their children while they're on the internet. If you want a curated internet that is child-appropriate, then you create your own private internet. You don't force the rest of the world to censor itself.
- itscrush 2y agoWhy isn't your name in your profile here or why aren't you easily identified if that's the case? You're not all that identifiable here.
- rockskon 2y agoJust like the free market figured out cybersecurity? It ain't a magic wand that fixes all problems, buddy. Some problems just aren't possible to fix without making changes that sacrifice values core to the economy and of our culture.
- 2OEH8eoCRo0 2y agoI buy alcohol, I'm age verified. The govt didn't need to build a big fancy age verification system for businesses to use, they only needed to fine businesses who sell alcohol to minors. The businesses will figure out how to be in compliance.
- rockskon 2y agoA website isn't comparable to a physical storefront. What an absolute boomer thing to suggest. What tech discipline are you in? Policy? Because I have serious doubts you have any technical experience. A website is mediated by computers. Computers make copies of information that is sent to them because that is how computers work. Tech companies also like to collect and sell personal information. What do you think will happen with records of people's fetishes in the hands of companies that like to sell personal information?
- 2OEH8eoCRo0 2y agoPhysical storefronts don't collect and sell your information? > What do you think will happen with records of people's fetishes in the hands of companies that like to sell personal information? Not my problem and tangential to age verification.
- rockskon 2y ago> Physical storefronts don't collect and sell your information? I have no reason to believe a physical strip club would sell info of which ladies I look at to anyone with a couple of bucks. I can't say the same about websites. > Not my problem and tangential to age verification. You can't demand a solution while ignoring the cost and expect to be taken seriously.
- The28thDuck 2y agoIsn’t that what the DMV is in the US?
- pasc1878 2y agoNot for those who are physically unable to drive. And in countries where you need to be 17 to get a driving licence and where adulthood for many things is 16
- LinuxBender 2y agoThe free market would likely go for a low friction solution. Require adult and all sites that allow anyone to upload content to add the RTA header. Make a law putting liability device/app makers to look for the RTA header and put the overall liability of enabling parental controls on the parents. App out of compliance could be pulled from the app store until compliant. Not perfect in any way but is trivial to implement. [1] Plenty of sites have already implemented it. [2] Privacy compliant, no data leakage, no sharing identities, no third parties. Server operators just add one header, done. App and device developers would have to dig up some old code that can look for a header and check parental controls. Most kids are on phones and tablets. Complete mobile in two years as phase one. Desktops four years out as phase two. That may seem like a long time but this discussion has been ongoing since 2001 at least. All the big tech companies have lobbyists. Have your lobbyists push for this and this could become a non issue in very little time. [1] - https://www.rtalabel.org/index.php?content=howtofaq#responseheader https://www.rtalabel.org/index.php?content=howtofaq#response... [2] - https://www.shodan.io/search?query=RTA-5042-1996-1400-1577-RTA https://www.shodan.io/search?query=RTA-5042-1996-1400-1577-R...
- Terr_ 2y agoExactly, have sites merely disclose rough categorizations, move the decision-smarts to devices, and put control in the hands of the owners of those devices. This places a majority of the cost of implementation on the people who actually want to use it, avoids a creepy Orwellian surveillance system, and enforcement is moved into a physical immediate reality that the average parents can see and monitor. It also means you don't need to worry about visitors who are unmarried under the age of 16 years and three full moons who may not see unclad ankles in Elbonia.
- alwa 2y agoThis seems like an elegant approach. Why hasn’t it gained as much traction as these third-party-ID kinds of approaches? Is it just the lack of an organized constituency? Resistance from device manufacturers/store operators? Too much control situated with individual families, so the absolutist political voices feel like it’s not pure enough? Or do they figure it’s too easy for a clever kid to bypass?
- protocolture 2y ago>I think this is one of those processes that the free market can’t solve unless you have extremely strict regulation. The free market solves it by not doing it.
- chii 2y agoand that is the correct solution. Verification is not required on the internet.
- hansvm 2y agoThat works great, so long as you don't have any malicious actors interested in the treasure trove of data you've amassed. It's kind of like how in physical systems, if you kill all the predators in a few square km it leaves a void where any predator capable of evading your traps is able to prosper far more than you could have imagined, requiring intense efforts to actually secure whatever it is you were protecting. If you create an environment that's attractive to predators (giant pools of interconnected, personal data and a system designed around access to that data being equivalent to being the person in question), so long as there are predators you can expect them to infiltrate that system unless you apply extremely costly countermeasures. Rather than in-housing the identity verification (and allowing DOGE et all to slurp that up), I'd rather ban that sort of thing altogether and take out the private sector alternatives at the same time. If we really think that's not possible, a centralized implementation is usually preferable (e.g., why do I need to provide more information and photos to id.me than I ever did to the IRS when all I'm trying to do is access my tax data, and why do the new terms of service strongly suggest that my personal information is being used for reasons far beyond identity verification). I don't think that's required for most of the identity-related concerns I've seen the last few years though.
- notTooFarGone 2y ago100% agree. And I don't know why it is not a thing already. It's NOT a hard problem to solve. Submit the user given data to a government platform and this platform can then validate with NFC + government ID that it is indeed the correct person. It'd be such a boon for any age verification legislature in the future.
- Nasrudith 2y agoThe free market isn't going to solve it, because frankly it isn't a real problem and therefore cannot be solved. It is a neuroticism on a societal level to live in fear of minors accessing 'forbidden content' that we have experimentally proven isn't really all that bad for them anyway. But it is socially unacceptable to state that the emperor is buck naked.
- kalaksi 2y agoFree market isn't going to solve it because there's no profit in it. Quite the opposite.
- afdslfslkfdsk 2y ago[flagged]
- deleted 2y ago[deleted]
- mianos 2y agoI like the snide comment that implies the Australian government does not have a clue about the consequences of their policies, let alone any idea whatsoever how to verify age without government ID. The Australia politicians are the laughing stock of the world and that's a pretty competitive arena lately!
- chii 2y agoi just dont understand why pollies continue to try implement age and verification policies, and always try to use the "think of the children" argument. Nobody wants it. It's a form of control on the internet that i would not desire. I don't care about preventing any harm, because the said harm doesn't get prevented in the first place, and new harm is placed on me! Therefore, anyone in their right mind ought to completely oppose any sort of verification scheme on the internet. If you want verification, get the customer to pay a nominal amount via credit card - that is as far as it ought to be allowed to go. Any further, which includes demanding by law for verification, should not be allowed.
- mianos 2y agoI have a 14 year old daughter, it is was actually possible, I'd want it. But, I know better than thousands of policy writers in the Australian government and know it's not actually possible without destroying the internet as we know it, so, I don't want it. You can't use credit/debit cards, think of the children and the 0.001% of people in Australia without a card.
- anonym29 2y agoEven if I don't necessarily agree with it, I can understand an argument for not allowing credit cards to suffice for this (not everyone has good enough credit to get a credit card - we shouldn't discriminate against the poor and all), but shouldn't every adult legally residing in Australia be able to open a bank account and get a debit card, even with bad credit?
- 2y ago
- mjevans 2y agoThe Internet should be for Adults. Do NOT allow children onto the full Internet. Allow websites to Opt IN to claiming to be safe for an age / having a given content, and allow indexes to create an allow list of sites that have opted in. Any site operating in bad faith should be subject to false advertising enforcement, or if clearly aimed at nefarious activities that sort of crime. User generated content is "Unrated" until moderated.
- BriggyDwiggs42 2y agoNobody wants kids on the internet (well, most people), but the devil is in the details. I hate the idea I’m expected to provide proof of id to these companies. If poorly implemented, which it will be, then they could use that to correlate advertising to me even when I use a whole suite of tools to prevent it.
- miohtama 2y agoOr they can leak your details like Equifax. Then someone goes and gets loans under your name.
- bryan_w 2y agoWhat if Google, Apple, and Microsoft had "kid mode" versions of their OS which is what is enabled by default for any under 18 buying a device and normal mode had to be enabled at point of sale with ID verification? In kid mode, it could only go to kid sites and run kid apps. If a parent ignores all proper advice and enables normal mode on their kids device, then that's on them (or lock them up, idk). The main advantage is that the id check only has to happen once, in person, and it leaves most of the responsibilities on the parent who should have a vested interest in raising their kid rather than a corporation who wouldn't.
- BriggyDwiggs42 2y agoI don’t think kids usually go buy their own devices though, so really this needs to be handled on device setup, which I believe apple phones, at least, already do now. The ID check seems wrong then; if the parent wants to allow their kid to use the device unrestricted then that’s their right.
- moi2388 2y agoHow is this not solved yet? A government API. It gives claims. Such as user x is an adult. User logs in first, authorises an app to get a specific claim a specific period or amount of times, User logs in to the app, app calls the API. There is no need for IDs or credit cards or any of the sort. The EU has already solved this years ago?
- pjc50 2y agoDid they? Why have I not heard of the EU solution?
- randunel 2y agoIt hasn't been launched, yet, but the public tender details are here https://ec.europa.eu/info/funding-tenders/opportunities/portal/screen/opportunities/tender-details/ae950883-112f-4139-989e-1c8d794bb77a-CN https://ec.europa.eu/info/funding-tenders/opportunities/port... I don't know if the commenter refers to this one or not, it's probably too recent and far from "solved". The EU portal itself has an identity verification functionality, I can use my national ID (national insurance number, specifically) in EU polls, petitions and other EU portal functions, but that's anything but anonymous by design.
- arkh 2y agoThe main problem is that you may not want the state to know how many porn sites you're accessing. That's where you'd want an intermediary: you log in on porn site A => redirects to some intermediary which only needs to check your age => login from the state, get age, send user with verified token to porn site. Porn site only knows your login and the fact you are an adult. Intermediary knows someone needed to validate their age. State knows this random no porn site wanted to check some claims about you.
- gabeio 2y agoWouldn’t this be a perfect place for something like Privacy Pass? Tokens which the government provides to users to auth them as adults but which are not trackable. https://privacypass.github.io/ https://privacypass.github.io/
- whyoddbother 2y ago[dead]
- liveoneggs 2y agoApps in app stores already have age ratings. Websites could easily add X-Recommended-Age or X-Content-Rating headers where browsers could enforce a decent set of filters for adult-oriented content. Popular platforms, I think, have age ratings on streams (twitch stream age tags), youtube, etc The above would cover 90% of content-related concerns and combined with things like cloudflare dns filtering you'd have a relatively safe internet experience. The interacting-whith-people (or oddball harms like character.ai) concerns can then be more easily policed by parents. The industry has chosen not to implement basic controls and is asking for government controls.
- robust-cactus 2y agoThis honestly. I honestly think this is so easily solved at the OS/browser level. Apple already does parental controls. Just pass 'Can view adult content' and 'can watch ads' from there to the browser. Don't even expose the actual age.
- ipython 2y agoI’ll just leave this here: https://en.m.wikipedia.org/wiki/Platform_for_Internet_Content_Selection https://en.m.wikipedia.org/wiki/Platform_for_Internet_Conten... and https://www.seomastering.com/wiki/Voluntary_Content_Rating https://www.seomastering.com/wiki/Voluntary_Content_Rating Like any other “voluntary” system, this is also doomed to fail. It’s not like the cigarette companies didn’t target children for a reason. To put it bluntly, the companies that use the “voluntary” metric that by definition restrict their reach will have less monthly active users and therefore less revenue than those who do not, so therefore nobody will. Already happened in 1998, it will definitely happen again.
- liveoneggs 2y agoIf google required the voluntary ratings headers to exist for search results, or even just hinted that they were an SEO-positive metric (like extending RICE to add D-emographic) or serving appropriate ad content this would be implemented word-wide by next week.
- ngneer 2y agoNot applicable today, but older games such as Leisure Suit Larry used to ask age verification questions, anonymous in a way that a government issued ID is not. https://allowe.com/games/larry/tips-manuals/lsl1-age-quiz.html https://allowe.com/games/larry/tips-manuals/lsl1-age-quiz.ht...
- J_Shelby_J 2y agoHahahaha, these kept me from playing the game.
- Kye 2y agoI wouldn't get a lot of these as an adult. And some are just plain wrong.