4 ms·

Presenting government ID to random entities is literally what government ID's exist for. Paranoia about this is silly. Additionally, intentionally aiding some

Presenting government ID to random entities is literally what government ID's exist for. Paranoia about this is silly. Additionally, intentionally aiding someone (especially a minor) in circumventing the law is very likely to not be legal, especially when legality is largely determined by a jury, and especially^2 when the facts of the case against you are the most egregious that the government can find, especially^3 when you are profiting from it. It will be something like a 12yo using your service to access something absolutely shocking, and you or someone else will be forced to read a detailed text description of it in front of a jury. This doesn't even begin to address civil liability. I'm not saying what you are doing is 'wrong', I'm saying you should talk to a lawyer who specializes in this sort of thing before you are forced to.

prism56 1y ago
Is it though? Unfortunately this could have been implemented much better with a decentralised approach. Its not the showing the ID its having it potentially tied to your accounts and usage. Having your ID tied to your selfie which could be leaked.
smallnix 1y ago
Please post a link to a picture of your national ID. /s
- ltbarcly3 1y ago
  I've had to upload my ID card to send money, open a bank account online, verify my identity for a dating app, book an international flight, and ironically to register for the app to have an electronic version of my id on my phone, and weirdly to pay a traffic ticket (why do they care who pays it?), get a discount on my Amazon Prime subscription, and finally to reset my password for my ID.me login for government websites. So all of those are 'fine' I guess, but god forbid you upload it to a third party verification service (the same one that was used for one or more of the above cases where I uploaded my id) to watch pornography, that's where we draw the line? You are being absurd. I don't agree with this requirement, but I'm also not so dishonest that I would pretend that it's a security issue.
  - scarface_74 1y ago
    You don’t see the difference between it getting out some place I travelled to, opened a bank account to, etc than if I visit grandmamidgetporn.com?
    - ltbarcly3 1y ago
      Nobody uploads their ID to some porn site, they work with some reputable id verification company.
      - scarface_74 1y ago
        Out of curiosity, I wanted to see how the five most popular porn sites handled age verification since I live in Florida. One of the states that require it. I started here (safe for work - just list of the most popular websites overall - not porn sites) https://conversion.ag/blog/top-websites-in-the-world/ https://conversion.ag/blog/top-websites-in-the-world/ Do any of these alternatives seem like something you would want to use? #10 doesn’t require any age verification. #12 doesn’t allow you to sign in at all unless you are a creator #14 no verification needed #25 requires you to use your Google or Twitter account or an email address. #61 requires you to log in with your Google account. #69 wants you to upload your drivers license or passport to a site called https://saas-onboarding.incodesmile.com/multimedia214/flow/65fd460613e79578dc6fed19?uuid=0f952b15-d373-4a76-863f-030609b159ed https://saas-onboarding.incodesmile.com/multimedia214/flow/6...
  - jofla_net 1y ago
    Its not the 'voluntary' services that may or may not want to see your ID, its the existence of any and all Mandatory legislation, which would be a nightmare. This is a tech site so I imagine the average user has some deeper understanding than most(technically), but I guess imagination is off the table. What this would do (requiring all sites) is basically be the end for any and all attempts against identity fraud protection. Indulge a bit of imagination for a moment. If EVERY site is now required to do some form of verification, than everyone's infrastructure now becomes prime targets for PII and troves of identity information, and wherein amazon, banks, and ID.me can be considered to be at or near the top (i'd hope) for keeping their machines tied down, the reality is that EVERYONE'S servers ARE NOT so will maintained. They WILL be attacked, and shims inserted to steal such identity information, as people have ZERO idea, as they're being shunted around to all thees angel-invested ID startups, as to what is or isn't legit, during signup. Wholly, identical pages/domains, as are often seen to steal traditional PCI information, will now be repurposed to this. Its not that the reputable ones are likely to fall, its the small vendors who don't understand that once a customer is EXPECTED to fork over ID to sign up, any hiccup in the process will be unnoticed, and it'll be ripe for abuse if the server/service is ever compromised.
Squeeeez 1y ago
> Paranoia about this is silly. Having had to deal with some clients with slightly sensitive data, I wish. Photocopies and printed screenshots lying around in the open, CC data copy-pasted manually to other fields or to generic excel sheets because otherwise "it disappears and we can't book late fees" etc. Not even only the "random third-party" companies vetted and specialised in ID verification, but then they get a new support contract down the road, and a fourth- or fifth-party agent who had the cheapest offer now has remote admin access to those desktops. Probability is low, true. But all it takes is one compromised access. We all choose our battles probably.
protocolture 1y ago
>Presenting government ID to random entities is literally what government ID's exist for. Wrong lmao. All forms of Government ID are PII and should be treated as sensitive. https://www.esafety.gov.au/young-people/protecting-your-identity https://www.esafety.gov.au/young-people/protecting-your-iden... Heres basic information from a government looking to enact these same laws. >Nearly every app, social media platform or website asks you for at least some personally identifiable information. But this data can be stolen or misused. That’s why it’s important to keep it as private and secure as possible. If you have to share it, make sure it’s only used by trusted services with your knowledge and consent. Wow thats great advice.
pas 1y ago
showing a plastic card in a store to buy the yearly Cum Companion Calendar or whatever is one thing, because the clerk likely is not a savant with eidetic memory, whereas online there's this little thing happening called data processing which starts with the only thing we usually don't want with our ID. copying.
- HappMacDonald 1y ago
  I wonder what the legality would be for the brick and mortar stores (especially the big chain ones) to just start asking customers for ID and then swiping them through scanners that can do all of the eidetic memory work for them?
  - sitkack 1y ago
    Kroger already does this, they will get sued for millions and millions of dollars when they have a data breach.

prism56 1y ago

Is it though? Unfortunately this could have been implemented much better with a decentralised approach. Its not the showing the ID its having it potentially tied to your accounts and usage. Having your ID tied to your selfie which could be leaked.

smallnix 1y ago

Please post a link to a picture of your national ID. /s

ltbarcly3 1y ago
I've had to upload my ID card to send money, open a bank account online, verify my identity for a dating app, book an international flight, and ironically to register for the app to have an electronic version of my id on my phone, and weirdly to pay a traffic ticket (why do they care who pays it?), get a discount on my Amazon Prime subscription, and finally to reset my password for my ID.me login for government websites. So all of those are 'fine' I guess, but god forbid you upload it to a third party verification service (the same one that was used for one or more of the above cases where I uploaded my id) to watch pornography, that's where we draw the line? You are being absurd. I don't agree with this requirement, but I'm also not so dishonest that I would pretend that it's a security issue.
- scarface_74 1y ago
  You don’t see the difference between it getting out some place I travelled to, opened a bank account to, etc than if I visit grandmamidgetporn.com?
  - ltbarcly3 1y ago
    Nobody uploads their ID to some porn site, they work with some reputable id verification company.
    - scarface_74 1y ago
      Out of curiosity, I wanted to see how the five most popular porn sites handled age verification since I live in Florida. One of the states that require it. I started here (safe for work - just list of the most popular websites overall - not porn sites) https://conversion.ag/blog/top-websites-in-the-world/ https://conversion.ag/blog/top-websites-in-the-world/ Do any of these alternatives seem like something you would want to use? #10 doesn’t require any age verification. #12 doesn’t allow you to sign in at all unless you are a creator #14 no verification needed #25 requires you to use your Google or Twitter account or an email address. #61 requires you to log in with your Google account. #69 wants you to upload your drivers license or passport to a site called https://saas-onboarding.incodesmile.com/multimedia214/flow/65fd460613e79578dc6fed19?uuid=0f952b15-d373-4a76-863f-030609b159ed https://saas-onboarding.incodesmile.com/multimedia214/flow/6...
- jofla_net 1y ago
  Its not the 'voluntary' services that may or may not want to see your ID, its the existence of any and all Mandatory legislation, which would be a nightmare. This is a tech site so I imagine the average user has some deeper understanding than most(technically), but I guess imagination is off the table. What this would do (requiring all sites) is basically be the end for any and all attempts against identity fraud protection. Indulge a bit of imagination for a moment. If EVERY site is now required to do some form of verification, than everyone's infrastructure now becomes prime targets for PII and troves of identity information, and wherein amazon, banks, and ID.me can be considered to be at or near the top (i'd hope) for keeping their machines tied down, the reality is that EVERYONE'S servers ARE NOT so will maintained. They WILL be attacked, and shims inserted to steal such identity information, as people have ZERO idea, as they're being shunted around to all thees angel-invested ID startups, as to what is or isn't legit, during signup. Wholly, identical pages/domains, as are often seen to steal traditional PCI information, will now be repurposed to this. Its not that the reputable ones are likely to fall, its the small vendors who don't understand that once a customer is EXPECTED to fork over ID to sign up, any hiccup in the process will be unnoticed, and it'll be ripe for abuse if the server/service is ever compromised.

Squeeeez 1y ago

> Paranoia about this is silly. Having had to deal with some clients with slightly sensitive data, I wish. Photocopies and printed screenshots lying around in the open, CC data copy-pasted manually to other fields or to generic excel sheets because otherwise "it disappears and we can't book late fees" etc. Not even only the "random third-party" companies vetted and specialised in ID verification, but then they get a new support contract down the road, and a fourth- or fifth-party agent who had the cheapest offer now has remote admin access to those desktops. Probability is low, true. But all it takes is one compromised access. We all choose our battles probably.

protocolture 1y ago

>Presenting government ID to random entities is literally what government ID's exist for. Wrong lmao. All forms of Government ID are PII and should be treated as sensitive. https://www.esafety.gov.au/young-people/protecting-your-identity https://www.esafety.gov.au/young-people/protecting-your-iden... Heres basic information from a government looking to enact these same laws. >Nearly every app, social media platform or website asks you for at least some personally identifiable information. But this data can be stolen or misused. That’s why it’s important to keep it as private and secure as possible. If you have to share it, make sure it’s only used by trusted services with your knowledge and consent. Wow thats great advice.

pas 1y ago

showing a plastic card in a store to buy the yearly Cum Companion Calendar or whatever is one thing, because the clerk likely is not a savant with eidetic memory, whereas online there's this little thing happening called data processing which starts with the only thing we usually don't want with our ID. copying.

HappMacDonald 1y ago
I wonder what the legality would be for the brick and mortar stores (especially the big chain ones) to just start asking customers for ID and then swiping them through scanners that can do all of the eidetic memory work for them?
- sitkack 1y ago
  Kroger already does this, they will get sued for millions and millions of dollars when they have a data breach.