4 ms·

What I find particularly tragic about all of this legislation (the OSA and now this) is that there are obviously technical people in the room that would advise

What I find particularly tragic about all of this legislation (the OSA and now this) is that there are obviously technical people in the room that would advise against this clusterfuck of a direction and they are being ignored by politicians who think the internet is something they can aggressively control. This will continue to push people towards providers who operate outside UK jurisdiction or providers that care less about UK law and are less trustworthy. I remain upset that they do this without building the necessary infra. They already assert identity when applying for a passport (and they do this very well). If they had extended this process by creating a OAuth compliant digital id provider first, then they could have avoided all the problems on the day the OSA dropped. Even better, they could have created a non-governmental agency to exchange tokens and urls to prevent the privacy issue of the government knowing which sites people are visiting. Instead we have this status quo of encouraging UK citizens to hand over their identity documents to dubious third-parties or shifting their traffic from the UK externally to avoid these checks.

embedding-shape 9mo ago
> by politicians who think the internet is something they can aggressively control You seem to believe they're wrong. Since they're the ones who come up with the laws of the land, I think it's important to realize that they can and do aggressively control access to the internet in their country. It sucks, but it's the reality.
- Quarrelsome 9mo ago
  > they can and do aggressively control access to the internet yes but this is like watching someone deal with an ant infestation by stamping on them. They're not solving the issue and unlike the ant analogy, they're making the problem worse.
FrostViper8 9mo ago
> Even better, they could have created a non-governmental agency to exchange tokens and urls to prevent the privacy issue of the government knowing which sites people are visiting. The privacy issue would still exist. They can tie your online activity directly to these tokens.
- Quarrelsome 9mo ago
  not with a non-governmental agency doing the exchange. All they would see are tokens going out. You would need the non-governmental agency to share the urls with the government agency for the activity to be tied directly which would undermine the entire purpose of that architecture.
  - FrostViper8 9mo ago
    > You would need the non-governmental agency to share the urls with the government agency for the activity to be tied directly which would undermine the entire purpose of that architecture. Which would absolutely would happen. The authorities will ask the non-gov agency for the details and they will be provided.
    - Quarrelsome 9mo ago
      that's like stating that there's no value in creating a financial regulator to set interest rates because the government will just tell them to set them to whatever they demand. There's still value in it.
      - iamnothere 9mo ago
        Yes, the “value” being centralizing identity and access so OFCOM and GHCQ can finger dissenters more easily.
        Quarrelsome 9mo ago
        the UK already forces ISPs to hold a database of the hosts you have visited in the last three years. By implementing the laws in the way they currently are doing undermines their own legislation by pushing UK users into having a tangible reason to hide their their browsing patterns from UK networks by funneling their traffic through VPNs or other proxies to avoid age gates. Tin foil aside, my issue is that they're not even good at what they're trying to do. Their policy is inconsistent with their aims and lacks technical strategy. You think they're worried about dissenters when in practice they're more worried about elections in 2029 and whatever pearl clutching users post on mumsnet.
chrisjj 9mo ago
> If they had extended this process by creating a OAuth compliant digital id provider first, then they could have avoided all the problems on the day the OSA dropped. Far less than all. See Australia, where age restriction is routinely evaded through adult collusion.

embedding-shape 9mo ago

> by politicians who think the internet is something they can aggressively control You seem to believe they're wrong. Since they're the ones who come up with the laws of the land, I think it's important to realize that they can and do aggressively control access to the internet in their country. It sucks, but it's the reality.

Quarrelsome 9mo ago
> they can and do aggressively control access to the internet yes but this is like watching someone deal with an ant infestation by stamping on them. They're not solving the issue and unlike the ant analogy, they're making the problem worse.

FrostViper8 9mo ago

> Even better, they could have created a non-governmental agency to exchange tokens and urls to prevent the privacy issue of the government knowing which sites people are visiting. The privacy issue would still exist. They can tie your online activity directly to these tokens.

Quarrelsome 9mo ago
not with a non-governmental agency doing the exchange. All they would see are tokens going out. You would need the non-governmental agency to share the urls with the government agency for the activity to be tied directly which would undermine the entire purpose of that architecture.
- FrostViper8 9mo ago
  > You would need the non-governmental agency to share the urls with the government agency for the activity to be tied directly which would undermine the entire purpose of that architecture. Which would absolutely would happen. The authorities will ask the non-gov agency for the details and they will be provided.
  - Quarrelsome 9mo ago
    that's like stating that there's no value in creating a financial regulator to set interest rates because the government will just tell them to set them to whatever they demand. There's still value in it.
    - iamnothere 9mo ago
      Yes, the “value” being centralizing identity and access so OFCOM and GHCQ can finger dissenters more easily.
      - Quarrelsome 9mo ago
        the UK already forces ISPs to hold a database of the hosts you have visited in the last three years. By implementing the laws in the way they currently are doing undermines their own legislation by pushing UK users into having a tangible reason to hide their their browsing patterns from UK networks by funneling their traffic through VPNs or other proxies to avoid age gates. Tin foil aside, my issue is that they're not even good at what they're trying to do. Their policy is inconsistent with their aims and lacks technical strategy. You think they're worried about dissenters when in practice they're more worried about elections in 2029 and whatever pearl clutching users post on mumsnet.

chrisjj 9mo ago

> If they had extended this process by creating a OAuth compliant digital id provider first, then they could have avoided all the problems on the day the OSA dropped. Far less than all. See Australia, where age restriction is routinely evaded through adult collusion.