4 ms·

It's worth pointing out that full digital identity verification ("doxxing" yourself to an untrustworthy, unauditable, legally unconstrained private company) is

It's worth pointing out that full digital identity verification ("doxxing" yourself to an untrustworthy, unauditable, legally unconstrained private company) is NOT the only way to verify adulthood. We have had a system in place which enables adulthood validation without enabling digital surveillance infrastructure, with a degree of false negative risk that society has deemed acceptable for nearly 100 years now. This idea is not my own, but I'm happy to share a reasonable proposal for it. The Cashier Standard – Age Verification Without Surveillance https://news.ycombinator.com/item?id=47809795 https://news.ycombinator.com/item?id=47809795 https://claude.ai/public/artifacts/7fe74381-a683-4f49-9c2b-171cba4b3e59 https://claude.ai/public/artifacts/7fe74381-a683-4f49-9c2b-1...

jaykru 6mo ago
The "cashier standard" you advocate for has already crept toward centralized state tracking in places like Utah. When you go to a restaurant and order a drink, the staff are required to take it to the back and scan it for verification. The scanned data is also compared with a state database of DUI offenders. It's not clear whether the database is stored on site, or if that data goes out on the wire for the check; presumably the latter. Scanned data is also stored for up to 7 days by the restaurant, and it's easy to imagine further creep upping that storage bound.
- anonym29 6mo ago
  This is not the case in most of the country. Utah is largely influenced by a Mormon / LDS culture that expresses heavy opposition to drinking. I am clearly not proposing that the cards be scanned Utah style, I am proposing that they be glanced at by a cashier, everywhere else style.
  - rationalist 6mo ago
    More and more places I go in other states besides Utah, try to scan IDs when purchasing alcohol.
    - anonym29 6mo ago
      Again, the proposal isn't for a system which requires scanning of IDs, it's for a system where the cashier glances at the ID. You're arguing against a strawman. You may argue that the system proposed could evolve into the system you're describing, but still, you're arguing against a hypothetical future fiction. If we're going to be arguing about what the proposal might evolve into in the future, we might as well be arguing about what we should be doing when aliens arrive, since they might arrive in the future, too.
      - Supermancho 6mo ago
        > we might as well be arguing about what we should be doing when aliens arrive, since they might arrive in the future, too. Did aliens land in multiple states already? Strawman deflections aside, scanning is the natural evolution and has already happened across multiple kinds of exchange (money markers, various ids, various phone apps, etc). Government issue has a benefit of an independent verification system. It's super expensive for various government agencies to integrate into businesses. Constituents and businesses don't want that, leading to a much more comfortable adversarial relationship, imo.
  - traderj0e 6mo ago
    California grocery stores scan ID too
_ink_ 6mo ago
How does this prevent a second market for one time codes? I as an adult can just get a code and sell it someone else.
- anonym29 6mo ago
  It doesn't prevent it, it just disincentivizes it. As an adult, you can also go buy a beer and sell it to a minor. That said, mandatory age verification with photo ID upload and facial scans doesn't prevent workarounds either - kids use their parents' photo ID and pass facial scans with a variety of techniques, too. Nobody who understands how adversarial systems like this work is seriously expecting a 100% flawless performance of blocking every single minor and accepting every single adult, the question is how much risk is acceptable, and the risks posed by this system are acceptable for alcohol, cigarettes, and other adult items that can arguably pose much more acute risk of serious injury or bodily harm to kids.
- HWR_14 6mo ago
  Stings that catch adults reselling codes. It doesn't have to be perfect.
hypeatei 6mo ago
This type of system is a horrible idea for the following reasons: 1) the cards can just be re-sold which creates a black market and defeats the "cashier physically saw the person buying the card" angle 2) nickle and dimes people for simply browsing the internet (verification can dystopia anyone?) 3) related to #2, it creates winners in the private sector since presumably you need central authorities handing out these codes I abhor the idea of digital ID verification, but if we're going to do it, let's not create a web of new problems while we're at it.
- arowthway 6mo ago
  Is it even theoretically possible to have bearer anonymity and no reselling option at the same time?
  - terangaway 6mo ago
    With digital tokens being generated by a user (the seller) on demand, you could have a bond system where the seller places something costly on the line, that the buyer can choose to destroy or obtain. For instance, if Alice gives her age token to Bob, Bob can (if he is a troll) invalidate the token in a way that requires Alice to go to a physical location to reset her ID. I imagine this could be done with appropriate zero-knowledge measures so that the combination of Alice's age token and Bob's private key creates a capability to exercise the option, but without the service (e.g. a social media site) knowing that the token belongs to Alice, and without the ID provider (e.g. the state) knowing that Bob was the one who exercised it. While honest customers have no reason to make use of this option, if Alice blindly sells her tokens to anybody willing to pay, there's bound to be some trolls out there who will do it just for the laughs. This is far from a perfect system since a dishonest site could also make use of the option. But it theoretically works without revealing anybody's identity (unless the option is used, and then only if the service and the ID provider collude).
    - tardedmeme 6mo ago
      I set up a porn site that requires your token. Psych! It's not a porn site, it just disables your ID when you enter a token.

jaykru 6mo ago

The "cashier standard" you advocate for has already crept toward centralized state tracking in places like Utah. When you go to a restaurant and order a drink, the staff are required to take it to the back and scan it for verification. The scanned data is also compared with a state database of DUI offenders. It's not clear whether the database is stored on site, or if that data goes out on the wire for the check; presumably the latter. Scanned data is also stored for up to 7 days by the restaurant, and it's easy to imagine further creep upping that storage bound.

anonym29 6mo ago
This is not the case in most of the country. Utah is largely influenced by a Mormon / LDS culture that expresses heavy opposition to drinking. I am clearly not proposing that the cards be scanned Utah style, I am proposing that they be glanced at by a cashier, everywhere else style.
- rationalist 6mo ago
  More and more places I go in other states besides Utah, try to scan IDs when purchasing alcohol.
  - anonym29 6mo ago
    Again, the proposal isn't for a system which requires scanning of IDs, it's for a system where the cashier glances at the ID. You're arguing against a strawman. You may argue that the system proposed could evolve into the system you're describing, but still, you're arguing against a hypothetical future fiction. If we're going to be arguing about what the proposal might evolve into in the future, we might as well be arguing about what we should be doing when aliens arrive, since they might arrive in the future, too.
    - Supermancho 6mo ago
      > we might as well be arguing about what we should be doing when aliens arrive, since they might arrive in the future, too. Did aliens land in multiple states already? Strawman deflections aside, scanning is the natural evolution and has already happened across multiple kinds of exchange (money markers, various ids, various phone apps, etc). Government issue has a benefit of an independent verification system. It's super expensive for various government agencies to integrate into businesses. Constituents and businesses don't want that, leading to a much more comfortable adversarial relationship, imo.
- traderj0e 6mo ago
  California grocery stores scan ID too

_ink_ 6mo ago

How does this prevent a second market for one time codes? I as an adult can just get a code and sell it someone else.

anonym29 6mo ago
It doesn't prevent it, it just disincentivizes it. As an adult, you can also go buy a beer and sell it to a minor. That said, mandatory age verification with photo ID upload and facial scans doesn't prevent workarounds either - kids use their parents' photo ID and pass facial scans with a variety of techniques, too. Nobody who understands how adversarial systems like this work is seriously expecting a 100% flawless performance of blocking every single minor and accepting every single adult, the question is how much risk is acceptable, and the risks posed by this system are acceptable for alcohol, cigarettes, and other adult items that can arguably pose much more acute risk of serious injury or bodily harm to kids.
HWR_14 6mo ago
Stings that catch adults reselling codes. It doesn't have to be perfect.

hypeatei 6mo ago

This type of system is a horrible idea for the following reasons: 1) the cards can just be re-sold which creates a black market and defeats the "cashier physically saw the person buying the card" angle 2) nickle and dimes people for simply browsing the internet (verification can dystopia anyone?) 3) related to #2, it creates winners in the private sector since presumably you need central authorities handing out these codes I abhor the idea of digital ID verification, but if we're going to do it, let's not create a web of new problems while we're at it.

arowthway 6mo ago
Is it even theoretically possible to have bearer anonymity and no reselling option at the same time?
- terangaway 6mo ago
  With digital tokens being generated by a user (the seller) on demand, you could have a bond system where the seller places something costly on the line, that the buyer can choose to destroy or obtain. For instance, if Alice gives her age token to Bob, Bob can (if he is a troll) invalidate the token in a way that requires Alice to go to a physical location to reset her ID. I imagine this could be done with appropriate zero-knowledge measures so that the combination of Alice's age token and Bob's private key creates a capability to exercise the option, but without the service (e.g. a social media site) knowing that the token belongs to Alice, and without the ID provider (e.g. the state) knowing that Bob was the one who exercised it. While honest customers have no reason to make use of this option, if Alice blindly sells her tokens to anybody willing to pay, there's bound to be some trolls out there who will do it just for the laughs. This is far from a perfect system since a dishonest site could also make use of the option. But it theoretically works without revealing anybody's identity (unless the option is used, and then only if the service and the ID provider collude).
  - tardedmeme 6mo ago
    I set up a porn site that requires your token. Psych! It's not a porn site, it just disables your ID when you enter a token.