4 ms·
Age verification can be achieved without destroying anonymity and privacy online using anonymous credential systems, but it has to be designed that way from the
by goda90 6mo ago
Age verification can be achieved without destroying anonymity and privacy online using anonymous credential systems, but it has to be designed that way from the ground up, and no one pushing age verification is interested in preserving privacy.
- Forgeties79 6mo agoAnd they continue to act like opposition just wants a wild west/don't care about kids, which is the oldest trick in the book. We just don't want "protect the kids" leveraged to tear up our rights. It's addressing a real problem in a bad way.
- jMyles 6mo agoI mean, it's more than that. I _want_ to protect kids' right to be part of the human connectome. The "protect the kids" (by disallowing them their freedom of thought on the internet) is just naked ageism.
- Forgeties79 6mo agoFair point
- dpark 6mo agoSo do you want 5 year olds driving on the highway and 8 year olds doing shots of tequila or are you ageist? Or perhaps protecting kids isn’t really ageism at all.
- Forgeties79 6mo agoIt depends on what you're depriving them of too. Those are very extreme examples with little to no upside.
- dpark 6mo agoDisagree. We can discuss what restrictions are appropriate or reasonable without calling it ageism. Calling it ageism is an emotional appeal, not a principled stance.
- Forgeties79 6mo agoAgeism is a legally defined form of discrimination as well as the subject of ethical discussions. It's a real, defined thing. Just because we disagree on what qualifies as ageism doesn't mean you get to call foul and say it's irrational/emotional.
- dpark 6mo agoThis is literally a “think of the children[‘s freedom]” appeal. You’re not arguing for or against the restriction on its merits. In the US at least there’s also no such thing legally as age discrimination against minors so far as I’m aware. Edit: Let me frame this differently. “Ageism” is basically by definition bad, so applying the term “ageism” to a restriction is a an attempt to label the restriction bad without establishing that on its own merits. If you try to provide a consistent definition of “ageism” that applies to restricting access to the internet but not restricting access to alcohol, you will most certainly have to resort to phrases like “reasonable restrictions” (if not, I’m very interested in your definition), which means that there’s still a need to establish what is reasonable. Applying the label “ageism” without establishing reasonableness is then a circular argument.
- Forgeties79 6mo agoYou’ve lost me.
- dpark 6mo agoYou* are using “ageism” as a synonym for “bad”. You are also labeling restrictions as “ageism” without establishing that they are actually bad. In effect you are saying “that’s bad!” without accepting the burden of establishing why it’s bad, but hiding this behind a different term that carries more emotional weight. It’s a very politically effective strategy but it’s not logically sound. * actually jMyles
- IAmBroom 6mo agoQuit arguing as though the topic is binary. It's not.
- dpark 6mo agoI’m not saying anything is binary. I’m saying it’s not ageism to restrict child access. It could be a bad idea but that doesn’t make it ageism.
- pseudalopex 6mo agoPlease respond to the strongest plausible interpretation of what someone says, not a weaker one that's easier to criticize.[1] [1] https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html
- dpark 6mo agoI did. Restricting children’s access to certain things is not ageism. We can argue the merits of restricting children’s access to the internet, or certain books, or alcohol, or pornography, or whatever else. We can debate the merits of those various restrictions based on the benefits and costs to both the children and society at large. But it is not ageism to attempt to protect children. It is not ageism even of the restriction is a bad idea. To claim it is ageism is an emotional appeal (“ageism bad!”), not a logical one.
- Forgeties79 6mo agoYou jumped to children behind the wheel of vehicles and doing tequila shots. There is no way that was a serious effort at good faith discourse.
- dpark 6mo agoI used a rhetorical device to demonstrate why restricting children’s activities is not simply ageism. I don’t know how you can seriously come here and accuse me of engaging in bad faith when I’ve taken the time to make my viewpoint explicit multiple times in this thread now, including directly to you.
- Forgeties79 6mo agoHyperbole is a rhetorical device, if that’s what you mean. Just because I had a hard time following your logic doesn’t mean I didn’t engage in good faith. You also seem to be arguing in a heated way with every person who responds to you. Either way it’s probably best if we both move on
- kps 6mo agoIf the 5-year-old has passed a proper driving test, why not?
- angry_octet 6mo ago[dead]
- everdrive 6mo agoThis is something that's technologically feasible, but will never happen in practice.
- devmor 6mo agoThey are interested - interested specifically in opposing it. These groups don't care about age verification - it is a trojan horse for censorship.
- deleted 6mo ago[deleted]
- Aurornis 6mo agoThis comes up in every thread, but the purpose of the laws is not to verify that someone can access an anonymous token. If we had a true anonymous token system then everyone would just share tokens around. The real world analog would be if you could buy beer at the store with anyone's ID because they didn't make any effort to reasonably check that the ID was yours or discourage people from sharing or copying IDs. The systems enforce identity checking because that's the only way age verification can be done without having some reason to discourage or detect credential sharing. The retort that follows is always "Well it's not perfect. Nothing is perfect." The trap is convincing ourselves that a severely imperfect system would be accepted. What would really happen is that it would be the trojan horse to get everyone on board with age verification, then the laws would be changed to make them more strict.
- goda90 6mo agoMake it a duplication resistant hardware token that you can get for free then. The stakes just aren't high enough to worry about these kinds of edge cases.
- akersten 6mo agoThe stakes just aren't high enough for us to implement any of this crap for the Internet in the first place. Let alone an entire government-administered hardware supply chain.
- zelphirkalt 6mo agoWould be great, if we could all agree on that and simply everyone who is tasked implementing it in code refusing, and then letting non-engineers themselves try to do it and fail, and then have a good laugh about the figurative middle finger we gave them for their bs.
- dpark 6mo agoYeah, right. So the government is going to spend billions on “porn tokens”. That’s going to get through the legislature. I’m sure there wouldn’t be a brisk illicit trade in these tokens either. Certainly no one would be incentivized to sell these tokens to teenagers for easy profit.
- intended 6mo agoAFAIK there are designs in the EU that respect privacy. There is a range of options being pushed around the world, and theres definitely a few of them which are more technically defensible than others.
- EmbarrassedHelp 6mo agoThe EU's proposed design still has a ton of issues.
- jrcplus 6mo agoElaborate please
- EmbarrassedHelp 6mo agoThe anti-tampering measures require banning rooting/jailbreaking, banning the installation of non-Google/Apple approved operating systems (ex: GrapheneOS), and require that you install Google Play Services/IOS equivalent. The app also requires that you first send your personal information to a closed source backend, in exchange for easily trackable tokens used as "proof".
- TFNA 6mo ago> banning the installation of non-Google/Apple approved operating systems (ex: GrapheneOS) Do you have a link where I could read more about this? GrapheneOS is known for being the alternative Android where many bank apps in the EU still work, and this is the first I have heard that the age verification app definitely wouldn’t run on GrapheneOS.
- dpark 6mo agoNo it really can’t. Age verification requires identification. Even if you could anonymously verify age to issue a “confirmed adult” credential, the whole chain of trust breaks down if one bad actor shares their anonymous credential and suddenly everyone is verifiably an adult. The solution to that attack is naturally to have some kind of system for sites to report obviously-shared credentials. Which means tracking.
- goda90 6mo agoThere's already authorities that know your age, so verifying age with them to get the credential isn't the part that needs to be anonymous. The issue is them knowing what you do with your credential, which anonymous credentials solves by making it impossible to track tokens back to the credential holder. As far as sharing, there are some possible mitigations.
- dpark 6mo agoRight. And the possible sharing mitigations generally amount to tracking. This isn’t even getting to the issue that mandating government-issued credentials is the “foot in the door”. If you mandate the use of government creds for accessing websites, it’s an obvious step to turn around and demand that sites report credential use to “fight credential fraud”.
- armchairhacker 6mo agoBut likewise, someone can share (or have stolen) their ID https://news.ycombinator.com/item?id=47951372 https://news.ycombinator.com/item?id=47951372
- wesselbindt 6mo agoThe destruction of privacy is the whole point.
- 2ndorderthought 6mo agoYep look who is backing these regulations. It's absolutely for no other purpose than to further enable surveillance capitalism and the surveillance state.
- Seattle3503 6mo agoOnly for a subset of people. Many would accept solutions that preserve privacy. Divide and conquer. Remove supporters from the anti-privacy group.
- bigbugbag 6mo agothe EU is. but their verification age process shows the design flaw that preserving privacy means the system can be easily circumvented with a mitm allowing to circumvent the age verification process.
- kro 6mo agoYoung people setting up a MITM and getting deeper into tech rather than consuming short-form-content is something I'd appreciate as a nice bonus effect. Of course the EU solution isn't perfect and there are bypasses (there will always be and have always been), but let's appreciate it that way rather than too many PII, if it must come. I'd prefer the Age/RTA header and parental responsibility too.
- zelphirkalt 6mo agoIsn't MITM always a possibility? One person has access, then they could be the man in the middle and stream or access, store and send to others or they get "hacked" with reasonable deniability, etc. and suddenly others have access without age verification again. For example someone could install a device grabbing all frames sent through a display port cable.
- nonethewiser 6mo agoYes, but this is not popular among technologists (see the average sentiment towards age verification here). Legislators aren't going to build technology. This will happen if age verification actually becomes a widespread requirement. But until that point the prospective builders will be fighting the entire premise of such systems.
- deleted 6mo ago[deleted]
- wmf 6mo agoApple and Google have already implemented private age verification.
- EmbarrassedHelp 6mo ago> Age verification can be achieved without destroying anonymity and privacy online Yeah its extremely simple. You provide a simple message asking the user if they are an adult, and they either click "yes" or "no". That method requires exchanging zero personal information with anyone, other than a simple boolean value to the site/service you are using. Any other system requires letting a third party violate your privacy.