3 ms·
I'm not sure what my "attitude" is but I'm being pragmatic. This is not a binary situation, where it's either perfectly secure or useless. If our society is not
by DennisP 4mo ago
I'm not sure what my "attitude" is but I'm being pragmatic. This is not a binary situation, where it's either perfectly secure or useless. If our society is not willing to do what you and I prefer and leave things entirely open, then perhaps it's good enough to make things more difficult for teens to access, rather than accept pervasive surveillance to make it impossible. If people think it will improve society enough if most teens stay off certain sites, then we can do that and maintain anonymity.
I'll note that you skipped over my point that even with a "perfect" system, teens could still pay foreign porn sites etc directly. And that using a proxy would require installing an untrusted app on the phone, which would be relatively easy for parents to monitor and could be prevented entirely on iPhone. And that we can probably fix proxies with secure hardware anyway.
And no, the police idea that I do not support would not require surprise inspections. It just requires careless teenagers to occasionally reveal their identities online, with enough evidence to convince a judge to issue a warrant. It's dumb to make a federal case out of this, but not as dumb as losing all privacy and anonymity online. And, as I mentioned, this is not something actually required to make the idea workable.
I'm not going to keep repeating myself so I think I'm done here unless you have a point I haven't addressed in previous comments.
- DennisP 4mo agoThinking about this further: it looks to me like we can fully prevent proxy attacks if we assume secure hardware handling the cryptography on the client side, and send an encrypted sessionid to the client after verification. The reason is that: - We send a random number from the server at the beginning which is associated with the session, so a proxy can't just replay the encrypted proof. - We pass the server key into the proof, so a MITM attack would give the wrong server key to the client, and the real server wouldn't be able to verify the proof. Then with each request the secure hardware can provide encrypt(sessionid, nonce).
- spwa4 4mo agoThis would not be anonymous and would allow website owners to uniquely identify the hardware used to authenticate. So, once again: you can have a secure system XOR you can have anonimity.
- DennisP 4mo agoWell it would be anonymous because the client public key is randomly generated every time, and the zk proof doesn't include the identifier.
- spwa4 4mo agoIf the public key signature of that random public key can't be uniquely identified as belonging to a particular device (allowing for a device to be revocated), then all it takes is 1 compromised phone to make the system insecure ... (to say nothing of the fact that because of EU regulations the secure element is not app accessible on either apple or android. So you won't just be dependent on Google/Apple, you'll be using their APIs (which report every authentication to them) every single time an ID is needed) If you can identify the device even just with a unique identifier, it's not anonymous.
- DennisP 4mo agoI already described in detail how to do revocations despite the website not being able to identify the device. The whole point of zero knowledge is that you can prove you have possession of information with particular properties, without having to actually reveal the information. I explained how to use this in my first reply to you. You're just repeating your claim without bothering to understand the first thing about the technology I'm talking about. Age verification itself is a change to regulations. Obviously to make a private system, our regulations would have to change in a way that allows that, instead of in a way that destroys all privacy as they're attempting now.